Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
File: wA7St1AmRN0DbiOS-wMyz7FNuNI.mft (raw, json)
Hash identifier: bXReatH1mf2qzs9w8JJJPJeNAYNTPLkf4sJAVN2NZuQ=
Subject key identifier: 37:99:A6:09:87:65:A9:BD:35:B6:FF:8B:DD:7E:19:21:9A:99:FB:6E
Authority key identifier: C0:0E:D2:B7:50:26:44:DD:03:6E:23:92:FB:03:32:CF:B1:4D:B8:D2
Certificate issuer: /CN=c00ed2b7502644dd036e2392fb0332cfb14db8d2
Certificate serial: 0199FC8FB4AC3FA6779C254299D298042FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: wA7St1AmRN0DbiOS-wMyz7FNuNI.crl (hash: Rsy46jjQ2GvVwCQJwUZi0aGjZuHLtoQGJbar3X4K7qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b4:ac:3f:a6:77:9c:25:42:99:d2:98:04:2f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00ed2b7502644dd036e2392fb0332cfb14db8d2
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=3799a6098765a9bd35b6ff8bdd7e19219a99fb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:0d:da:b0:ca:ab:07:ef:1a:44:d8:8c:ad:
c1:4c:f7:ce:db:77:8c:10:7c:bb:50:48:dc:73:7f:
12:bb:c2:e1:81:f2:db:e2:3a:79:3b:0c:2d:4f:e7:
08:38:ad:73:ec:c3:6b:13:aa:da:4f:4c:1b:e2:78:
34:3d:c6:2d:5a:b9:ae:7e:b6:79:26:01:eb:23:72:
19:84:f7:38:be:7d:2b:fe:00:96:4f:b8:af:62:44:
43:02:62:8b:7d:29:30:34:bd:ba:76:ad:dd:0b:0a:
1a:82:f1:d5:ce:0f:be:81:d4:a5:65:3e:3a:6e:35:
09:aa:ba:00:40:a2:ff:27:e4:76:cb:72:f7:b7:a7:
90:2e:34:f4:b0:02:ea:6b:9a:40:ab:b6:fb:4b:12:
e2:ff:ff:75:dc:5a:e2:6c:02:25:a3:d5:1b:47:9c:
f5:99:e2:b1:fb:11:0a:26:0e:dc:06:20:d7:38:9a:
16:fd:bc:86:b7:3a:83:dc:54:e9:9c:ce:fd:30:85:
72:76:a1:08:c4:96:6c:9a:da:5b:68:f1:c9:73:e4:
36:92:88:e8:d3:07:97:c3:8e:52:8a:76:92:aa:b0:
b8:50:cc:77:b2:fd:29:2e:11:56:64:5e:43:b4:ce:
b8:42:37:90:f7:3c:37:75:a1:ad:62:b5:e6:f7:72:
95:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:99:A6:09:87:65:A9:BD:35:B6:FF:8B:DD:7E:19:21:9A:99:FB:6E
X509v3 Authority Key Identifier:
keyid:C0:0E:D2:B7:50:26:44:DD:03:6E:23:92:FB:03:32:CF:B1:4D:B8:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a2:5a:e3:5f:1a:e9:e0:f3:3d:85:35:66:32:70:88:d7:22:
24:a7:1e:7e:18:56:f1:4a:ab:89:56:25:5d:fb:b3:98:bf:5a:
19:a8:8a:be:ad:73:34:aa:78:0b:fe:74:d0:2c:0b:77:eb:6e:
a9:91:e0:6d:bf:55:8b:a3:ab:8a:cc:c5:1b:81:86:28:ee:3a:
eb:38:ce:6a:88:49:6a:e4:c7:ca:71:26:62:b2:41:65:8b:6f:
23:64:14:97:f3:5c:b2:52:b2:bc:ab:aa:80:d5:c8:d6:ec:8d:
cd:0a:0e:00:9a:dc:05:3b:e0:36:1d:c6:db:53:d6:1d:4c:0b:
76:5e:3b:55:ec:f5:fb:78:02:83:25:62:88:e0:9c:1c:47:fb:
c0:3c:04:8e:de:43:c7:1d:ab:37:31:04:46:1b:5f:a4:42:e1:
79:c4:a8:6e:9c:4c:3b:69:46:fd:63:3e:03:41:9d:bc:10:6f:
aa:c3:76:4f:85:95:7c:08:5b:b9:6e:71:62:a4:2a:c4:c3:e2:
60:57:ea:22:63:be:20:9d:d8:84:00:8e:4a:dc:b7:72:22:48:
5e:f1:38:05:4d:b7:af:ee:8a:bd:1d:15:27:a4:b0:22:8e:6e:
d1:b3:40:89:14:d8:63:62:82:cc:8e:b2:86:85:5f:bc:cd:08:
7a:c0:24:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:51 2025 by rpki-client