
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
File: wS8tv90wnyYDJMqn4-2neT-FQac.mft (raw, json)
Hash identifier: fl69ZUsAbd+lztdMAoeoJipfwaII0ikGCHKCzdXSnqQ=
Subject key identifier: C1:42:B9:1C:A3:EE:FB:CE:0D:1E:85:4C:D6:B1:2F:71:F7:FA:39:5A
Authority key identifier: C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
Certificate issuer: /CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Certificate serial: 0199FBEB9C3C3880AE9A5DFA9BCC1DE7A33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
Manifest number: 0D48
Signing time: Sun 19 Oct 2025 10:02:26 +0000
Manifest this update: Sun 19 Oct 2025 10:02:26 +0000
Manifest next update: Mon 20 Oct 2025 10:02:26 +0000
Files and hashes: 1: wS8tv90wnyYDJMqn4-2neT-FQac.crl (hash: oNF3R1m6QowvvAPexBxzqgZMLeN4hutzKdWToWNXtWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9c:3c:38:80:ae:9a:5d:fa:9b:cc:1d:e7:a3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Validity
Not Before: Oct 19 10:02:26 2025 GMT
Not After : Oct 20 10:02:26 2025 GMT
Subject: CN=c142b91ca3eefbce0d1e854cd6b12f71f7fa395a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:1a:d4:e5:1d:c4:7e:be:e4:2d:8f:90:d0:
96:f8:a7:af:38:f3:17:e0:62:e0:4d:66:4a:74:b4:
57:97:a3:0b:8a:b3:ea:04:f6:be:81:dc:4d:46:58:
5b:ea:30:e6:ec:bb:fd:1a:b1:fb:1b:d1:20:6e:d2:
6e:a9:cc:2e:1a:d0:53:1c:67:a2:f8:1f:ee:8f:9d:
e1:9d:8d:6c:64:e2:23:bc:d1:ca:58:10:f9:3b:fb:
6a:6d:cc:9c:35:2d:c9:41:4d:0f:e2:bc:20:ea:19:
8c:91:00:fc:bb:99:14:f4:41:32:55:0c:a9:aa:bc:
6a:b7:dc:70:97:b4:e8:3f:f4:18:71:fc:61:ac:4e:
e8:96:c0:8f:3b:59:35:09:53:00:98:46:ab:46:7b:
df:f0:b8:3f:36:74:1e:f4:92:a8:da:b0:08:d1:e7:
db:ff:8f:35:3a:99:05:7b:0d:fd:b4:9a:c0:35:59:
84:0b:a0:6e:ac:a2:73:e5:6c:2c:ad:4b:c4:6c:3c:
bb:81:20:1d:1e:a6:60:84:91:3a:b2:6f:28:aa:e3:
81:51:9e:26:f1:73:af:0d:4a:ca:63:ed:c3:e2:2a:
23:e4:7e:3a:2f:9b:12:2b:28:4b:b1:46:3b:ab:08:
b9:43:b1:7a:89:f7:5d:2a:5f:a1:73:55:f6:c1:67:
c0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:42:B9:1C:A3:EE:FB:CE:0D:1E:85:4C:D6:B1:2F:71:F7:FA:39:5A
X509v3 Authority Key Identifier:
keyid:C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:da:7f:b0:07:c8:8d:f1:2b:a4:36:e7:72:da:87:23:25:4e:
c8:14:54:98:29:b2:4b:ea:08:1f:88:f9:04:45:f4:db:f3:0f:
65:4f:bb:bf:a5:45:86:0c:dc:e6:1f:f3:bc:22:af:c9:b3:ef:
e7:54:35:0c:ad:b6:2c:ce:bc:cb:d8:b0:97:7f:99:99:fc:b8:
3a:de:2f:e6:2e:99:f0:6c:0e:1f:48:b0:91:58:a4:07:72:cd:
0b:dd:42:bb:8b:45:f9:28:32:88:4b:cc:1e:64:bc:92:cf:0d:
0f:58:bc:4a:a3:a3:6a:f1:ea:aa:3e:63:68:f4:0a:a4:16:af:
e5:30:68:a7:90:03:2a:de:2a:d0:de:6f:a6:0b:94:ac:54:e5:
a5:85:f9:81:56:06:47:ab:e4:39:0f:d3:6e:16:5a:ee:98:d1:
e4:b9:1d:7f:26:3e:76:ea:c8:83:97:1c:be:6b:60:69:c0:ff:
4c:c3:00:3f:80:d5:64:9b:23:8c:eb:49:5a:fb:01:8d:dc:40:
8f:8c:6f:05:cb:b8:89:fe:5d:47:9b:41:dc:b4:3b:da:7b:01:
94:5d:45:83:05:a5:8a:44:64:38:44:be:c0:ee:86:46:cc:eb:
8c:6c:24:9b:c1:1d:e0:91:80:83:55:5d:0b:40:34:70:ea:df:
12:92:f8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:29 2025 by rpki-client