
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
File: wi7Wzo-2x52t12WDpeotOruaQy8.mft (raw, json)
Hash identifier: +CrwEdsxC/eCD/SmSefOfH4ckBoA7BxOBPFRzilE8q0=
Subject key identifier: 3A:AD:1E:A4:BA:B6:17:EF:05:66:98:2B:98:3A:71:69:3E:C7:0A:41
Authority key identifier: C2:2E:D6:CE:8F:B6:C7:9D:AD:D7:65:83:A5:EA:2D:3A:BB:9A:43:2F
Certificate issuer: /CN=c22ed6ce8fb6c79dadd76583a5ea2d3abb9a432f
Certificate serial: 0199FB458E3E7FDA9850CA6D4AFF1AEA60A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
Manifest number: F1
Signing time: Sun 19 Oct 2025 07:01:03 +0000
Manifest this update: Sun 19 Oct 2025 07:01:03 +0000
Manifest next update: Mon 20 Oct 2025 07:01:03 +0000
Files and hashes: 1: wi7Wzo-2x52t12WDpeotOruaQy8.crl (hash: 1Cx594J8ZPYkfrlO85mpmVzKcy134EqdbQEF9I2wUW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:8e:3e:7f:da:98:50:ca:6d:4a:ff:1a:ea:60:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22ed6ce8fb6c79dadd76583a5ea2d3abb9a432f
Validity
Not Before: Oct 19 07:01:03 2025 GMT
Not After : Oct 20 07:01:03 2025 GMT
Subject: CN=3aad1ea4bab617ef0566982b983a71693ec70a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:6d:3a:57:7e:ba:17:c2:fe:d0:d3:76:b1:
64:f5:48:91:bd:fc:6b:78:1b:9c:32:43:c1:04:c7:
8f:ba:cc:15:e8:94:f5:68:4b:53:68:79:72:c1:68:
27:ae:47:4e:24:86:26:f7:ff:54:c7:f0:73:2f:9a:
99:ca:4b:b3:e8:4c:b3:e9:8b:44:25:a4:81:ff:c4:
fa:29:af:52:1d:8a:bf:b3:4a:e4:69:04:4e:80:b2:
06:cd:fe:4d:73:44:cf:1b:0d:b8:cd:ba:f6:9a:32:
5c:85:b6:bb:e9:78:92:7c:8a:95:56:62:28:05:e7:
45:75:36:8e:18:ab:a8:c8:e7:f2:e7:a2:eb:27:13:
f5:c8:fd:f3:da:7e:8e:05:1b:05:13:08:9c:35:d1:
a2:fa:23:08:0e:f9:e8:39:43:a8:c8:07:58:5f:15:
67:c2:d5:1b:cd:12:7b:9d:c7:d2:db:9b:c1:d5:b0:
d6:7f:1d:ce:dc:29:34:ff:ba:9d:08:09:3f:75:e0:
d4:81:40:3f:59:ed:d4:a2:9e:92:05:1d:c0:3c:cb:
94:28:b1:11:9b:8a:8e:e4:a9:29:f0:1e:0d:37:38:
4a:a9:eb:65:2a:48:69:76:45:80:1a:c2:20:ad:05:
16:f2:20:1c:4b:df:1e:ae:49:52:d7:6a:71:85:42:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AD:1E:A4:BA:B6:17:EF:05:66:98:2B:98:3A:71:69:3E:C7:0A:41
X509v3 Authority Key Identifier:
keyid:C2:2E:D6:CE:8F:B6:C7:9D:AD:D7:65:83:A5:EA:2D:3A:BB:9A:43:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1f:c8:82:2a:20:f7:02:ab:ab:bb:e1:08:7c:ac:d2:81:9f:
67:40:ae:ac:e2:f8:5e:d1:3e:82:c4:e7:0a:93:6c:37:3f:3c:
30:b8:c0:64:81:65:9b:d2:51:09:a1:f7:b2:ae:2c:90:19:06:
39:12:fc:f7:76:8c:2c:95:ff:b2:94:84:07:b7:d2:f4:37:a4:
9d:cf:1d:da:4b:80:ee:47:a4:8e:8a:f6:1b:30:0c:02:b0:79:
96:93:41:96:03:d5:02:25:11:a0:34:25:61:13:ef:50:d6:2f:
2f:78:d3:bf:2e:77:f1:ba:9c:56:a6:40:f3:c6:df:3b:3e:2c:
55:db:40:ac:4a:55:9e:da:70:3a:19:d9:41:85:b4:de:bb:3d:
50:a5:74:6d:3e:73:5f:23:e9:08:24:8c:04:fb:6f:13:fc:06:
fe:3e:bc:c6:1b:17:e7:a0:0b:45:f9:1e:1b:95:2c:7d:22:22:
e3:6f:29:02:32:cb:eb:fe:14:ba:c3:22:84:f0:bb:54:24:84:
9e:e7:69:62:57:77:d8:4b:6d:46:05:f1:f8:f4:29:d3:94:8a:
02:8f:54:4f:8e:6a:21:df:f5:41:f4:a0:2e:a5:17:3b:10:86:
23:21:9e:32:09:ae:44:90:9f:17:a7:27:4a:7a:b9:b1:aa:68:
e3:13:d5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:56 2025 by rpki-client