Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
File: WRgezM-jp4ELruDwW_Oge7j3jWY.mft (raw, json)
Hash identifier: xaLgNhAuqvYznFPdGL7GG5cvir0shZApYZR95OCiXCg=
Subject key identifier: FD:CE:A0:9A:1F:C2:85:84:8C:7B:90:A4:67:B2:31:DC:D7:CC:A2:D6
Authority key identifier: 59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66
Certificate issuer: /CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
Certificate serial: 0199FCC65C96F1B43EC034C7513EF11969DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
Manifest number: 0F71
Signing time: Sun 19 Oct 2025 14:01:22 +0000
Manifest this update: Sun 19 Oct 2025 14:01:22 +0000
Manifest next update: Mon 20 Oct 2025 14:01:22 +0000
Files and hashes: 1: WRgezM-jp4ELruDwW_Oge7j3jWY.crl (hash: bTtSCRuH+Q8hjRFKrB/oDeMNhL3ApQwhUqpOuaaT5bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:5c:96:f1:b4:3e:c0:34:c7:51:3e:f1:19:69:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
Validity
Not Before: Oct 19 14:01:22 2025 GMT
Not After : Oct 20 14:01:22 2025 GMT
Subject: CN=fdcea09a1fc285848c7b90a467b231dcd7cca2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:62:58:35:ca:fd:66:78:55:b8:70:c9:6f:
90:c4:27:95:16:29:52:d4:d1:cc:ab:77:eb:68:ad:
76:e1:d9:86:6a:0c:91:6a:bf:1d:cc:4e:df:d1:b7:
f3:64:6f:5b:d0:20:03:0c:9b:16:b2:59:92:69:4b:
a8:e4:a7:c0:06:93:49:bf:02:d5:25:94:ac:7a:7e:
6d:f6:74:6d:94:3d:b7:d6:87:68:e9:0a:9e:e9:27:
31:ed:3b:8f:f0:10:71:97:5c:b6:71:3c:a6:e4:23:
b5:ad:58:27:1d:04:52:53:70:5e:e3:ab:97:dd:54:
21:24:9c:1f:b2:88:43:02:95:32:50:53:ec:0e:a1:
61:7d:6f:7d:22:f8:55:cd:04:1c:55:dc:11:ce:4b:
d7:dc:d3:58:df:0f:19:55:18:a2:9e:61:d1:6f:43:
db:40:4e:92:72:9d:6e:ed:71:ed:ff:e8:31:ab:81:
30:7c:c7:ff:97:cc:67:f3:00:9a:40:f1:1e:c2:35:
cc:79:28:5b:5e:32:3e:0d:b5:b6:62:57:f8:8b:ae:
8e:f5:e5:3a:39:ef:17:87:12:4f:51:e1:94:90:38:
6c:6a:30:07:42:90:01:d5:c2:9c:5d:32:1d:cf:19:
77:29:3b:a8:6d:74:7d:52:e3:8c:1f:d5:02:a7:f8:
45:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CE:A0:9A:1F:C2:85:84:8C:7B:90:A4:67:B2:31:DC:D7:CC:A2:D6
X509v3 Authority Key Identifier:
keyid:59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a2:39:b1:99:80:38:57:f3:6f:76:f0:32:ff:f7:43:17:1e:
97:9c:a5:fc:1f:67:bd:a2:d7:db:64:0c:14:b2:d4:a7:54:02:
72:bb:fa:00:df:1e:d4:f9:e6:99:1b:78:57:3a:e4:a9:14:d4:
d9:e5:f0:9c:22:88:e5:13:14:20:6f:bb:7c:74:0f:e9:bb:40:
dc:ef:c6:c2:48:9a:dc:7a:43:11:f8:51:dd:2e:df:8a:c0:7c:
b7:df:1d:f3:4f:37:96:aa:60:ee:eb:e0:e0:3d:76:57:c2:39:
e9:f6:4f:9c:25:e8:91:05:d4:ec:c9:ab:6a:14:cc:6a:09:f2:
8f:04:fd:a0:d8:24:64:65:f0:b0:d6:06:38:6c:e7:00:65:ce:
95:7f:03:46:76:b7:0d:36:a4:a6:89:e3:3f:e5:96:d3:b1:58:
62:30:28:6c:6b:a3:fd:f6:59:b9:6d:82:b7:26:1c:c1:59:39:
42:c8:04:52:02:9a:fc:75:c7:36:5a:13:6f:3c:04:56:4b:88:
04:23:39:0f:fd:d1:e8:fd:4f:f8:8a:4c:15:bf:6a:c2:12:03:
43:85:3f:61:d7:94:61:6c:dc:35:bf:20:51:8c:e6:b6:82:29:
76:af:a2:52:99:b8:58:02:39:f8:d6:81:c7:0b:4f:82:2a:8e:
80:fe:e5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:46 2025 by rpki-client