Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
File: wATtnrWVyJu57H4g-YUp6VFznYQ.mft (raw, json)
Hash identifier: hNRBW0/LftgZYYVdJZ2JbB6nLGBjVtZVKOXvCnNpOas=
Subject key identifier: 36:C4:BF:1B:8F:EA:52:54:14:EC:73:02:5F:1B:61:AD:56:A7:F8:FA
Authority key identifier: C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84
Certificate issuer: /CN=c004ed9eb595c89bb9ec7e20f98529e951739d84
Certificate serial: 0199FD33FEA461CEE2B2F908A0EB6C5B2958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
Manifest number: 043B
Signing time: Sun 19 Oct 2025 16:01:07 +0000
Manifest this update: Sun 19 Oct 2025 16:01:07 +0000
Manifest next update: Mon 20 Oct 2025 16:01:07 +0000
Files and hashes: 1: wATtnrWVyJu57H4g-YUp6VFznYQ.crl (hash: DuQfxb2/i6fK5dJ9i+hrCe5IhbLMvfrZ3YOibCAa8QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:fe:a4:61:ce:e2:b2:f9:08:a0:eb:6c:5b:29:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c004ed9eb595c89bb9ec7e20f98529e951739d84
Validity
Not Before: Oct 19 16:01:07 2025 GMT
Not After : Oct 20 16:01:07 2025 GMT
Subject: CN=36c4bf1b8fea525414ec73025f1b61ad56a7f8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:95:2a:b4:ba:75:45:63:75:b1:ba:ff:c6:
9d:ec:dd:de:d7:2d:d6:ae:1f:b2:37:30:a9:e8:9f:
6b:22:c1:e6:ed:51:f3:db:31:4d:69:60:1e:5b:a9:
b2:b9:4c:cb:bf:99:b6:98:e3:be:33:5a:47:72:0f:
d5:6d:e1:a1:a3:1f:9d:10:fb:be:c5:ad:4b:44:bd:
e0:35:ff:f1:19:94:bb:9b:a4:b1:13:4d:a7:38:9f:
57:7c:8b:db:e1:b8:d0:a1:ff:66:e3:f4:f2:9a:a0:
d9:b1:ae:91:21:6c:78:75:be:6f:81:aa:fb:69:69:
33:a4:8b:2c:66:bf:27:1f:48:b9:0a:ef:66:63:bf:
8a:e2:33:9b:d9:51:7c:3c:a0:86:e9:17:05:19:57:
63:85:04:54:e9:0c:03:e0:aa:4c:40:d9:bb:0d:73:
c3:d4:37:35:92:90:66:2e:83:68:de:c7:fe:a0:09:
03:89:85:22:1a:f0:92:d2:4b:dd:50:30:e7:6a:3e:
4f:33:dc:47:1d:32:fb:ac:5f:b4:aa:b4:9a:39:cc:
c7:bf:ef:49:5b:9d:27:d5:5c:7a:27:0c:d0:1e:f2:
c8:19:46:af:9d:e3:a3:36:b7:0f:fc:0d:de:c4:e8:
bb:34:3e:d9:e2:3d:6d:9b:35:b1:10:a5:dc:38:ce:
69:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C4:BF:1B:8F:EA:52:54:14:EC:73:02:5F:1B:61:AD:56:A7:F8:FA
X509v3 Authority Key Identifier:
keyid:C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:52:24:67:50:ee:38:47:74:cf:0e:cf:ee:65:f7:ab:a4:af:
1b:e8:6d:9d:23:5e:a7:7f:1f:fe:2f:6b:da:5c:62:2b:ca:ee:
33:7d:f0:fe:4b:ef:25:21:b6:10:35:53:42:62:f4:d4:8a:ea:
52:61:8c:4b:93:2a:21:67:11:00:9e:6d:a4:14:13:49:45:4c:
ed:85:61:04:c1:26:09:42:4a:3e:2a:6f:56:1a:1f:65:34:0c:
dc:bc:d2:20:3e:b5:f0:67:ae:a8:84:83:56:31:79:60:18:d0:
8d:c1:e1:3e:f7:25:39:e4:6d:d2:fc:ef:5a:4e:66:ae:da:08:
e3:08:af:fa:b3:20:57:57:a7:09:b8:16:e2:9a:94:28:13:9e:
f9:c5:15:fa:fd:38:f8:ab:ae:97:26:26:ff:46:31:75:a3:ee:
6c:71:3f:32:36:60:b9:09:23:e9:c0:a1:64:ea:77:35:5b:a1:
17:72:5e:8d:19:c0:d9:d1:17:40:22:93:86:db:8f:36:e7:94:
d9:34:05:a6:92:88:22:20:7e:11:02:44:6d:c5:6a:7e:e4:c1:
75:f6:4f:d8:6a:14:54:09:c8:cf:c8:23:3a:dd:02:b0:27:46:
fa:19:c4:dc:44:6b:c4:b6:f6:58:c5:94:fe:13:7e:0e:49:74:
f8:a7:d2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:56 2025 by rpki-client