Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
File: wsej20o9La--GGqmhfRzbqfQjDg.mft (raw, json)
Hash identifier: LqrdgvvKECfFrYerbdbSG7oYzrAdk0oC69YpyOQun2E=
Subject key identifier: C7:C9:A1:15:AC:FF:80:EC:8F:0B:E5:47:09:98:B4:CB:6D:C4:30:D3
Authority key identifier: C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
Certificate issuer: /CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Certificate serial: 0199FC8F25BF154D9DA770AA015D6325C603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
Manifest number: 1039
Signing time: Sun 19 Oct 2025 13:01:03 +0000
Manifest this update: Sun 19 Oct 2025 13:01:03 +0000
Manifest next update: Mon 20 Oct 2025 13:01:03 +0000
Files and hashes: 1: wsej20o9La--GGqmhfRzbqfQjDg.crl (hash: PeCAko9DUP5UfTDJgDqWpGPRwtNlgvifJ90hWa+iY7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:25:bf:15:4d:9d:a7:70:aa:01:5d:63:25:c6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Validity
Not Before: Oct 19 13:01:03 2025 GMT
Not After : Oct 20 13:01:03 2025 GMT
Subject: CN=c7c9a115acff80ec8f0be5470998b4cb6dc430d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:fc:61:bb:e7:82:a6:61:11:b6:30:f2:5c:
93:d1:98:7f:65:e2:e5:94:7e:7e:64:83:ed:99:b6:
52:18:c8:1c:37:d4:49:eb:61:cc:05:10:b4:91:2e:
33:aa:e5:f6:07:9d:bc:b2:28:9b:a7:1f:88:81:31:
0f:f1:7d:d7:a7:1d:8c:b9:7a:af:2a:91:38:64:64:
df:e3:4e:e1:41:8a:53:74:de:08:f3:e4:45:04:67:
b0:c4:96:18:aa:bc:15:ac:45:5c:50:b9:23:8f:8d:
47:d1:e9:a6:a8:a9:f7:09:2e:ca:84:3e:c1:18:46:
7a:93:ec:18:f1:73:55:8a:0e:bc:dc:cb:e5:0c:37:
c4:8f:31:ce:0c:60:9a:a6:da:48:a7:6e:1e:b2:4b:
36:6e:1b:a7:ae:8d:d7:ae:5b:32:2b:7c:9e:79:e7:
6a:17:33:7a:08:bb:16:4b:c1:e6:b3:80:9b:38:57:
24:ec:79:3e:49:8a:0a:13:12:63:79:a8:34:c3:ad:
d1:2a:14:4f:d9:75:b7:2a:21:c0:6b:e8:c0:30:d4:
ff:38:06:9e:2f:42:87:dc:02:d2:12:b7:bd:d1:70:
11:19:f3:73:93:5a:11:a4:11:7a:66:73:8a:67:6d:
73:00:a7:8f:c9:ef:ce:96:74:8f:a5:61:de:d7:1e:
de:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C9:A1:15:AC:FF:80:EC:8F:0B:E5:47:09:98:B4:CB:6D:C4:30:D3
X509v3 Authority Key Identifier:
keyid:C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:df:0c:fe:6a:97:9b:68:b3:c2:39:d1:b3:2d:87:e1:ec:54:
e4:1f:0b:f2:57:22:b2:9b:8e:71:7e:c4:55:2a:10:4a:53:96:
fa:63:98:d0:2d:08:68:51:7a:31:40:d5:c0:86:d0:3e:08:f3:
2a:cf:7e:ef:e0:bc:2b:6f:27:8d:f6:90:1d:90:52:99:04:03:
fb:33:1b:15:fa:e8:44:65:b8:a8:25:55:9f:90:04:81:06:41:
8b:bf:df:ca:7f:a5:08:2b:c3:b4:b3:df:9c:3b:b3:c8:62:cf:
bc:f9:1b:91:64:77:51:a0:55:d1:58:45:34:02:7f:8b:fd:f0:
a5:d7:53:ac:48:2f:9c:9c:c6:39:c8:97:ac:76:49:8d:e8:f8:
3b:3b:8c:ca:8f:fd:53:28:bf:00:e5:09:a0:e0:fb:ab:5b:fb:
f1:2d:02:b6:e6:33:7b:d4:ca:d8:ac:b3:34:17:62:12:dc:b2:
d9:3e:7c:13:b9:04:c9:9f:34:90:f0:58:42:c0:6e:ec:68:58:
80:7e:81:d8:c9:34:51:52:80:e7:25:2d:79:7b:8d:52:2f:37:
19:70:47:7d:f2:51:00:4e:8e:d3:68:57:6e:71:a3:67:b2:26:
62:1b:a5:3c:4c:12:f4:c4:90:d8:ad:a5:be:f3:bc:3c:eb:1c:
33:8e:75:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:50 2025 by rpki-client