Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
File: wzCs3wQbXcx-XsbPj_i9BkjoZww.mft (raw, json)
Hash identifier: AfshCG4kx+874/awuYQJtz7elokvT75j6JYbF5a97Zg=
Subject key identifier: 7F:BE:A5:F6:9F:8C:32:FA:67:9E:5B:05:87:5E:AC:D1:D1:CE:BA:40
Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
Certificate issuer: /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Certificate serial: 019A72CAB99575A4BDF6EC049A5D186C27C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
Manifest number: 13B8
Signing time: Tue 11 Nov 2025 12:01:19 +0000
Manifest this update: Tue 11 Nov 2025 12:01:19 +0000
Manifest next update: Wed 12 Nov 2025 12:01:19 +0000
Files and hashes: 1: NfY8zpyx6EDpP6DxTuquvNoK9sY.roa (hash: mmbOZfwYelbaWl9riAjIdhT8MqPp3t5vAxerApfLsl0=)
2: wzCs3wQbXcx-XsbPj_i9BkjoZww.crl (hash: NowU5CwxvxDcZ8rXOpj6UZbhX03kDml1lAUXhArZUyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:b9:95:75:a4:bd:f6:ec:04:9a:5d:18:6c:27:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Validity
Not Before: Nov 11 12:01:19 2025 GMT
Not After : Nov 12 12:01:19 2025 GMT
Subject: CN=7fbea5f69f8c32fa679e5b05875eacd1d1ceba40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:a9:96:7e:17:01:36:09:a8:dc:f4:9e:a8:
51:e5:cf:25:25:1b:31:6c:55:e4:6e:68:b7:02:6e:
21:36:aa:3e:88:30:32:5d:e3:ab:89:1b:87:a2:5d:
b4:29:33:23:dd:99:d8:85:c7:6d:c1:15:2b:93:ba:
9c:19:fd:26:a8:b8:83:c6:9b:03:f4:99:e7:5a:41:
2b:84:35:08:19:3b:e3:44:f0:fa:57:58:2c:69:f9:
0e:8f:0b:4f:69:bb:9b:55:e8:3f:0c:32:02:af:4d:
6f:86:61:da:e8:f4:73:06:ea:57:c2:fa:91:1e:49:
d7:66:d6:b2:e6:10:39:b9:58:73:da:ab:60:01:4d:
20:39:d6:dd:2c:47:89:5c:70:e2:8d:eb:8b:b9:a1:
e4:f0:83:e8:ee:69:02:f5:17:c4:b8:de:bb:b4:3c:
4c:c5:dd:44:ff:12:c2:ec:9a:1b:0b:03:0b:8c:6b:
11:c8:23:d3:c1:29:6e:e9:4d:a3:54:e0:ab:21:ec:
e4:f8:df:2b:69:22:b2:8e:64:98:bf:06:d4:bd:ff:
ca:a3:28:5c:60:e7:df:e6:fd:1e:a6:2e:ea:b8:57:
c4:61:a4:b4:3a:c8:69:d7:f0:bb:72:62:69:5f:eb:
a7:dc:24:24:ab:b7:06:aa:4c:fd:48:10:c8:cb:8d:
72:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BE:A5:F6:9F:8C:32:FA:67:9E:5B:05:87:5E:AC:D1:D1:CE:BA:40
X509v3 Authority Key Identifier:
keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0b:7e:dd:b1:06:7e:88:5e:bf:2e:b8:95:0f:62:b3:8a:fc:
ce:bf:06:6b:80:bf:f9:e3:98:24:92:1c:b4:62:19:4d:9a:dc:
5f:b4:57:2e:cc:ea:b0:b0:7d:c7:ff:9d:af:0e:f1:a6:fa:a2:
70:a8:85:57:1e:4c:d0:a1:17:aa:65:1b:2e:8b:76:9f:ae:04:
65:10:78:7c:81:fc:fa:04:b7:fa:e9:00:41:58:e6:3e:bb:6f:
84:66:44:d4:09:66:d0:ed:18:59:a2:76:af:81:83:ed:b8:99:
20:07:80:bd:37:c5:40:c3:f8:fb:ef:b8:3f:70:d6:86:8b:ca:
cb:a6:35:4f:0c:e1:46:83:66:64:a3:74:02:06:c4:ba:1d:99:
22:ad:3f:e0:ac:05:18:d0:ea:6e:7e:e4:dd:91:97:25:6a:b4:
2f:4a:9e:a7:e3:7f:4b:64:39:87:7c:c3:86:89:9e:d8:5f:81:
fa:62:ff:0a:14:ce:16:32:70:26:af:31:ef:83:3e:82:0a:a0:
1b:44:5f:95:44:ec:3a:95:c7:8b:81:85:58:55:c0:4a:d5:5e:
f7:08:ae:92:1c:e0:31:8d:93:8c:ed:c3:2d:e2:2e:40:36:f1:
0d:85:4e:78:e8:67:8e:68:e1:97:cb:7e:89:6f:c6:cc:d3:17:
85:29:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:45 2025 by rpki-client