Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
File: wBekqCFysgav7hwT0pbuJgOFtXE.mft (raw, json)
Hash identifier: 1F5BpxDffwB1dWB9FiWL9TYJFr4sewe4ssLcu3ViwM4=
Subject key identifier: F6:4B:64:46:C8:37:75:45:96:5F:50:26:08:EE:9E:EE:2D:7A:3C:69
Authority key identifier: C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
Certificate issuer: /CN=c017a4a82172b206afee1c13d296ee260385b571
Certificate serial: 019A7226621F5A042AADEB88BCA9822EBFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:49 +0000
Manifest this update: Tue 11 Nov 2025 09:01:49 +0000
Manifest next update: Wed 12 Nov 2025 09:01:49 +0000
Files and hashes: 1: dCiNIBkWF2RsTfBzLCoJZdfeZWw.roa (hash: YbTpFGUkZZd0ope4WSof9klg7VlGCuc2kGLkcWvVqI4=)
2: wBekqCFysgav7hwT0pbuJgOFtXE.crl (hash: 1xX+MtsCVirS698hwnJSOPK3Il/e0f9qbhwRKOZarFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:62:1f:5a:04:2a:ad:eb:88:bc:a9:82:2e:bf:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c017a4a82172b206afee1c13d296ee260385b571
Validity
Not Before: Nov 11 09:01:49 2025 GMT
Not After : Nov 12 09:01:49 2025 GMT
Subject: CN=f64b6446c8377545965f502608ee9eee2d7a3c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8e:a5:e9:bc:e5:b5:99:e6:36:9d:97:a4:e7:
2a:e8:67:05:af:63:06:aa:81:cc:d9:f6:f0:a3:2c:
5d:a6:a8:c9:d4:6a:97:88:2b:8e:46:6f:34:de:17:
0e:d9:ff:f8:41:03:21:f8:da:05:8e:71:2e:ff:70:
aa:b1:fe:bf:3e:4c:08:d3:06:3a:23:09:f6:e2:41:
05:f6:60:2f:e3:b5:eb:1e:40:fa:f6:f2:08:97:27:
28:8c:0d:d7:09:f7:0f:42:93:8d:df:b3:1d:ba:7b:
09:67:5f:9f:b3:b1:30:2e:ab:e8:53:87:ff:ba:cd:
35:15:09:58:df:82:dc:f9:b3:39:7e:de:df:1a:25:
96:71:1e:6d:a7:6e:ed:60:c5:2a:3d:54:e1:dc:8e:
18:73:18:05:0d:78:2e:15:6d:4f:2d:57:39:24:66:
40:a8:63:7c:12:21:ea:1b:55:86:c7:d3:1b:af:b4:
da:4a:c6:da:34:4e:a8:ce:2d:eb:d0:29:2c:24:95:
13:cd:58:f6:6d:f7:b9:f6:2e:ac:dd:0a:09:d8:1f:
fd:8c:18:8f:6d:f1:1a:ca:39:6f:5b:ab:10:c0:c2:
bd:49:16:de:3b:f5:5b:ac:ba:cc:37:1f:20:0b:a6:
8e:69:c1:06:59:25:12:a8:a1:7f:ef:46:5f:66:ed:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4B:64:46:C8:37:75:45:96:5F:50:26:08:EE:9E:EE:2D:7A:3C:69
X509v3 Authority Key Identifier:
keyid:C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4b:55:e8:79:5a:63:8c:2a:35:f1:e1:54:b8:7d:4e:65:cb:
f9:6e:72:d2:fa:aa:c0:27:ad:f7:39:e5:c1:00:46:00:38:8c:
9d:a6:5a:48:db:96:33:b2:f9:94:b0:4a:fd:4e:17:67:9d:8c:
35:f0:38:4f:6e:fa:be:dd:d4:96:d7:74:53:6f:ce:75:4b:c5:
9b:66:21:1f:43:cd:2e:5f:ee:cd:19:2f:5e:e8:41:b1:a0:90:
78:71:d7:72:c4:f7:1b:46:65:a3:dc:47:48:46:53:9c:4c:28:
ca:53:9f:4d:f2:44:af:27:a4:aa:2a:f1:a2:5e:c2:66:b2:f7:
5a:ab:0e:72:e8:73:fa:5a:38:9a:34:57:bd:eb:0f:e1:8a:63:
ac:d8:db:e0:f8:a5:be:cb:cc:69:b0:57:d2:9d:17:00:88:7b:
c6:a5:a3:bd:36:ba:25:10:dc:0b:26:ad:4b:9f:ce:d9:46:0a:
85:a5:b5:ce:50:31:1d:02:2e:80:75:50:fb:b3:39:af:3f:48:
03:7d:69:29:48:99:c9:fa:66:40:74:70:d1:98:b9:2d:63:ef:
8d:c2:7d:07:07:44:0d:42:50:3a:2f:2b:ef:c4:6b:b4:cf:7d:
aa:14:f3:b4:da:a7:ad:73:0a:7c:99:d5:0d:26:4f:ee:3a:a7:
bb:7a:44:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:28 2025 by rpki-client