Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
File: wvPozdMcgnmN3vk0AfKcfcqmr20.mft (raw, json)
Hash identifier: sF6hKQXFWLdTBhQmMrveFDIx/nvjWl5Yv8aoBBwzGFE=
Subject key identifier: F4:D8:9C:31:38:6B:CB:19:38:0B:F7:4E:01:B1:2D:4B:D9:6F:6D:91
Authority key identifier: C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D
Certificate issuer: /CN=c2f3e8cdd31c82798ddef93401f29c7dcaa6af6d
Certificate serial: 0199FB7CC3258EC1FB617EDD47590364FAC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
Manifest number: 6B
Signing time: Sun 19 Oct 2025 08:01:21 +0000
Manifest this update: Sun 19 Oct 2025 08:01:21 +0000
Manifest next update: Mon 20 Oct 2025 08:01:21 +0000
Files and hashes: 1: wvPozdMcgnmN3vk0AfKcfcqmr20.crl (hash: 2sbllTk6lRPg6xTUn4Xv3Pc+rWrxt0Z6dgfSwvRaUO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c3:25:8e:c1:fb:61:7e:dd:47:59:03:64:fa:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f3e8cdd31c82798ddef93401f29c7dcaa6af6d
Validity
Not Before: Oct 19 08:01:21 2025 GMT
Not After : Oct 20 08:01:21 2025 GMT
Subject: CN=f4d89c31386bcb19380bf74e01b12d4bd96f6d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:69:e7:cb:7c:e4:0d:f7:7c:06:92:18:d8:95:
3d:4a:04:94:70:7c:e8:ce:24:a0:61:44:a8:ee:ea:
b6:89:b4:49:7a:8d:5e:bf:85:86:3d:9e:97:b7:42:
6a:3a:91:da:e0:15:3a:61:61:ba:1c:88:01:4a:17:
19:a2:7f:7e:69:f7:4b:49:d5:f4:0f:cc:4f:b0:13:
83:fd:3d:b3:e2:0b:c9:a3:32:7a:28:32:29:73:63:
e6:8b:a4:9a:fc:17:53:be:e0:d6:44:73:46:32:0c:
33:58:71:3f:8c:06:82:29:a0:a0:39:37:67:a9:0b:
a3:ac:69:12:30:f1:9b:c8:6f:93:73:66:3e:6f:b2:
64:fa:b6:2c:be:ea:01:45:ca:a2:8c:a6:69:be:71:
5b:ee:70:fd:cc:35:9e:85:4b:6a:ed:44:6c:d6:ab:
77:cb:3f:84:4d:2f:a6:93:c2:ce:30:3a:03:1c:fe:
f5:a4:b4:78:b2:5d:0f:8e:59:bd:34:55:5a:73:e4:
47:06:26:a2:a8:94:7d:11:cb:2f:f8:75:4e:4a:e8:
8f:fd:ca:bd:e9:da:a6:31:c3:6d:9b:00:c3:22:0f:
bc:ec:ef:fe:cd:f5:d3:c7:e8:b8:98:76:3d:f7:ad:
e1:0e:11:20:8a:e6:77:f0:ab:ba:a3:52:a7:66:46:
76:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D8:9C:31:38:6B:CB:19:38:0B:F7:4E:01:B1:2D:4B:D9:6F:6D:91
X509v3 Authority Key Identifier:
keyid:C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f5:9f:af:db:34:77:86:73:05:78:d1:41:5a:1d:93:a1:58:
12:91:9b:8f:17:eb:82:0d:47:aa:e9:d1:1f:8c:6a:9c:5c:84:
7b:c4:b6:f4:9c:2e:93:6a:cf:60:8e:df:c2:d6:0b:a0:bc:d7:
4c:56:ad:6a:4e:94:d0:bb:a9:d2:31:6c:72:d4:bd:38:8d:e7:
c0:2f:be:ca:74:8d:76:67:d7:2d:7a:d7:be:e2:e4:9f:1c:c8:
71:18:d6:65:30:5c:e8:d1:5c:f5:eb:f7:d3:26:a5:6e:fe:f6:
38:54:95:53:77:37:c3:f9:6d:32:14:e8:53:df:ae:ff:e9:e3:
da:3e:0a:33:4a:f9:f5:3b:92:f4:42:db:34:da:50:37:87:f9:
53:28:48:b6:6c:46:d7:c1:b8:0c:58:a3:aa:3c:b2:ce:2a:58:
41:43:de:2a:b0:ad:ac:38:62:7a:93:45:c1:8b:52:54:72:aa:
ce:0a:2e:b7:83:16:f8:3c:63:8a:d7:0a:55:1f:43:5a:e7:d8:
ec:5b:d7:10:3c:9a:6a:e1:df:57:82:0c:e0:fd:49:96:68:7e:
6b:4c:26:34:db:9d:76:84:02:6c:22:67:c6:97:3a:98:1a:ef:
4d:4b:01:06:65:ee:a8:7a:5f:9d:b8:e9:ad:ce:00:b4:8d:0e:
31:bd:7c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:03 2025 by rpki-client