Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
File: wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft (raw, json)
Hash identifier: TWa1i325KD+3OdlI4OSpfORHxPqAc0ituoY6NNWNE0I=
Subject key identifier: 57:7A:16:86:A3:E2:63:0F:5D:5E:C5:80:9C:E5:E5:29:7D:38:FA:DF
Authority key identifier: C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
Certificate issuer: /CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Certificate serial: 0199FE470848CC1F2633093E46F33DC0FC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 21:01:31 +0000
Manifest this update: Sun 19 Oct 2025 21:01:31 +0000
Manifest next update: Mon 20 Oct 2025 21:01:31 +0000
Files and hashes: 1: wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl (hash: wTm3zX/m7ThvCvhptY0xHHdc9B7KFOdCPIbgcRh/AeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:08:48:cc:1f:26:33:09:3e:46:f3:3d:c0:fc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Validity
Not Before: Oct 19 21:01:31 2025 GMT
Not After : Oct 20 21:01:31 2025 GMT
Subject: CN=577a1686a3e2630f5d5ec5809ce5e5297d38fadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:28:ab:5d:79:7e:b1:06:10:db:13:f6:75:
b5:50:7c:34:c4:c1:c6:5c:40:47:93:48:5f:00:0a:
37:a6:23:2d:ac:a8:c0:56:90:12:2f:26:86:76:69:
46:e8:ba:f7:58:a5:4b:fd:c3:66:6f:fb:55:55:db:
79:dc:cb:71:ab:18:9f:f6:27:04:03:2f:86:10:d0:
78:3d:81:c4:5e:5d:5b:a4:01:21:c3:f1:14:97:d0:
5d:3a:07:36:36:38:8b:3f:0b:18:82:ee:90:07:75:
76:96:0e:52:d6:f1:96:80:ff:cd:d9:d4:01:41:0c:
c5:ec:50:45:ea:0a:ef:95:64:1f:e9:50:a8:ee:ec:
fe:e1:12:9e:9e:0a:a2:91:f7:01:a4:5f:bd:c7:59:
f6:04:0f:6e:d2:15:b3:e7:68:68:13:9e:3b:ae:c2:
e2:58:4f:9a:a8:fb:93:22:50:7f:46:6b:95:ef:1e:
85:98:cf:7d:e5:74:c5:42:24:b8:44:3b:d1:1d:52:
b9:07:1b:70:d5:b9:a0:4e:a8:17:09:38:56:02:8e:
b4:17:29:b6:98:c9:a5:fe:13:de:a0:a4:f0:32:5b:
9a:41:87:bb:bc:eb:63:26:21:9b:d9:21:49:64:ab:
ad:a9:c0:d9:8a:10:0d:7c:82:33:a8:5a:6a:d0:98:
16:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7A:16:86:A3:E2:63:0F:5D:5E:C5:80:9C:E5:E5:29:7D:38:FA:DF
X509v3 Authority Key Identifier:
keyid:C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:35:4c:cf:69:90:dd:1e:fd:73:33:9d:a0:b5:b0:6a:2c:a1:
5c:cb:0b:fd:a5:05:92:40:6d:02:4d:86:49:50:7a:37:16:8c:
32:a3:b6:9a:36:4b:cc:0f:01:25:57:7a:83:ec:51:48:63:f9:
6c:c9:aa:c9:b3:7e:fd:d1:21:82:a2:b7:d4:22:5a:f4:54:47:
ea:5d:29:e9:bf:db:41:9f:2e:c3:44:85:ee:fb:70:c6:05:ed:
26:71:9b:67:9f:e1:f2:d6:a3:ee:84:cd:bd:72:db:94:82:34:
1b:c8:3f:31:6f:78:1d:b1:45:9c:fb:73:9e:b1:09:03:c4:88:
9a:d2:12:a6:5d:bd:e6:2b:35:f2:f2:65:b9:a4:47:27:23:79:
d6:b8:c8:40:20:e8:fe:c6:d5:0e:1b:0d:e3:0e:c5:89:92:36:
ac:4d:65:d9:aa:f8:44:c1:ee:f0:b0:dc:aa:33:da:7d:a5:b1:
c9:95:4c:70:a2:ce:31:c9:8d:ae:90:3e:46:2e:75:16:f6:27:
c8:22:9f:1f:ab:cb:b4:e4:d7:33:34:db:e9:c7:a0:e7:b3:2b:
ff:fc:a5:03:1f:87:9e:3e:ed:ac:81:f4:af:16:93:3c:7d:7b:
a1:c3:2a:07:22:53:71:7f:46:97:8a:2b:56:f0:8d:01:89:78:
86:15:e7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:31:18 2025 by rpki-client