Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
File: Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft (raw, json)
Hash identifier: zW1gRMkSfMD1TfZXDskW3aRnoJRYFcKxtgWphKfzZHM=
Subject key identifier: AA:6B:C4:C0:C9:ED:A1:84:20:7D:D5:AA:53:C9:2A:C9:1A:17:3C:91
Authority key identifier: 5A:1D:57:E0:60:D1:74:5D:BB:92:38:91:47:F0:1F:60:4E:CF:BA:AC
Certificate issuer: /CN=5a1d57e060d1745dbb92389147f01f604ecfbaac
Certificate serial: 0199FBEB58240CAA60BBE3C22833705E4543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
Manifest number: 14D9
Signing time: Sun 19 Oct 2025 10:02:08 +0000
Manifest this update: Sun 19 Oct 2025 10:02:08 +0000
Manifest next update: Mon 20 Oct 2025 10:02:08 +0000
Files and hashes: 1: Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl (hash: QwtyHI5vstyHXx0tMTu2Pq23A7CcFbFjSVKkjJF3hD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:58:24:0c:aa:60:bb:e3:c2:28:33:70:5e:45:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1d57e060d1745dbb92389147f01f604ecfbaac
Validity
Not Before: Oct 19 10:02:08 2025 GMT
Not After : Oct 20 10:02:08 2025 GMT
Subject: CN=aa6bc4c0c9eda184207dd5aa53c92ac91a173c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:b9:80:cf:18:72:e0:27:13:47:ee:73:8f:
18:87:03:b9:a4:2a:a8:df:4a:04:2a:5a:9b:8d:1b:
f4:e5:46:14:83:82:43:ce:c1:e8:21:d7:63:33:d7:
7b:b1:ee:7a:87:a3:95:0f:7b:8b:64:1e:6f:f9:0b:
be:10:89:41:af:02:52:7c:19:80:d6:bb:dc:47:a1:
4c:24:2f:fc:93:91:0f:c6:08:03:31:53:91:e6:72:
b2:28:e9:07:50:4e:73:3f:80:cb:59:66:ba:1f:68:
93:ee:a2:7f:bc:19:93:1c:3e:01:2e:6f:38:12:54:
7b:6a:e6:cb:aa:20:5e:57:54:94:80:9f:e1:ff:14:
59:2d:de:c3:00:5b:8f:65:7c:07:49:ea:b9:e1:de:
71:fd:55:97:62:af:3a:72:e5:b3:59:a3:0c:d9:75:
7b:55:52:23:1c:a8:19:50:65:f4:58:f0:89:a9:9c:
d0:ec:62:97:49:91:df:d0:05:85:ad:85:19:2d:b6:
b5:78:47:50:c5:c0:1c:2f:82:e3:9f:87:4a:23:73:
da:ab:7c:39:b7:09:71:c1:e1:3c:9a:b1:01:8b:29:
74:b2:5f:5d:ef:3d:1c:dd:56:a2:db:a9:54:90:97:
9b:aa:96:51:7b:6b:26:c4:d2:0d:07:d2:66:3a:e1:
8a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6B:C4:C0:C9:ED:A1:84:20:7D:D5:AA:53:C9:2A:C9:1A:17:3C:91
X509v3 Authority Key Identifier:
keyid:5A:1D:57:E0:60:D1:74:5D:BB:92:38:91:47:F0:1F:60:4E:CF:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f4:8f:8d:0d:e5:b8:99:2a:41:6c:ca:a1:1f:f6:75:53:bf:
73:cc:4a:bc:88:66:21:f6:ea:5d:a3:c8:9a:90:a8:1f:d8:90:
98:fb:eb:59:58:92:d7:51:2b:fb:63:86:c7:de:1c:81:43:94:
25:aa:2f:be:78:41:05:84:d2:c2:27:07:cd:c3:19:ce:a5:f6:
7e:bb:46:f3:2e:4a:93:d8:44:ca:37:f6:7e:c8:7f:d6:70:80:
b2:a5:f6:0d:7a:37:01:24:c0:3a:45:6a:eb:c5:4b:ee:af:b0:
75:c9:5a:4a:7b:63:bb:d7:51:e6:f7:3a:14:14:bd:72:45:3b:
3e:9f:b6:0f:71:12:0f:d9:18:6e:42:a0:30:81:6f:cd:b7:b0:
45:1b:47:0c:3a:a9:65:fe:72:bb:ef:25:49:4b:34:76:fc:27:
61:b0:f4:14:2d:58:18:d5:03:af:bd:11:06:71:2a:12:09:93:
4e:1a:6a:61:0b:0c:2c:74:b9:c3:56:c7:2a:7e:15:12:c2:ac:
34:86:9c:52:65:c4:9a:fb:0a:17:07:c9:dc:b5:e6:a7:c4:66:
57:39:ec:fb:ed:a3:08:2b:68:d2:b1:84:20:63:55:96:94:44:
a5:8b:6f:d2:56:70:af:fa:b4:36:e9:7e:18:fe:64:25:77:93:
ed:d7:fe:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:39 2025 by rpki-client