Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
File: wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft (raw, json)
Hash identifier: LGsXfpAbtw4X+V+HiRaUSQsGN8+sjASmwFO+q7FhvaQ=
Subject key identifier: 41:11:64:67:5C:7D:D9:4D:EF:FF:05:D0:25:D9:C0:95:6A:DB:03:35
Authority key identifier: C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
Certificate issuer: /CN=c2ded250e3baf21d8e0a259a799f90adae9be305
Certificate serial: 0199FB46092294DEEB6BA180EF52FD52C52F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
Manifest number: 0D02
Signing time: Sun 19 Oct 2025 07:01:34 +0000
Manifest this update: Sun 19 Oct 2025 07:01:34 +0000
Manifest next update: Mon 20 Oct 2025 07:01:34 +0000
Files and hashes: 1: wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl (hash: CkWHFSVhGNZrGEF+xcLNLaugE6XPWU3HrpOPpbPODKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:09:22:94:de:eb:6b:a1:80:ef:52:fd:52:c5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ded250e3baf21d8e0a259a799f90adae9be305
Validity
Not Before: Oct 19 07:01:34 2025 GMT
Not After : Oct 20 07:01:34 2025 GMT
Subject: CN=411164675c7dd94defff05d025d9c0956adb0335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:96:c5:27:85:ea:4a:01:b9:9e:ce:dd:f9:ad:
0f:84:b6:34:5a:49:b3:63:94:60:65:9a:17:6b:2e:
ae:17:0e:05:d3:4a:ab:ca:44:b8:92:75:ff:20:5b:
a2:e8:b8:c1:61:e1:68:de:35:54:e0:f8:42:12:51:
92:32:11:23:a2:95:40:59:e7:24:cc:fa:cc:3e:66:
bd:60:46:c9:02:c2:ea:d3:ac:18:01:4c:0e:2d:c6:
62:6f:79:c1:ee:cd:36:77:6e:63:cb:fe:69:b7:72:
95:3b:05:b1:33:2b:ea:8c:e3:48:f9:4a:48:25:31:
c5:ea:aa:46:ee:cb:89:1b:17:94:82:c7:d5:30:2d:
e9:4e:c5:12:28:21:d9:c9:e9:f8:8a:d3:5e:10:5e:
31:fd:92:66:1a:0d:00:07:99:71:32:3f:bf:5a:2e:
ca:20:6e:2b:40:e5:57:ff:b5:e4:c9:e4:4f:e8:d3:
26:31:bb:84:ab:30:cd:a8:81:6c:cb:b9:1d:5e:8b:
25:bd:79:ef:f5:b7:c3:94:13:2e:21:11:28:5f:be:
15:89:01:17:d3:1a:b9:c9:4a:25:f8:11:ea:b0:c0:
8f:c3:f9:6d:f8:90:88:46:b8:b9:86:8c:b9:4e:0c:
cd:4e:f4:70:ee:08:83:ce:f6:6b:cf:5a:44:cd:48:
3a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:11:64:67:5C:7D:D9:4D:EF:FF:05:D0:25:D9:C0:95:6A:DB:03:35
X509v3 Authority Key Identifier:
keyid:C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c1:f4:4d:6b:31:20:f8:76:ab:3a:98:76:23:77:7a:81:db:
aa:9d:b9:a4:8d:bb:88:68:d4:87:f1:79:e9:ef:8d:e0:52:c4:
29:31:06:9f:d5:9a:77:8d:30:55:01:50:ee:92:71:db:e3:c4:
86:d5:db:72:f5:65:81:c2:c5:a8:8e:4d:49:5d:46:f1:0a:fe:
f7:11:ed:82:a1:71:1a:88:59:c4:23:84:4d:5a:1a:c2:8e:0b:
a6:ba:a7:ce:52:f5:57:18:91:6d:09:2b:e4:e3:8d:3e:ab:16:
11:e2:b0:6d:11:4b:f4:6b:bb:4f:0e:d0:56:21:e0:a2:b1:c5:
a7:be:7b:74:44:17:36:e2:5f:57:90:76:67:96:d0:70:f8:96:
4f:a9:9e:5c:0c:14:7f:e0:99:98:99:5f:e9:be:3c:89:52:2f:
b7:c9:96:f6:7f:b9:c0:86:91:36:f9:f2:18:0e:ae:47:4c:41:
13:a8:77:5e:8e:67:df:87:bd:0f:b6:e4:e9:8a:b6:6d:06:32:
35:61:f7:d2:a0:31:d1:80:b0:6c:47:4d:26:61:c2:a1:c1:55:
e7:42:7a:19:90:a3:5b:70:9f:45:06:3c:a0:85:d7:f4:b1:51:
e6:9f:73:df:4f:87:8b:47:42:99:37:e6:54:8c:c5:ac:b3:98:
a9:89:e1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:09 2025 by rpki-client