Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
File: wIGiJnTcJaqlCFNn4g4HjekGTxI.mft (raw, json)
Hash identifier: 3FAzZz+ZZAk2MsG9F8bFy4yznCO/sNubNJJYNGoPOxA=
Subject key identifier: 7F:49:4B:01:D1:D3:1F:29:DE:EF:78:4B:28:D0:35:2C:24:0A:C3:99
Authority key identifier: C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
Certificate issuer: /CN=c081a22674dc25aaa5085367e20e078de9064f12
Certificate serial: 0199FBEB9A4E73EBBFE10E1D9A1C9D31E948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
Manifest number: 0958
Signing time: Sun 19 Oct 2025 10:02:25 +0000
Manifest this update: Sun 19 Oct 2025 10:02:25 +0000
Manifest next update: Mon 20 Oct 2025 10:02:25 +0000
Files and hashes: 1: wIGiJnTcJaqlCFNn4g4HjekGTxI.crl (hash: VKa9CzIiBorStc1NHMOfi9BLb0Tthm6xBc3+LCq0InY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9a:4e:73:eb:bf:e1:0e:1d:9a:1c:9d:31:e9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c081a22674dc25aaa5085367e20e078de9064f12
Validity
Not Before: Oct 19 10:02:25 2025 GMT
Not After : Oct 20 10:02:25 2025 GMT
Subject: CN=7f494b01d1d31f29deef784b28d0352c240ac399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f9:05:3c:f8:d5:a9:ab:ec:8e:fb:b8:23:2e:
34:b1:e7:1e:d3:94:85:7a:1f:6e:12:34:71:b8:df:
08:b6:b7:43:6b:d9:bf:5c:86:5c:35:f5:8d:d2:cc:
c4:80:53:f0:9e:4c:eb:84:43:41:eb:7f:eb:73:70:
7a:0c:f9:19:5b:68:2f:10:b9:d6:d2:bc:ef:ec:5a:
7b:16:0f:ce:09:e9:72:b7:70:49:37:e6:aa:54:2e:
ad:c5:3d:b8:ed:9d:67:78:04:95:f1:d1:62:51:2b:
ef:05:65:96:cf:0d:05:49:9d:f5:b0:d8:89:94:06:
91:7d:a3:84:19:2e:2f:47:ec:e3:53:17:df:55:e5:
cf:cb:e2:bd:d2:93:85:c7:af:d3:f9:74:51:0c:2d:
05:93:47:56:db:d6:9e:bd:9d:15:4b:09:6d:14:03:
ac:d4:a9:58:fc:62:81:59:df:37:08:c8:7c:51:c7:
9c:9d:a0:3e:86:e9:39:67:f9:5e:e5:74:83:83:76:
ed:26:62:ce:a9:05:d8:24:62:9a:e0:0d:7b:c1:61:
8c:6e:3a:1d:71:f5:2a:b5:38:03:c9:08:81:d5:a7:
10:ae:0d:b3:95:70:d8:50:08:59:75:51:84:a8:33:
f4:90:cf:b9:f0:2a:a4:fa:bf:d7:ed:49:57:56:55:
ea:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:49:4B:01:D1:D3:1F:29:DE:EF:78:4B:28:D0:35:2C:24:0A:C3:99
X509v3 Authority Key Identifier:
keyid:C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ad:d1:4b:d3:aa:f3:07:40:50:30:e3:62:10:ef:b5:6a:58:
91:c9:23:95:95:5c:ac:13:c7:5e:44:f9:7d:86:4e:72:27:e1:
2a:85:07:c6:19:c4:40:ea:70:17:55:6b:30:a5:c8:38:99:48:
7b:56:b5:b4:9f:74:f4:38:9e:36:64:59:bb:8a:62:fb:e7:da:
b2:d7:c9:dc:ff:68:59:d3:b7:13:c2:4f:f2:bc:0d:28:09:db:
42:35:73:a4:a3:33:4e:b2:53:0f:7a:60:4b:a9:af:2b:70:87:
1b:c2:de:10:2a:32:56:2f:95:13:45:88:2a:e3:0f:df:be:9f:
bc:c1:0a:9b:e6:7d:50:9e:f8:a2:61:3b:71:48:d0:bf:10:67:
51:42:49:3d:e2:94:8a:f9:83:9e:23:cd:7a:08:03:5a:bf:10:
d9:ff:70:7f:2a:03:21:95:b6:9f:46:11:4b:1e:ad:d1:49:e6:
94:2c:d1:0b:f6:ba:13:ae:39:40:fa:36:85:3a:69:7b:d5:80:
d7:5e:59:31:09:95:4e:3f:c7:dd:b9:58:56:e1:28:82:f5:9a:
be:27:3d:08:58:92:21:f1:53:fc:eb:66:c1:6c:de:49:06:a5:
f9:c4:19:b1:55:7c:68:e2:11:18:a4:33:9d:a1:a0:41:c4:5f:
2e:46:de:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:00 2025 by rpki-client