Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
File: wKopmx5fodUSbfrXXf1Km65EOhc.mft (raw, json)
Hash identifier: hgbvkK17TEdpegaiw7JadTlzAlFLc3YqwqpoWMMrAyk=
Subject key identifier: 4B:A1:92:7D:33:D7:E5:5C:BB:B8:D6:00:62:A9:80:7B:71:8A:B5:E7
Authority key identifier: C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17
Certificate issuer: /CN=c0aa299b1e5fa1d5126dfad75dfd4a9bae443a17
Certificate serial: 0199FDD9CAE91FCBB0260D84E5B43351EC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
Manifest number: 061D
Signing time: Sun 19 Oct 2025 19:02:12 +0000
Manifest this update: Sun 19 Oct 2025 19:02:12 +0000
Manifest next update: Mon 20 Oct 2025 19:02:12 +0000
Files and hashes: 1: wKopmx5fodUSbfrXXf1Km65EOhc.crl (hash: TDco7j9v36FzWDHg2yOXqQPuoP5OWMQtYvZ/cfz6c3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ca:e9:1f:cb:b0:26:0d:84:e5:b4:33:51:ec:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0aa299b1e5fa1d5126dfad75dfd4a9bae443a17
Validity
Not Before: Oct 19 19:02:12 2025 GMT
Not After : Oct 20 19:02:12 2025 GMT
Subject: CN=4ba1927d33d7e55cbbb8d60062a9807b718ab5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:28:6d:10:a1:22:00:f0:3e:8c:90:92:a0:
53:7f:fc:57:a9:b1:04:d2:29:90:d8:a3:cf:b3:74:
e0:44:b9:ec:70:1b:f9:52:0f:92:99:f7:13:a0:af:
a2:f6:10:3d:55:5e:c5:ed:f9:f8:e0:32:35:9f:5c:
3c:97:e7:9e:0a:38:e2:b4:05:50:1b:49:61:b1:da:
3c:2b:4e:20:9f:93:5b:21:c9:e4:10:0a:5d:98:b5:
ec:1a:bd:ad:58:47:1b:6c:b6:e5:cb:69:f4:44:20:
1f:8d:42:98:b3:ff:de:5e:c1:17:ac:5a:49:2f:43:
11:fc:e2:cb:1f:21:f8:0c:9f:25:56:95:d3:f6:e8:
50:68:fd:b4:4e:ad:ba:2f:50:96:c3:aa:1d:e3:8d:
3a:3c:bf:e9:48:50:da:5a:10:b4:ea:3d:fa:cf:15:
1f:09:0d:a6:e8:1f:ef:d9:cc:9c:3d:1f:d8:8d:39:
96:38:a5:69:db:9d:d5:5a:92:eb:28:db:c6:31:0d:
80:13:2d:05:36:5f:f9:97:b2:7f:68:30:55:f5:37:
66:37:f4:6f:6f:b6:fc:c7:4c:40:0c:4f:4b:e7:a3:
16:74:8c:83:68:11:2d:30:11:ba:a8:71:9d:89:21:
b1:05:63:08:85:bf:b1:fd:b9:81:76:74:d1:12:60:
4a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A1:92:7D:33:D7:E5:5C:BB:B8:D6:00:62:A9:80:7B:71:8A:B5:E7
X509v3 Authority Key Identifier:
keyid:C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:cc:de:7e:5d:a5:46:6b:b0:82:fe:cd:18:0a:88:dc:ee:6a:
39:9f:df:e0:b0:c8:00:ce:df:97:6d:15:50:cd:40:4e:60:4d:
bc:bc:c6:e0:ce:98:29:16:56:dd:af:6d:0d:cb:f4:33:d9:ed:
1f:99:f4:ba:14:e7:5c:ca:52:f8:01:86:15:16:ef:26:99:a9:
d6:4c:37:61:d4:9e:b3:30:26:f0:fb:80:dc:9c:95:3f:27:67:
c8:71:f7:5d:e4:b3:5a:dd:ba:b0:cf:5b:33:85:31:d7:18:a8:
80:8c:4a:30:b8:1c:5f:90:5a:34:ca:d0:50:0c:b2:e2:df:6a:
fa:d6:7a:fd:34:2a:1f:c2:7d:95:e9:80:e1:62:5c:4a:f8:4b:
13:12:cd:3f:1a:67:24:88:79:0e:a7:37:cc:96:4f:2a:04:01:
46:43:df:fc:22:28:02:ad:ff:81:dc:33:9c:82:73:05:96:a7:
5b:fc:a1:d8:cc:89:de:f9:d1:32:5e:f1:fd:99:b8:2c:6a:9c:
9b:ec:64:6d:1f:64:4b:ff:fc:83:c1:2a:37:8e:7d:bf:57:3d:
99:d7:14:df:6d:36:83:cf:df:6c:06:ee:33:53:5e:87:07:db:
11:6f:f6:cb:f3:fc:db:33:b5:0e:95:6a:3f:c3:56:ec:5b:02:
d6:fe:b2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:47 2025 by rpki-client