Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
File: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft (raw, json)
Hash identifier: 1NyqVvTE3sfc1G807rC9EgLH/iInHLxnwZVY/xqf8y8=
Subject key identifier: AE:6A:7E:1D:C3:28:33:02:A1:95:55:41:6E:4C:11:C6:0B:DD:68:BC
Authority key identifier: C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
Certificate issuer: /CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
Certificate serial: 0199FCFD7C01D2F8B98D5EB0F4F359D528F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
Manifest number: 06A1
Signing time: Sun 19 Oct 2025 15:01:34 +0000
Manifest this update: Sun 19 Oct 2025 15:01:34 +0000
Manifest next update: Mon 20 Oct 2025 15:01:34 +0000
Files and hashes: 1: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl (hash: N5eA99s5EGuCMnAIbpowz1aU0nJCdnCGCjVEOQTiJZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:7c:01:d2:f8:b9:8d:5e:b0:f4:f3:59:d5:28:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
Validity
Not Before: Oct 19 15:01:34 2025 GMT
Not After : Oct 20 15:01:34 2025 GMT
Subject: CN=ae6a7e1dc3283302a19555416e4c11c60bdd68bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:5a:ad:60:37:60:3d:bd:46:9d:15:c1:1f:
54:f9:e2:a7:37:c6:bc:7a:30:3e:cf:14:93:81:e1:
33:07:91:62:73:ad:82:f8:10:f9:ac:2e:5c:4f:48:
37:b7:c2:40:6b:75:68:9b:60:49:6b:34:19:bc:79:
45:70:c8:db:28:97:c4:a0:dc:0d:a2:6c:31:05:23:
74:35:60:be:6a:24:9b:cd:69:5c:62:2f:2d:2b:e8:
6f:14:b2:e1:96:b5:0f:76:25:b3:72:d8:f6:28:fe:
e1:62:16:66:32:2e:89:e3:e8:64:c2:57:72:ad:90:
ea:bb:63:2c:88:a1:94:87:b4:b8:11:df:2f:63:a2:
58:48:0e:8a:c3:06:c4:12:af:6c:4d:91:d7:dd:fe:
3c:84:96:b1:c7:23:d1:ca:a3:bc:df:d6:d4:2a:bd:
b8:e3:8f:59:df:1b:a9:17:90:05:98:e2:90:1a:e4:
a7:67:95:34:7e:18:c4:1e:8d:0a:98:ad:52:23:d5:
b7:a7:6b:e9:24:77:bf:4c:b7:7b:19:ca:e0:d2:c2:
a9:ef:56:72:4a:d4:1d:7d:45:9a:0d:4a:2b:dc:2d:
32:8b:cd:90:25:df:b2:c1:1a:36:92:12:04:41:fb:
56:49:25:bf:98:e6:47:07:c3:e0:3b:9a:f9:5e:48:
d1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6A:7E:1D:C3:28:33:02:A1:95:55:41:6E:4C:11:C6:0B:DD:68:BC
X509v3 Authority Key Identifier:
keyid:C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:13:2b:50:b9:a4:f3:1e:9d:c1:ef:bd:9e:4d:dc:91:ca:cc:
8d:d0:99:9d:53:42:a7:d1:c3:ab:ff:d5:ae:00:4c:60:77:a8:
6e:7f:23:d3:02:18:16:2c:9b:c0:40:a4:34:40:51:9b:bd:82:
7d:94:d4:dd:c1:cb:b9:86:c7:57:6f:7b:54:be:fc:c0:a4:8c:
5b:30:12:b3:55:98:2c:72:41:20:bc:09:a1:51:0a:e6:bd:5b:
d6:e3:2c:4d:f5:71:46:26:70:0d:3b:40:1a:1a:77:14:17:62:
f3:0e:47:b4:6f:00:ad:9f:23:94:d9:62:56:f9:4e:2e:84:5f:
0b:c4:6d:05:d1:80:e8:73:56:f0:f3:9a:ae:27:98:38:de:93:
d1:20:e5:5a:0c:af:c6:fe:d6:1b:56:2d:e1:a6:c1:eb:5c:9b:
a2:52:dc:44:cf:f8:33:da:ad:32:e5:a5:84:d5:a7:ad:49:dc:
1d:0d:eb:ca:9c:3a:79:10:10:a1:d5:3d:9e:90:07:2f:77:87:
56:32:ff:74:3f:84:67:b2:c2:bb:e3:b4:84:67:a4:ac:c2:99:
4a:ec:2a:43:c5:0d:57:d6:c0:b4:13:62:60:cc:bb:d9:39:b6:
ee:45:28:c8:a7:83:22:ce:54:df:66:ea:6c:12:5c:c7:4d:28:
8d:3e:b7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:33 2025 by rpki-client