Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
File: wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft (raw, json)
Hash identifier: Xpl5gR6IG99QU7B00jq7BIMF0u1mOKt9pwWWF9/Y8/M=
Subject key identifier: 33:49:2C:85:60:C4:3C:D3:39:F1:02:99:FD:F3:F5:53:97:4F:37:A6
Authority key identifier: C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B
Certificate issuer: /CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
Certificate serial: 0199FD3420B56D3C41545F147BC95175A6E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
Manifest number: 15B1
Signing time: Sun 19 Oct 2025 16:01:15 +0000
Manifest this update: Sun 19 Oct 2025 16:01:15 +0000
Manifest next update: Mon 20 Oct 2025 16:01:15 +0000
Files and hashes: 1: wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl (hash: TqEeUo0TWUL7k57UsKvyB/vmyzlYB1egWYzU6sTzQVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:20:b5:6d:3c:41:54:5f:14:7b:c9:51:75:a6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
Validity
Not Before: Oct 19 16:01:15 2025 GMT
Not After : Oct 20 16:01:15 2025 GMT
Subject: CN=33492c8560c43cd339f10299fdf3f553974f37a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:c6:8c:3d:11:21:1f:c7:6d:ab:9f:f0:31:
b3:b3:60:5a:81:3b:ec:6f:57:3d:dc:80:a7:af:d5:
85:de:4e:32:2e:cf:29:b7:6c:6d:03:f5:51:bb:8f:
fa:34:2e:1f:0a:28:b9:bd:cd:e3:ae:4f:ee:52:27:
b6:a2:e8:3d:16:64:7a:a4:d7:d3:4c:6d:aa:12:cb:
01:40:3a:3a:7a:77:d4:82:bb:96:b9:5a:76:3c:f4:
f6:69:bb:75:ec:c3:00:99:ac:3d:90:07:1e:05:ac:
52:b4:ec:f1:b8:56:32:d6:98:0c:36:cf:a8:ab:85:
c7:e5:be:45:5f:42:1d:0e:9c:b7:b9:96:63:c1:7a:
f4:c7:89:01:44:01:94:6d:c7:83:ea:0a:e0:2e:ce:
44:60:e5:2f:20:bf:13:15:7c:b1:42:07:cf:e5:95:
63:6d:73:ec:20:10:15:0b:da:66:bb:1c:a8:be:c1:
84:a8:02:e8:dc:d5:e0:b4:8d:b9:c5:ad:bf:1f:30:
0f:97:24:ee:d6:67:07:2c:4f:38:31:6f:d8:fc:44:
7d:b7:52:f6:60:7d:e4:72:4d:14:46:81:5c:fc:f6:
c6:16:b1:84:9e:1a:45:ec:ff:10:c3:e4:9e:12:11:
4c:26:56:82:63:7a:99:01:74:5e:b7:bf:5e:af:55:
43:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:49:2C:85:60:C4:3C:D3:39:F1:02:99:FD:F3:F5:53:97:4F:37:A6
X509v3 Authority Key Identifier:
keyid:C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b6:e4:20:29:40:c2:0d:31:49:02:e4:18:15:b0:ac:ce:74:
13:18:f8:70:94:1d:0a:0b:67:40:10:11:c8:d3:5b:0f:91:35:
99:33:49:2c:36:e3:87:44:10:2c:f8:a8:e4:a3:38:32:1e:d5:
01:e3:2a:2f:00:fb:ff:b8:d4:0b:28:c0:50:28:29:df:44:df:
a6:cc:48:93:09:b2:09:f9:a3:63:cf:71:4d:72:75:a9:8c:f5:
1e:5e:57:34:02:04:86:38:12:ef:c3:28:01:34:34:3b:b2:2f:
4a:59:b8:87:3e:86:a2:48:f8:d2:21:88:47:2d:e9:85:f0:3f:
3e:db:23:a9:d3:78:1f:2a:b2:01:31:d7:66:07:db:72:40:1b:
50:37:ea:9f:bb:f3:34:6d:db:8f:a3:c9:22:e0:d3:65:21:9b:
3f:b8:08:ad:40:3b:19:86:8a:4d:2a:d1:dc:93:df:5f:ee:fc:
05:47:59:d0:6f:dc:ca:72:28:2d:ba:25:c3:e4:2a:39:70:f3:
08:63:14:57:38:24:26:26:23:a1:8e:e9:f5:58:9e:ca:bd:20:
e8:e0:8b:c7:19:ba:d6:25:68:dc:8e:fc:88:09:84:50:22:e2:
54:ef:ee:65:ad:2b:04:7e:1b:1e:cb:b5:3f:79:b5:23:52:2f:
cc:61:15:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:54:14 2025 by rpki-client