Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
File: w9bWn9WH0FQXblPRknJoI2GxZzY.mft (raw, json)
Hash identifier: NBhDVng2ge2r7JIsweSmNfOSA0Sn7qm8ypopD4J+3gc=
Subject key identifier: 0E:2D:AA:60:7D:25:85:12:3F:76:92:19:D6:63:5F:B2:7F:30:C7:3A
Authority key identifier: C3:D6:D6:9F:D5:87:D0:54:17:6E:53:D1:92:72:68:23:61:B1:67:36
Certificate issuer: /CN=c3d6d69fd587d054176e53d19272682361b16736
Certificate serial: 0199FBEA78075F52AAA2220C4291EBF0C094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:01:11 +0000
Manifest this update: Sun 19 Oct 2025 10:01:11 +0000
Manifest next update: Mon 20 Oct 2025 10:01:11 +0000
Files and hashes: 1: w9bWn9WH0FQXblPRknJoI2GxZzY.crl (hash: +K2RinmOAJjK58+AkjurSc6zCmx6Lr2vk8lyAzScJXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:78:07:5f:52:aa:a2:22:0c:42:91:eb:f0:c0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3d6d69fd587d054176e53d19272682361b16736
Validity
Not Before: Oct 19 10:01:11 2025 GMT
Not After : Oct 20 10:01:11 2025 GMT
Subject: CN=0e2daa607d2585123f769219d6635fb27f30c73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:ad:c7:76:48:bd:e1:6d:8c:26:08:d1:f8:
f6:7e:ba:73:92:ad:09:c9:f5:9d:a0:eb:b7:3b:86:
43:ec:cb:1d:c8:b8:bd:bb:44:ec:84:29:fd:21:cc:
51:10:6b:71:18:16:46:6d:15:48:42:ab:b7:c4:13:
9d:a1:9e:66:02:c8:c7:e9:f4:03:26:8c:e1:e1:fd:
80:7f:20:65:ea:bb:15:58:7a:52:15:b3:19:9b:41:
69:c1:2a:71:bc:a4:86:af:bf:7f:28:f3:b8:76:65:
c4:1f:9c:b6:49:1a:13:6f:03:e0:a3:33:e0:d9:4b:
dc:8b:2f:25:cb:fc:52:75:d6:bd:58:d3:a5:8a:fe:
87:79:a9:99:fd:fd:40:ce:dd:98:4e:dd:e8:c1:e2:
7c:ca:9d:ae:bf:14:60:52:be:5c:13:e8:ae:cd:40:
1f:a0:1b:44:17:18:c5:a6:dc:2f:28:ae:ac:16:90:
dc:0c:00:32:3b:74:dc:14:47:9c:be:fa:2c:5a:88:
16:30:89:75:ff:34:11:0e:0b:ef:ff:be:d6:74:39:
94:0d:9e:fd:83:62:cf:1e:c5:7f:1c:b4:ae:c1:3d:
b9:16:9a:b7:98:5b:e7:de:2a:64:bb:0a:54:06:ff:
b7:7d:16:2f:bd:97:6c:03:5a:2e:b5:59:fe:3a:a5:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2D:AA:60:7D:25:85:12:3F:76:92:19:D6:63:5F:B2:7F:30:C7:3A
X509v3 Authority Key Identifier:
keyid:C3:D6:D6:9F:D5:87:D0:54:17:6E:53:D1:92:72:68:23:61:B1:67:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:56:48:df:ff:a8:da:d6:53:2f:31:40:09:aa:b0:7c:93:ac:
33:00:e6:f8:4b:ea:46:f8:7c:c9:6d:26:b5:57:ec:e6:1d:9c:
0b:d8:50:e5:25:e7:3c:8b:70:10:7f:23:b2:6b:d7:05:48:60:
6b:d1:97:06:db:f8:de:45:ea:c0:91:01:05:86:7f:97:77:35:
dc:13:00:c2:76:fb:49:a7:16:9e:7e:60:68:0c:a2:df:b5:35:
8b:00:9b:f7:4e:17:2c:c8:12:ed:c9:ca:33:91:53:d0:42:43:
34:ee:51:08:77:ef:a5:72:37:ea:4e:bb:9c:c3:6e:ba:1a:15:
71:ff:ca:de:0c:42:67:b5:27:60:d5:88:11:bf:52:27:11:74:
47:90:15:7c:36:36:e9:33:d6:53:b7:5e:bc:58:39:b0:04:06:
bd:ba:66:db:00:92:11:03:6e:41:6e:17:a9:84:5d:fc:bf:7f:
d5:e4:ee:c8:2b:de:7d:64:e1:4a:37:5d:2d:ac:00:b7:ba:f9:
98:ac:40:b2:0e:b4:0e:5b:ff:d3:35:87:1d:ff:a2:72:da:59:
8f:12:73:97:7b:97:5b:8d:c9:fd:1a:11:d2:43:ba:33:fb:7d:
92:8a:80:be:09:f2:37:00:64:d9:d3:e2:5b:ed:9b:ca:da:d1:
a9:65:e9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:14 2025 by rpki-client