Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
File: WrJabDkrjmejrSH2D9MxHWt_Hlw.mft (raw, json)
Hash identifier: n8np0fwtpuzISaw2ZQtKgyIhgPvIRbLr5Kwf5Fq/JDM=
Subject key identifier: 9B:63:F3:E8:90:92:02:BF:A1:2B:B8:D7:95:3D:8E:5D:C6:85:FC:0A
Authority key identifier: 5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C
Certificate issuer: /CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
Certificate serial: 0199FBEB11AC0B976AE8F9120886EE9984C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
Manifest number: 0F7D
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: WrJabDkrjmejrSH2D9MxHWt_Hlw.crl (hash: slTiuJ/kuj9TC1QV/DwE9XH8YyGw1mGCeZzFj7JqyQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:11:ac:0b:97:6a:e8:f9:12:08:86:ee:99:84:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=9b63f3e8909202bfa12bb8d7953d8e5dc685fc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:90:02:21:4c:cb:da:c7:a2:2a:31:17:42:
75:11:9b:c2:01:23:00:49:e4:a1:c3:dc:3f:b3:87:
3d:86:7d:b0:98:51:f7:13:0f:87:d8:1c:2b:19:53:
49:38:f5:a0:7c:a7:5c:e0:7a:a8:6b:81:19:59:74:
f9:9b:0a:28:9f:46:2c:db:e0:97:ee:ed:e8:56:e6:
2e:98:f5:1a:08:5b:ee:ca:b1:db:95:41:8f:fa:0d:
37:d2:a5:d5:ee:c5:aa:65:cc:ad:37:b6:b9:df:6d:
a7:33:35:1f:e6:b7:9a:8a:0d:d1:0c:01:4c:2a:e7:
a3:d6:32:87:38:a7:40:23:0a:dd:c3:b9:52:6c:08:
b7:3c:f8:15:3e:5d:6a:9f:1a:d9:a0:8b:39:c1:99:
93:9d:e7:e0:6c:73:d0:06:00:6c:f8:f8:a1:31:aa:
62:8c:dc:c0:06:b8:18:26:35:5a:4e:0b:ec:1e:59:
f3:ba:e5:ac:56:97:1f:0e:d7:4c:30:13:4d:43:1f:
fe:e4:48:a1:f9:3f:06:70:b8:62:fb:4a:58:59:16:
66:df:6e:19:15:e8:a8:5e:56:43:1c:4e:ee:44:38:
f4:86:42:f3:ce:a5:2c:5c:d1:68:89:c8:2b:a8:5b:
ab:d5:61:95:78:03:3f:50:ad:09:f7:04:ff:e1:71:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:63:F3:E8:90:92:02:BF:A1:2B:B8:D7:95:3D:8E:5D:C6:85:FC:0A
X509v3 Authority Key Identifier:
keyid:5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:23:1a:c8:44:1b:71:9c:8f:35:e4:01:2b:e5:22:65:75:0d:
bf:5b:b0:e6:9a:70:27:62:bf:dc:b0:4c:96:ef:7e:bf:53:11:
52:4c:7c:5c:87:95:fa:68:ed:5d:49:cb:67:8f:f8:89:68:48:
fb:7b:da:a4:02:54:a3:1e:de:04:30:78:92:c8:b8:a2:ba:20:
15:9a:68:a6:bc:19:c0:0e:06:36:56:fc:59:38:61:79:ff:72:
dd:9c:78:db:2c:bc:8a:a7:ce:2d:78:b2:64:8d:56:5f:b5:d7:
7e:4a:d9:2d:4c:61:2d:e4:67:43:5a:f2:ec:bb:e2:1d:8c:cf:
70:d1:cf:22:ec:fb:ab:60:e2:fb:14:a4:ef:44:c4:d5:6d:ab:
16:69:01:39:25:cd:2d:9f:08:87:e4:27:96:49:4a:b7:05:7a:
69:6a:d1:af:ef:9b:e8:78:4a:6a:3f:1e:24:dd:a0:07:43:78:
f8:33:71:8c:ed:fe:d3:ce:20:5b:11:31:57:30:1a:a8:e6:37:
65:db:32:78:64:4d:f6:45:61:cd:ef:16:fd:55:88:5c:54:07:
d1:a5:74:96:f5:c9:ca:36:8c:a0:d3:a2:52:21:97:ea:0c:50:
62:6d:94:73:4d:79:b2:60:88:78:ca:a6:27:56:26:b8:d0:d5:
29:0c:a8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:26 2025 by rpki-client