Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
File: wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft (raw, json)
Hash identifier: Af9XqpOLuYPUq5zjXO5m4IC9E40+SIr8JecoijCZyYE=
Subject key identifier: A0:AE:7D:C7:E7:29:DC:13:92:41:0D:56:3C:74:DA:D3:1B:8D:ED:54
Authority key identifier: C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
Certificate issuer: /CN=c14d724ca59addd0f7f8108b01059795f34d3345
Certificate serial: 0199FBEAB0D2E72A314D458718C6A4FB1906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
Manifest number: 06FC
Signing time: Sun 19 Oct 2025 10:01:25 +0000
Manifest this update: Sun 19 Oct 2025 10:01:25 +0000
Manifest next update: Mon 20 Oct 2025 10:01:25 +0000
Files and hashes: 1: wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl (hash: jlA2UeIBG4JFa9aw9wK5FDhmxKX+tffSnc0zMYquNH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b0:d2:e7:2a:31:4d:45:87:18:c6:a4:fb:19:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14d724ca59addd0f7f8108b01059795f34d3345
Validity
Not Before: Oct 19 10:01:25 2025 GMT
Not After : Oct 20 10:01:25 2025 GMT
Subject: CN=a0ae7dc7e729dc1392410d563c74dad31b8ded54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:26:0f:5b:7d:0e:aa:19:47:49:c3:a0:01:8d:
50:24:b9:aa:45:d5:5f:ba:bf:cc:1b:1f:2d:42:12:
21:4c:08:b9:72:55:c0:91:42:c9:e2:c5:13:d2:88:
22:c1:9e:1e:38:7e:ef:2f:f2:bf:d0:37:54:10:70:
84:60:e2:9d:7a:76:bd:4f:f0:43:84:5c:af:de:70:
fc:57:f8:91:62:2c:b2:67:01:a5:e9:b3:fb:d0:f2:
d8:fa:3f:a8:46:46:23:96:c9:ff:2f:32:6a:b7:98:
34:50:9c:de:b7:89:ba:af:cf:73:e9:90:5f:fe:2a:
fc:44:2a:82:4e:d3:e0:34:e0:08:1f:80:56:78:57:
13:bb:f9:ef:94:58:62:f8:04:f8:16:27:88:ae:56:
a5:88:88:94:7e:41:57:0d:d4:c2:aa:12:9b:ed:82:
0c:6e:05:c7:b6:b6:fe:c5:1d:d4:b8:64:50:d2:09:
a7:cd:f6:fc:09:7f:a4:44:07:ab:95:61:98:48:3b:
af:fa:2e:39:51:b7:45:58:02:2d:b4:29:a2:6f:2e:
dc:47:f8:f1:12:8b:1e:1b:fb:95:b1:dd:61:f0:18:
ef:d0:d2:f7:78:1c:d0:59:9c:70:df:33:45:16:bc:
96:28:5c:61:eb:6e:81:8b:95:d0:00:20:5d:00:61:
40:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AE:7D:C7:E7:29:DC:13:92:41:0D:56:3C:74:DA:D3:1B:8D:ED:54
X509v3 Authority Key Identifier:
keyid:C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:47:2e:c1:c7:15:f8:3f:a5:98:39:8f:87:91:30:fb:6a:22:
eb:22:7a:19:18:3c:ad:7f:aa:61:45:15:b1:85:84:da:03:0a:
9a:67:05:e6:3d:45:7f:26:5a:21:49:f0:9d:2d:14:f5:ff:56:
1e:1b:72:8b:b8:73:37:fb:1f:17:d9:79:2c:ef:f6:1c:9b:ed:
e8:6f:86:d1:ec:da:a6:ea:47:e1:28:9f:1b:cc:b6:fd:bc:94:
b2:dd:3a:05:cb:31:9a:07:ed:e4:f3:8c:2c:64:30:bd:ce:5e:
a6:24:b0:dd:ba:45:b8:da:39:aa:f4:70:26:e2:62:ab:ff:fa:
1c:53:ec:96:df:23:35:74:0d:24:d7:c2:19:b1:09:f5:cd:61:
5d:41:a6:e2:79:98:b4:72:30:56:67:01:a2:ff:2b:9a:78:aa:
49:72:6c:cb:9d:60:a4:41:b9:c6:5a:a0:53:81:4c:69:77:a5:
23:6d:74:39:6e:4a:c3:75:5f:42:ce:b7:b1:05:3c:bf:d3:0e:
86:1e:29:47:ba:bd:1d:5a:61:55:db:43:f8:ac:15:82:94:02:
dc:30:0e:bd:47:b4:d5:e9:88:39:d5:3e:e9:23:7d:a1:02:66:
be:2d:8f:c0:93:72:53:c4:b0:d4:bd:46:95:c7:70:99:58:ca:
10:39:05:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76rDS5yoxTUWHGMak+xkGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNGQ3MjRjYTU5YWRkZDBmN2Y4MTA4YjAxMDU5Nzk1ZjM0
ZDMzNDUwHhcNMjUxMDE5MTAwMTI1WhcNMjUxMDIwMTAwMTI1WjAzMTEwLwYDVQQD
EyhhMGFlN2RjN2U3MjlkYzEzOTI0MTBkNTYzYzc0ZGFkMzFiOGRlZDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iYPW30OqhlHScOgAY1QJLmqRdVf
ur/MGx8tQhIhTAi5clXAkULJ4sUT0ogiwZ4eOH7vL/K/0DdUEHCEYOKdena9T/BD
hFyv3nD8V/iRYiyyZwGl6bP70PLY+j+oRkYjlsn/LzJqt5g0UJzet4m6r89z6ZBf
/ir8RCqCTtPgNOAIH4BWeFcTu/nvlFhi+AT4FieIrlaliIiUfkFXDdTCqhKb7YIM
bgXHtrb+xR3UuGRQ0gmnzfb8CX+kRAerlWGYSDuv+i45UbdFWAIttCmiby7cR/jx
EoseG/uVsd1h8Bjv0NL3eBzQWZxw3zNFFryWKFxh626Bi5XQACBdAGFAnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCufcfnKdwTkkENVjx02tMbje1UMB8GA1UdIwQY
MBaAFMFNckylmt3Q9/gQiwEFl5XzTTNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1UxeVRLV2EzZEQzLUJDTEFRV1hsZk5OTTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iNGRkZDctY2Q0MS00NmI1LWFjMzgt
NGY1NjRjZTA3MTI2LzEvd1UxeVRLV2EzZEQzLUJDTEFRV1hsZk5OTTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9iNGRkZDctY2Q0MS00NmI1LWFjMzgtNGY1NjRjZTA3MTI2
LzEvd1UxeVRLV2EzZEQzLUJDTEFRV1hsZk5OTTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUcuwccV
+D+lmDmPh5Ew+2oi6yJ6GRg8rX+qYUUVsYWE2gMKmmcF5j1FfyZaIUnwnS0U9f9W
Hhtyi7hzN/sfF9l5LO/2HJvt6G+G0ezapupH4SifG8y2/byUst06Bcsxmgft5POM
LGQwvc5epiSw3bpFuNo5qvRwJuJiq//6HFPslt8jNXQNJNfCGbEJ9c1hXUGm4nmY
tHIwVmcBov8rmniqSXJsy51gpEG5xlqgU4FMaXelI210OW5Kw3VfQs63sQU8v9MO
hh4pR7q9HVphVdtD+KwVgpQC3DAOvUe01emIOdU+6SN9oQJmvi2PwJNyU8Sw1L1G
lcdwmVjKEDkFqg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:46 2025 by rpki-client