Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
File: wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft (raw, json)
Hash identifier: JS/Xc4nK6194H2Vj9GD+17/f1RoItBtAEL045/zy8sY=
Subject key identifier: 54:AB:A1:C0:F6:12:4A:EE:A6:90:B7:7C:6E:55:42:5E:77:DA:A5:7C
Authority key identifier: C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
Certificate issuer: /CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Certificate serial: 019A01B4CCD583B7B41A42148DB4546D8B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
Manifest number: 118E
Signing time: Mon 20 Oct 2025 13:00:17 +0000
Manifest this update: Mon 20 Oct 2025 13:00:17 +0000
Manifest next update: Tue 21 Oct 2025 13:00:17 +0000
Files and hashes: 1: wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl (hash: x5N6yYTbJh3EDwGOL0lO3vRcY6PzbQx/ol2G+aY2bfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:cc:d5:83:b7:b4:1a:42:14:8d:b4:54:6d:8b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Validity
Not Before: Oct 20 13:00:17 2025 GMT
Not After : Oct 21 13:00:17 2025 GMT
Subject: CN=54aba1c0f6124aeea690b77c6e55425e77daa57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8c:3e:41:09:22:a1:28:0a:dc:4c:90:ed:b0:
ae:b9:29:9a:f6:ef:41:25:cb:76:42:af:f6:cd:d5:
fa:0e:f0:35:ea:24:21:76:31:df:18:81:c0:0c:61:
9f:f8:b5:cc:ae:74:8e:43:05:7b:76:cd:d2:c4:f6:
9b:cf:07:1b:cd:c9:71:f4:06:9a:23:16:eb:07:6d:
c2:c3:a1:b2:14:10:20:40:7c:bf:77:cf:97:03:85:
90:a8:76:e8:d6:2a:1a:04:7f:b7:44:54:e7:da:b4:
11:7e:18:ac:76:76:68:be:6f:17:ff:12:95:63:a1:
bc:5d:10:74:38:2e:d4:ae:6e:d0:aa:fe:c4:51:ac:
7c:f4:26:7b:3a:15:68:f6:17:db:af:3a:db:16:24:
4f:a1:38:7f:5f:3b:cc:06:21:11:9b:24:08:9b:b0:
04:a0:41:e0:d9:b2:fd:29:e6:b1:85:e1:7a:e2:b8:
fb:3b:6a:1e:81:7e:bd:73:6d:15:49:16:dc:91:7f:
9e:34:4c:bb:4f:6b:02:6f:57:a4:ac:a2:23:9f:5d:
f2:95:ad:6f:b6:3e:c8:10:36:1b:5b:6b:a4:52:05:
02:99:c5:08:e2:07:d1:df:1a:f9:3d:18:ff:b2:54:
00:ab:a3:ab:0b:0f:12:1a:2e:42:7c:6e:5b:88:00:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AB:A1:C0:F6:12:4A:EE:A6:90:B7:7C:6E:55:42:5E:77:DA:A5:7C
X509v3 Authority Key Identifier:
keyid:C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:85:e3:57:49:2e:ee:73:34:8d:66:d3:a9:61:dc:2b:1e:99:
75:09:0f:36:a7:d8:68:aa:22:7b:9a:42:d8:2e:59:f5:06:43:
2b:2f:ac:ff:f7:c5:76:86:45:7d:56:80:b9:30:28:c1:53:b5:
0a:c1:b4:86:5d:3a:86:78:6f:8e:d2:6c:54:cc:b4:cd:ec:ab:
67:75:97:0d:ce:bc:95:19:5c:1b:99:ef:98:40:95:69:3b:d7:
63:30:c2:13:6b:62:ca:97:af:0d:3c:ad:80:a1:b2:d9:97:88:
41:f4:e2:40:12:23:6a:b6:e1:4f:70:ed:d6:72:08:d9:02:00:
40:74:b1:bd:b6:ea:55:7d:00:28:b4:e7:df:fe:2e:cf:82:cc:
8e:b6:2c:cc:5c:5f:59:d6:f3:f3:a4:e5:16:21:83:60:0e:f7:
96:d3:7f:f3:da:78:93:6c:f2:45:65:cf:c0:92:59:61:da:7c:
ee:81:99:be:08:73:93:95:ad:2d:1d:e3:a5:c6:92:84:a5:14:
d2:ad:34:ee:da:2c:0f:ac:24:c1:ab:db:b5:db:44:5f:81:be:
ba:d0:e8:eb:b3:eb:31:31:e0:df:f3:51:37:91:e5:9a:7d:18:
a9:59:21:44:c8:8e:94:0b:39:28:b2:38:a1:d6:b5:83:14:67:
71:23:2b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:00 2025 by rpki-client