Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
File: w91X4yvXbbd77fxSETY8SAgPBgU.mft (raw, json)
Hash identifier: 9G/yVhqoyRZQKR9SdswgeDVAivv8S3u+4vYT8u+DX7E=
Subject key identifier: 13:40:00:B4:96:2E:0E:C2:B2:F3:33:BD:7D:17:CD:42:82:85:B2:84
Authority key identifier: C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05
Certificate issuer: /CN=c3dd57e32bd76db77bedfc5211363c48080f0605
Certificate serial: 0199FC5872D7E6FCC936E58C9E4877164D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
Manifest number: 0D4D
Signing time: Sun 19 Oct 2025 12:01:18 +0000
Manifest this update: Sun 19 Oct 2025 12:01:18 +0000
Manifest next update: Mon 20 Oct 2025 12:01:18 +0000
Files and hashes: 1: w91X4yvXbbd77fxSETY8SAgPBgU.crl (hash: Foh2M9RWzKQ1quGAasap8wxlkyR0a6ZoHh6qhd13Ifk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:72:d7:e6:fc:c9:36:e5:8c:9e:48:77:16:4d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3dd57e32bd76db77bedfc5211363c48080f0605
Validity
Not Before: Oct 19 12:01:18 2025 GMT
Not After : Oct 20 12:01:18 2025 GMT
Subject: CN=134000b4962e0ec2b2f333bd7d17cd428285b284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d4:b0:2a:b5:00:ef:05:dd:14:c2:4a:22:05:
32:3f:2e:1b:7f:37:02:72:3b:b7:29:3d:3d:07:7a:
3a:a2:04:11:1e:43:37:1d:a5:14:be:90:5f:bb:6e:
3b:39:5b:f2:f2:e5:93:1d:0e:5b:63:19:8a:f8:85:
58:2e:eb:3d:4e:b9:59:df:d4:a5:a2:4a:1e:b6:cd:
cf:fc:3b:7f:21:ba:cc:ac:6f:3d:a9:8b:1b:c1:3c:
27:1b:09:6d:d3:61:91:ce:a6:b9:7e:ad:4d:2d:73:
08:ea:06:fd:a1:43:4b:3e:9b:de:6a:25:f8:c3:2f:
b3:e8:45:72:00:c1:bd:9f:b8:0b:fa:a8:40:f5:fb:
79:85:6e:90:3f:a6:86:aa:d7:c6:f1:52:93:fe:5f:
57:99:6a:3d:72:d5:2a:b3:84:5a:b5:de:5d:cc:ae:
fa:f8:f0:d3:c8:4e:9a:cd:19:f7:27:bd:0f:73:ee:
f5:e2:38:dd:70:cb:a2:e1:9c:ca:65:9b:4a:25:97:
de:e6:a6:99:52:67:57:0b:61:cd:e5:4b:26:fe:7f:
a2:62:21:92:ba:9f:25:2c:8e:f8:93:d7:ed:f9:d0:
ac:d2:f4:91:17:d2:ec:02:a0:77:44:3e:f4:ac:fb:
bf:48:3a:30:72:58:1a:24:12:35:23:40:1e:18:50:
88:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:40:00:B4:96:2E:0E:C2:B2:F3:33:BD:7D:17:CD:42:82:85:B2:84
X509v3 Authority Key Identifier:
keyid:C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:32:62:1e:1f:84:ba:4f:56:05:8b:ad:43:40:4b:7e:f8:9d:
49:98:0f:09:e2:4e:33:cf:c3:10:fb:af:05:a9:e9:b0:22:9b:
14:1b:ff:46:7b:43:35:e0:58:15:39:47:cd:9f:6e:3f:7e:f3:
87:72:67:ed:91:12:28:8f:87:9b:e8:39:35:bc:23:fc:9c:4a:
a0:38:90:9a:a8:bf:fd:6e:b2:76:46:66:1f:9a:92:1a:46:16:
a7:6e:07:32:b4:a6:87:5a:3e:0d:43:e3:5d:db:02:52:7c:d5:
77:f7:dd:2e:02:81:36:60:d1:d1:9a:66:1e:8b:da:77:cd:44:
c5:1b:c8:15:b0:b1:af:62:84:17:7d:92:e7:20:79:5f:20:1d:
b7:d5:8c:62:36:1a:ee:f0:30:1a:10:5d:4e:4b:3c:27:33:2f:
f2:1e:f5:3d:99:1e:42:90:6b:44:78:8d:66:cb:cd:d5:3c:2a:
61:25:0f:c1:16:4d:a0:e1:96:b4:a2:00:5f:6b:6a:23:6e:2d:
61:de:c4:1a:64:fb:98:52:99:fc:0d:ab:e5:cf:14:6f:da:7c:
b7:13:dd:e1:6e:4d:2c:e0:e7:e7:e8:cd:d2:92:1e:64:cf:11:
80:d2:22:6d:25:9d:31:4f:ab:f3:33:21:df:ed:4d:93:0e:dc:
34:01:24:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:57 2025 by rpki-client