Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
File: WujsvmlVEtpODwK23A572pYNwzo.mft (raw, json)
Hash identifier: jcBtTyV4kJefto4jmTzRD/sfBRBrydkN5UudGt4E0l0=
Subject key identifier: E1:2D:0A:F6:DE:12:A0:18:6F:B6:50:72:07:2D:E8:A8:7A:06:A1:3E
Authority key identifier: 5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
Certificate issuer: /CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Certificate serial: 0199FBEBF82E5CC800D63ADEA11D2B673883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
Manifest number: 07DA
Signing time: Sun 19 Oct 2025 10:02:49 +0000
Manifest this update: Sun 19 Oct 2025 10:02:49 +0000
Manifest next update: Mon 20 Oct 2025 10:02:49 +0000
Files and hashes: 1: WujsvmlVEtpODwK23A572pYNwzo.crl (hash: /ZYq29wef8Hf17uoEEu+8ABKpcOdbTakorJ1yFG1FBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f8:2e:5c:c8:00:d6:3a:de:a1:1d:2b:67:38:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Validity
Not Before: Oct 19 10:02:49 2025 GMT
Not After : Oct 20 10:02:49 2025 GMT
Subject: CN=e12d0af6de12a0186fb65072072de8a87a06a13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:80:a9:9e:d3:32:5a:3d:e7:4b:df:63:d9:
5f:16:e1:e5:44:45:85:66:78:f1:49:31:e4:10:25:
da:e3:2b:54:0e:08:2b:5c:a3:a0:80:24:c4:a1:9c:
a8:2b:45:94:b4:1c:2f:00:89:87:7a:1b:2f:53:67:
12:14:7d:4e:48:a1:d1:98:48:a5:63:82:63:0f:58:
2c:87:7a:0b:2b:2c:62:78:67:50:7c:e8:0e:bf:5e:
92:02:9b:a3:f8:76:82:1c:95:e5:13:62:de:21:45:
09:1b:73:f5:9c:ed:97:4b:10:94:12:a1:f8:41:9b:
3e:dc:9e:43:b2:9a:a7:57:48:8a:69:fa:be:8d:ec:
c4:29:a1:25:7a:e4:55:ca:e8:06:0c:3e:d1:0a:47:
28:40:24:8a:ee:e6:04:e7:bd:25:4a:90:45:7b:82:
3e:b7:0f:d8:9b:77:1e:8d:b4:df:11:5f:b9:b7:69:
c8:ed:4f:59:03:af:88:ef:76:0b:40:5f:cc:f0:34:
09:de:52:66:4b:3b:2e:6e:55:e2:d6:93:f0:de:df:
17:b0:f3:95:72:a2:ff:9f:bf:e8:8d:9d:be:f2:82:
ad:db:90:29:de:d8:d4:b6:07:e8:7b:40:7a:5b:13:
de:d0:58:45:cb:1b:90:02:9f:14:4a:84:62:4a:00:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2D:0A:F6:DE:12:A0:18:6F:B6:50:72:07:2D:E8:A8:7A:06:A1:3E
X509v3 Authority Key Identifier:
keyid:5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:af:69:51:49:1a:80:9a:47:1d:2d:7b:3c:9d:c0:4e:93:33:
30:0b:48:f6:af:e2:8c:44:08:f4:cf:c3:d7:85:c8:1c:21:22:
f4:e9:be:72:c2:07:ee:d4:cb:60:57:3c:92:84:a2:85:34:d6:
4d:24:41:f2:24:6b:18:9d:82:89:51:a2:40:88:db:56:30:9e:
56:cd:dc:d7:22:dc:f9:4a:38:85:eb:f6:fd:04:18:30:67:45:
28:fb:40:35:03:25:ad:f5:56:9a:b0:54:90:b3:ea:61:96:8e:
a1:db:8a:c4:d8:4a:ea:0d:41:69:df:b1:d8:5a:98:93:7a:02:
b4:cf:97:89:1e:4a:8a:c7:f1:4f:90:fb:43:d3:82:82:9c:ae:
3a:71:8d:73:00:04:9f:45:93:65:aa:f8:8a:0b:9a:0b:ad:0b:
dd:e6:e5:19:84:e5:77:40:1c:fd:3e:76:5c:dc:95:fc:fd:e4:
6d:63:f6:d2:15:0a:2b:81:f7:93:d5:77:16:30:8b:6d:17:93:
6d:f0:0d:e9:77:af:7c:46:8d:4d:0c:65:41:ec:09:cf:e1:2e:
47:7f:b8:48:0a:c2:96:ba:97:6a:41:c1:ab:e9:81:f5:c0:a0:
20:77:9e:f9:ce:f3:dd:4c:91:e3:ee:a4:69:38:4d:39:20:e8:
df:01:4b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:15 2025 by rpki-client