Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
File: wWD3u-jXY2d3YUisuMTKNflr6Vc.mft (raw, json)
Hash identifier: nZAcoVPcPJa8UIGgk33Cp5YfbjQB5oLWHVlJj+nf2x8=
Subject key identifier: 2A:E9:5F:A4:EE:2E:63:13:4D:A2:F1:21:57:E1:A7:E0:3D:4A:8E:FE
Authority key identifier: C1:60:F7:BB:E8:D7:63:67:77:61:48:AC:B8:C4:CA:35:F9:6B:E9:57
Certificate issuer: /CN=c160f7bbe8d76367776148acb8c4ca35f96be957
Certificate serial: 0199FBEAA106AD631ADD98AFB4ED6F8CF11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
Manifest number: 16B4
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: wWD3u-jXY2d3YUisuMTKNflr6Vc.crl (hash: z3gif95LTgop7hpNAdjt91xgu+HFqPH8PCckObrx/Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a1:06:ad:63:1a:dd:98:af:b4:ed:6f:8c:f1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c160f7bbe8d76367776148acb8c4ca35f96be957
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=2ae95fa4ee2e63134da2f12157e1a7e03d4a8efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:85:d5:8b:b2:c1:cc:7d:80:9a:e1:99:94:80:
5f:99:3a:96:38:34:2b:a4:79:93:05:30:29:39:9c:
c2:72:9d:2c:a6:f8:22:a8:ab:13:2c:a7:58:93:fa:
62:7b:9e:f2:7b:74:d9:38:b0:c6:4c:37:10:30:f6:
23:9a:c0:86:de:45:af:b8:35:4c:a4:98:be:b8:16:
e1:e3:ae:c4:79:dc:52:33:f9:a0:3d:c7:48:31:56:
51:39:d0:ec:84:6b:f7:10:b6:25:c9:05:b5:2a:86:
1d:93:16:ea:3d:7e:b8:bb:75:9d:f2:09:8f:fa:50:
c2:62:99:43:42:78:17:4d:e0:95:41:ff:04:e9:70:
91:62:80:57:20:7e:30:4d:80:5a:fc:71:9b:ff:b8:
71:88:28:25:9e:40:7a:ee:73:d0:cd:fc:70:49:33:
93:e3:2d:70:8c:9d:e4:75:16:0c:46:d8:87:94:9e:
e7:c2:ed:a5:aa:c4:19:cc:e8:e2:ed:94:7c:e8:62:
de:92:cf:bf:5f:28:17:2a:39:d7:fa:af:33:38:b5:
56:9e:fb:20:07:5d:0e:6c:5e:81:db:23:b9:c3:16:
ff:73:f6:65:04:5d:17:5b:85:05:50:ce:64:f8:30:
69:64:9b:66:28:65:da:98:21:91:de:04:55:5f:65:
1a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E9:5F:A4:EE:2E:63:13:4D:A2:F1:21:57:E1:A7:E0:3D:4A:8E:FE
X509v3 Authority Key Identifier:
keyid:C1:60:F7:BB:E8:D7:63:67:77:61:48:AC:B8:C4:CA:35:F9:6B:E9:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6a:73:de:01:be:c3:0b:97:ea:f6:ad:b9:2a:d2:cc:45:46:
fc:aa:08:3b:0e:fe:ea:69:7e:79:c1:5a:97:80:a4:33:30:35:
03:82:af:8b:7b:99:83:f4:01:e5:4a:ee:e8:29:e8:b4:1f:d0:
e7:46:02:db:d4:d8:a6:b4:6a:11:0f:5a:5d:1d:0e:2f:fa:f1:
b0:32:58:30:2e:2b:55:3e:08:34:55:39:f3:98:9c:35:ef:9e:
d9:df:a3:f9:e1:74:17:5f:8b:6f:35:92:42:17:44:8a:3a:51:
62:b2:5e:3b:a7:3f:74:2a:6d:26:57:3b:d9:02:ec:9e:75:2d:
d5:c9:5e:0b:cd:a1:66:2c:ae:3a:55:24:7c:7b:4b:fc:ce:1c:
82:23:9a:fd:b9:c3:d7:f4:f5:22:65:45:b0:6c:3e:b8:1a:32:
0b:d9:42:a7:27:c6:2b:62:70:d2:5b:eb:30:19:81:03:3f:16:
f1:c5:ad:0c:3b:0e:ca:54:0f:94:20:6d:2a:2f:6a:af:e0:af:
4a:43:f8:9e:ae:38:c9:23:ea:a4:9f:10:5e:15:48:76:6d:2e:
28:60:2b:b8:d7:b1:47:82:48:4b:3d:5c:6b:8a:b5:4e:d3:e1:
87:f6:8f:86:10:b3:dc:86:99:2c:4e:5a:a1:83:f9:18:5d:d3:
db:14:3c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:43 2025 by rpki-client