Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
File: wkDtrImIu1blLeEopdZaj07z8Tg.mft (raw, json)
Hash identifier: 3oZP2s2FNE2gvjJRXesIGM1hYIH+uuiojpNyeFiJnTc=
Subject key identifier: 43:E7:A5:30:29:41:8D:8D:5F:82:68:3D:19:51:77:EB:E2:AB:37:A6
Authority key identifier: C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
Certificate issuer: /CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
Certificate serial: 0199FAD7B93AA6346D7E5810D1C75B66A465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
Manifest number: 0D4C
Signing time: Sun 19 Oct 2025 05:01:05 +0000
Manifest this update: Sun 19 Oct 2025 05:01:05 +0000
Manifest next update: Mon 20 Oct 2025 05:01:05 +0000
Files and hashes: 1: wkDtrImIu1blLeEopdZaj07z8Tg.crl (hash: 4S8Yo2k32R/H7jrMun8+PRUGSIO2HBVFKzUylzbfE0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:b9:3a:a6:34:6d:7e:58:10:d1:c7:5b:66:a4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
Validity
Not Before: Oct 19 05:01:05 2025 GMT
Not After : Oct 20 05:01:05 2025 GMT
Subject: CN=43e7a53029418d8d5f82683d195177ebe2ab37a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ba:49:86:d0:4f:69:d3:69:95:33:1c:2d:ee:
54:f1:11:ea:8f:63:d7:09:9d:e9:b6:bc:f4:25:52:
2a:c1:77:0c:eb:84:98:49:c0:18:e7:8e:64:90:82:
d8:5e:d6:7f:94:ad:1f:7b:d8:17:cb:04:67:84:7d:
ec:64:a3:b2:d3:4e:85:34:30:83:0f:e5:8d:78:93:
f9:44:65:95:1f:f2:6d:75:3b:d9:47:17:c8:cb:63:
3d:a2:c1:0d:eb:52:41:74:28:d4:47:0f:03:4b:5b:
43:10:22:16:62:79:3f:7c:7b:ae:02:56:47:64:a5:
20:29:e4:ee:db:16:e7:6e:a9:89:9b:0c:69:ae:f2:
58:bb:9b:b1:cc:74:97:17:af:ea:6c:c5:27:0e:43:
02:54:7e:16:cb:d6:64:78:f6:41:9e:9d:c7:68:6f:
4f:cf:45:f3:91:e1:bd:d8:7f:06:07:a0:d2:36:7b:
b6:af:03:d8:42:4c:c8:fd:04:3a:7f:c0:19:1f:2e:
60:60:8a:80:1c:d3:b4:e9:30:15:39:d4:50:5e:83:
63:a0:90:f0:33:96:e3:08:21:ff:e7:3f:02:e4:1f:
22:33:51:49:34:0d:de:a2:91:78:22:fc:9c:d9:6a:
5d:d3:23:c3:e8:e9:08:b6:1f:4f:2f:47:e5:18:da:
77:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E7:A5:30:29:41:8D:8D:5F:82:68:3D:19:51:77:EB:E2:AB:37:A6
X509v3 Authority Key Identifier:
keyid:C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:43:1d:66:1b:4b:1d:91:6c:c3:6b:9e:e4:b1:71:6a:18:d6:
30:30:d1:d6:eb:05:0c:52:a6:df:af:ca:80:cc:72:97:9d:2f:
c2:2a:47:d8:9f:c4:57:22:4a:d3:de:ea:74:f4:85:32:d4:60:
f6:61:57:11:cd:f8:11:7a:a2:c0:53:b6:d3:41:31:27:17:a5:
e5:ba:5f:1f:08:ba:86:92:e8:34:33:c5:28:10:14:03:3a:53:
aa:62:3d:98:74:b4:33:bb:4b:66:3a:a8:5f:e0:ec:5e:6e:14:
cd:bc:e0:8c:c9:1d:cf:77:c4:3a:46:49:5d:b8:9d:07:ea:9b:
40:51:b3:e3:77:17:47:5c:7d:6d:73:08:19:dd:61:23:5b:9d:
24:8b:fa:8e:30:93:93:35:de:98:1c:fd:73:ee:b4:76:e1:6b:
22:4a:d3:82:a8:4a:a6:e8:15:0e:41:eb:c3:f6:4c:71:a6:c5:
fe:ea:df:44:4c:4e:0f:11:44:83:e7:8d:87:dd:7b:fc:fd:68:
4a:10:99:2c:41:48:3c:6b:2e:11:40:f1:04:49:35:5f:bb:ef:
6b:b2:2e:0f:d8:65:9e:b1:f9:8b:58:30:34:a9:d7:50:4b:d8:
bd:de:74:03:36:3d:3f:2a:17:2b:b4:af:48:8c:b3:b0:b7:93:
ae:8a:8a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:16 2025 by rpki-client