Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
File: WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft (raw, json)
Hash identifier: ggTxV/s4ejuozZ59EOYKGnmcPGDiMeVlHgToM4hvSdg=
Subject key identifier: C5:7A:C6:6D:CA:01:72:86:BB:73:87:C1:D5:35:DD:97:97:4B:7B:98
Authority key identifier: 5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
Certificate issuer: /CN=5b040b39cd994909f550410dc47945bb5b4952f9
Certificate serial: 0199FBEB4336120A711144A9717CAA55224C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:03 +0000
Manifest this update: Sun 19 Oct 2025 10:02:03 +0000
Manifest next update: Mon 20 Oct 2025 10:02:03 +0000
Files and hashes: 1: WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl (hash: XyRb9Y6vRa5wSGg1JNMlNFqvRyOptxTwerSJy95rSg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:43:36:12:0a:71:11:44:a9:71:7c:aa:55:22:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b040b39cd994909f550410dc47945bb5b4952f9
Validity
Not Before: Oct 19 10:02:03 2025 GMT
Not After : Oct 20 10:02:03 2025 GMT
Subject: CN=c57ac66dca017286bb7387c1d535dd97974b7b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f5:40:f2:c4:0b:eb:f5:3a:78:5c:2e:5b:a2:
aa:a0:c7:83:f5:ef:30:4f:74:55:1c:f1:d6:3a:59:
2b:45:42:32:03:c0:7c:45:45:9d:fd:2f:07:3f:62:
90:0e:cd:dc:d5:07:41:2c:0f:5e:72:11:94:b1:10:
e0:b6:9a:a5:89:76:79:17:5e:92:7f:a0:25:fe:7b:
bf:98:3b:c3:21:a8:ee:3f:fc:d2:06:a1:7f:57:9b:
25:07:2c:20:a2:dd:99:c1:e8:25:a5:49:f9:ab:d2:
50:bb:40:50:d8:44:68:1d:26:14:e6:8d:c1:47:28:
9f:41:fb:f0:a2:d0:23:3c:3d:34:ed:95:fa:a6:e0:
9f:5b:9b:4e:fa:88:8c:20:63:2b:50:d0:c5:67:c6:
bd:5d:c0:bc:c1:33:db:3b:e7:ba:27:b8:de:a9:3e:
f4:e3:06:f5:99:30:8c:49:59:0b:87:8c:55:09:5e:
2c:b3:be:e6:66:fa:0f:be:d0:ce:06:92:94:35:cb:
bd:66:34:2a:f7:4b:bd:fc:19:9d:82:07:3b:81:0c:
98:2a:6b:e1:74:3b:af:97:fb:1d:d8:fb:09:50:ec:
86:f9:be:ca:05:90:31:e4:61:9f:93:8e:b1:47:95:
9c:ee:f1:83:b2:b3:e9:84:5f:51:c7:19:61:6a:3e:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7A:C6:6D:CA:01:72:86:BB:73:87:C1:D5:35:DD:97:97:4B:7B:98
X509v3 Authority Key Identifier:
keyid:5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0a:ac:d6:74:b4:eb:39:5b:91:7c:f4:f7:db:aa:86:1b:90:
47:6b:6c:82:b5:bf:a3:6c:95:82:97:55:4d:f3:80:67:ee:63:
9a:e6:db:1e:e3:db:0e:24:be:ff:7e:a6:65:fe:96:17:03:5e:
4a:d0:fb:e6:50:1b:15:05:9b:9e:9c:17:93:3f:f4:3e:bd:2a:
54:d0:7d:95:bb:f5:b3:6b:44:fb:79:e7:b8:4f:2c:e3:e9:5d:
1b:21:66:47:41:15:54:97:5f:bb:c2:92:7b:dd:bb:34:e8:a3:
01:a4:40:90:ae:91:a9:3c:66:cd:07:bb:ce:43:71:87:fe:f8:
ec:c3:68:dc:60:aa:e4:e1:b3:12:7c:86:0e:e4:81:e7:b2:66:
f0:e3:0d:33:71:b8:cd:a5:9e:70:40:6b:5f:e4:2d:81:90:44:
61:1a:0c:a1:12:aa:88:7e:1d:a7:28:ca:ae:b0:c4:dc:b7:9d:
47:d8:5a:c5:e1:1e:dd:b9:d2:3e:73:11:d3:0c:a8:bc:05:ae:
48:5e:dc:64:b8:22:7f:31:8e:75:1c:78:b6:d8:7f:0f:d9:55:
3d:a7:9e:4b:e2:b3:6a:97:5a:61:bc:2c:84:f2:0c:d5:c1:53:
6d:e0:7e:5e:53:8b:f1:07:56:26:1c:19:fd:c4:b8:b6:dd:51:
a9:60:04:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:51 2025 by rpki-client