
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
File: X-WOcyoPcfTwEwLWIWcXO9mxfME.mft (raw, json)
Hash identifier: sqPn7cl1ATG258Tes789oKae56SsCHUiMQ5yAmCoD5k=
Subject key identifier: 1E:4E:FD:61:6F:14:B1:BE:96:8C:E1:B2:75:0B:38:0F:16:BD:88:F5
Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
Certificate issuer: /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Certificate serial: 0199FD3403322A34FDD0D07276D24D23DDB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
Manifest number: 11B3
Signing time: Sun 19 Oct 2025 16:01:08 +0000
Manifest this update: Sun 19 Oct 2025 16:01:08 +0000
Manifest next update: Mon 20 Oct 2025 16:01:08 +0000
Files and hashes: 1: X-WOcyoPcfTwEwLWIWcXO9mxfME.crl (hash: MVvAipnFZqHqzUqOPoFU+IoOgmvl1kWQfvo5yAhfp1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:03:32:2a:34:fd:d0:d0:72:76:d2:4d:23:dd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Validity
Not Before: Oct 19 16:01:08 2025 GMT
Not After : Oct 20 16:01:08 2025 GMT
Subject: CN=1e4efd616f14b1be968ce1b2750b380f16bd88f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fc:35:32:2f:55:89:bc:b9:b4:bf:3f:40:4d:
2d:7f:b3:cc:19:c9:58:b6:8b:8e:15:b3:83:c5:c0:
f8:5d:a3:96:ed:83:95:a8:87:46:1d:07:d2:5a:f7:
3a:39:61:ed:56:23:a0:85:0f:68:84:f1:76:49:35:
38:c4:33:6a:a9:f3:ae:25:bd:75:44:d4:0a:1b:58:
e0:66:fd:2a:ce:51:a4:2b:2d:1f:32:4e:f5:68:e1:
6a:0b:8c:d1:d1:5a:f9:de:32:bf:c8:ba:b2:e9:c7:
69:0c:5f:7f:03:02:64:4a:06:10:64:bb:62:d9:fc:
78:5d:72:9a:6e:c6:6a:9c:6c:4e:0f:0e:95:db:12:
a1:6b:18:19:d1:9d:20:19:d8:9d:4a:77:5f:b1:3c:
a3:2c:28:ed:b7:d6:0a:08:e0:df:5d:a4:85:0b:5d:
17:b7:45:ef:63:0f:4d:11:53:33:4c:8b:1e:b6:db:
40:ae:bc:f7:0f:6b:2d:d7:f6:2d:3c:46:5b:35:b2:
54:63:5b:a1:da:ff:5a:40:cd:54:b1:cb:dd:58:03:
b3:a7:99:77:90:9b:c7:09:9f:0f:d3:90:43:19:90:
3e:2d:82:3e:c5:55:19:7c:89:e6:7c:e7:7d:c5:09:
95:5a:8d:93:ad:5c:0c:3b:8b:4f:1d:e9:c8:53:18:
2c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4E:FD:61:6F:14:B1:BE:96:8C:E1:B2:75:0B:38:0F:16:BD:88:F5
X509v3 Authority Key Identifier:
keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:0a:9d:96:57:9d:a0:92:5a:d2:2e:91:f8:b4:b7:f7:cf:2a:
0a:a7:be:fe:b5:bf:a6:d8:b4:84:74:f3:62:5f:fc:10:b3:3b:
74:b8:be:74:28:c1:a3:96:b1:dd:02:d6:e5:66:91:15:f4:68:
11:a4:80:75:24:07:cd:6e:a6:e7:01:bd:9b:a6:1d:bc:c9:a0:
0a:40:a1:7f:ad:41:10:0d:ef:7b:bc:44:64:30:b9:d3:7c:f7:
f4:4e:38:17:73:4c:55:68:0b:9f:37:d5:94:55:94:20:4d:37:
be:c6:cc:76:8c:dc:74:d1:bb:4c:1b:d5:5d:1d:1b:83:da:e4:
9e:52:24:ff:36:0a:69:76:ac:0a:21:78:d2:d5:ae:30:b9:19:
ef:11:6b:76:22:42:f0:21:17:eb:e4:92:04:58:86:82:b9:5a:
67:5b:08:1e:74:94:d0:8f:97:6f:77:a9:66:1a:50:cc:0f:82:
9b:0b:d6:f3:d0:aa:fb:a9:29:e9:b0:d5:b8:29:58:13:b7:35:
5d:5b:a2:75:c3:7a:77:e3:01:b0:ce:0f:2b:6b:e8:fd:33:18:
ef:c8:71:ed:66:bc:50:78:a7:a7:65:62:95:c6:e3:29:44:a6:
b0:33:14:bb:a5:b5:48:55:fc:0b:76:cb:f9:c1:7c:e3:12:6b:
6b:bf:8a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:24 2025 by rpki-client