Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
File: DWisydbqg0IUE-TPWgc3-sMXNSo.mft (raw, json)
Hash identifier: FitrsiVelY8VZx1OdAzE6pLDU/arg4If7ie8hP+Jk98=
Subject key identifier: 2D:91:1E:43:BB:8F:78:3A:BC:C9:9B:D6:CB:D5:51:C4:65:32:6A:D2
Authority key identifier: 0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
Certificate issuer: /CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Certificate serial: 0199FB0EBC28475B34A5A7FDD97B356BC254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
Manifest number: 0413
Signing time: Sun 19 Oct 2025 06:01:10 +0000
Manifest this update: Sun 19 Oct 2025 06:01:10 +0000
Manifest next update: Mon 20 Oct 2025 06:01:10 +0000
Files and hashes: 1: DWisydbqg0IUE-TPWgc3-sMXNSo.crl (hash: FUtHxOMUgdJXqMhVxQHcjkHFbfwiyoymMJdYB88YAVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:bc:28:47:5b:34:a5:a7:fd:d9:7b:35:6b:c2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Validity
Not Before: Oct 19 06:01:10 2025 GMT
Not After : Oct 20 06:01:10 2025 GMT
Subject: CN=2d911e43bb8f783abcc99bd6cbd551c465326ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:32:08:2b:03:fa:8e:c6:11:d7:97:b6:f2:29:
f4:af:bb:47:80:fc:a5:19:4d:26:5a:5f:6e:eb:b6:
13:55:3f:54:a7:a9:5d:65:53:1b:d2:8c:16:1b:1e:
7e:12:b1:01:90:45:54:61:4e:f9:94:d4:1d:9c:36:
0b:fc:26:48:9b:68:e8:f5:0e:e0:2a:4f:47:1b:28:
f1:af:a7:d5:a7:68:a4:13:2f:cf:f9:5c:1b:32:95:
42:0c:99:41:a1:a5:3a:0a:be:66:64:be:8a:f4:9b:
6d:b3:5b:e3:2c:f4:76:fb:d5:ed:0f:e3:45:38:a1:
e1:c2:f8:d8:cc:26:82:70:d5:1b:44:15:f0:6d:cc:
9e:2a:57:cb:84:31:ae:62:88:d9:04:fe:f1:90:2b:
fd:28:06:60:3d:6a:71:03:14:5b:0b:81:2a:a5:6d:
32:34:52:0c:a5:34:55:6d:2a:61:4c:1f:35:11:e9:
d2:de:3d:4a:be:64:e1:f0:63:f4:8e:1a:e4:12:8a:
98:d6:01:17:6f:9a:e3:0d:50:9f:b9:78:07:53:af:
2e:b4:c6:2b:d4:70:87:2b:cf:60:4d:8a:42:80:db:
05:b3:6a:c0:9d:09:b8:c2:3e:49:40:56:a8:4a:a5:
b2:3b:ac:c0:00:fc:5c:b8:69:99:4e:62:18:af:86:
24:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:91:1E:43:BB:8F:78:3A:BC:C9:9B:D6:CB:D5:51:C4:65:32:6A:D2
X509v3 Authority Key Identifier:
keyid:0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4c:b6:15:67:ef:65:d6:c7:07:e8:9b:20:42:a8:d2:b6:57:
8a:da:74:12:65:c9:7c:22:9c:24:7f:df:93:59:49:78:16:02:
4c:4d:3d:71:21:b8:ae:e3:5a:58:5b:56:39:0a:12:23:c9:96:
a6:57:33:55:e1:a4:0e:96:45:c4:5f:d1:6c:2f:07:c5:e0:6b:
44:e4:ee:b6:fb:39:09:56:5b:73:08:9f:08:b9:fd:e2:05:f2:
10:f1:fe:96:f0:18:34:bf:f1:66:41:ed:8e:dd:3a:bb:da:d7:
b9:80:97:df:59:1b:7d:9f:8a:a3:60:6d:15:f7:4c:a6:eb:0e:
07:53:20:ad:97:4e:a9:34:a6:1b:c3:96:75:13:6d:d3:fd:e2:
f7:93:3d:f0:f3:f4:63:6b:56:6e:dc:f6:82:e9:ec:1f:25:57:
f9:55:58:f7:08:1b:a1:52:91:f1:e6:4a:71:f9:ab:e1:14:8f:
90:22:55:84:7a:41:be:5b:2c:93:f8:44:22:bf:95:27:2a:8a:
ae:51:74:c1:c8:33:b5:38:89:20:99:28:25:48:ca:71:42:ac:
8d:0a:63:01:04:c7:e3:ec:3b:5a:18:0e:c0:19:fc:c7:32:ec:
b1:55:07:b9:20:a6:ee:34:24:37:62:40:39:2a:3e:40:9e:30:
7b:c0:88:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:18 2025 by rpki-client