Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.mft
File: wVwVNEGqsCDrb2Df9xUu6qyupOc.mft (raw, json)
Hash identifier: dQgSFvfZXx3bMraejjVI9Fd1HUoLLo4SP95MdmVI5VY=
Subject key identifier: 87:71:F9:BD:2D:4A:BD:D0:8E:3C:B8:28:41:8E:0E:CE:95:11:D3:68
Authority key identifier: C1:5C:15:34:41:AA:B0:20:EB:6F:60:DF:F7:15:2E:EA:AC:AE:A4:E7
Certificate issuer: /CN=c15c153441aab020eb6f60dff7152eeaacaea4e7
Certificate serial: 019A7225E47B2F15852582C46E8471EFCBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wVwVNEGqsCDrb2Df9xUu6qyupOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:17 +0000
Manifest this update: Tue 11 Nov 2025 09:01:17 +0000
Manifest next update: Wed 12 Nov 2025 09:01:17 +0000
Files and hashes: 1: d20SUDYIRv-4bm5PviK5Z-zGDs0.roa (hash: Eh4bKXtFp88meM/tOgLhq0HIMCc67pkb4NNRMEjL16E=)
2: wVwVNEGqsCDrb2Df9xUu6qyupOc.crl (hash: ysgZf0wWQ+RkgGoZgwCuq2tBUsA9Bghm2iAfqutrm00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wVwVNEGqsCDrb2Df9xUu6qyupOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e4:7b:2f:15:85:25:82:c4:6e:84:71:ef:cb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15c153441aab020eb6f60dff7152eeaacaea4e7
Validity
Not Before: Nov 11 09:01:17 2025 GMT
Not After : Nov 12 09:01:17 2025 GMT
Subject: CN=8771f9bd2d4abdd08e3cb828418e0ece9511d368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:11:a2:eb:4c:ba:2b:c8:f7:0d:83:92:a3:52:
5e:fb:58:9d:d4:75:e9:b5:12:9c:ea:b9:0e:b0:86:
c7:c7:10:8e:c0:fc:60:ff:1c:cf:f4:98:d7:fc:18:
92:94:c0:9e:b1:e0:11:51:f5:1f:25:01:5e:1d:75:
34:23:85:f8:35:9c:3d:3b:4b:4d:81:12:cd:ef:57:
34:97:4b:3a:56:4c:25:b3:98:d2:f9:4a:69:26:57:
e2:10:b8:74:31:38:fe:75:ac:3e:46:25:3e:7f:51:
e1:c7:ba:5e:62:bb:67:a0:55:ba:d2:3d:7a:53:9c:
20:fa:b8:b2:10:ab:56:09:97:61:2c:43:0f:7d:e5:
50:57:54:0c:41:54:07:ab:69:43:bf:8e:81:29:fb:
00:92:b8:2b:28:5e:07:aa:71:dd:c5:29:56:ce:ba:
56:81:9a:e1:3e:50:62:52:86:00:61:c6:24:c8:5b:
e7:79:0a:11:22:8b:6f:82:1e:8a:3c:26:48:43:e4:
cc:3a:69:7f:e8:34:d5:99:85:81:25:26:97:60:f8:
dd:d6:55:4e:96:bd:3b:9b:7f:1a:e0:09:19:e6:b0:
a3:b2:95:07:ee:07:e9:26:92:44:b4:7f:de:60:fd:
ab:1d:42:62:13:79:09:57:4f:9b:c4:be:2e:0e:76:
75:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:71:F9:BD:2D:4A:BD:D0:8E:3C:B8:28:41:8E:0E:CE:95:11:D3:68
X509v3 Authority Key Identifier:
keyid:C1:5C:15:34:41:AA:B0:20:EB:6F:60:DF:F7:15:2E:EA:AC:AE:A4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVwVNEGqsCDrb2Df9xUu6qyupOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:81:1a:e0:0d:60:b4:dd:9b:c7:3c:8f:3b:69:b5:e5:30:71:
14:a5:61:15:f5:93:3c:f0:b7:25:bf:86:1b:7c:76:46:cc:68:
5a:54:c4:6b:35:b2:09:f6:8f:8f:0a:df:28:b8:65:bd:09:d8:
55:7e:4e:13:0d:e9:ad:d1:bd:ff:5d:7d:d4:4a:f8:9b:13:31:
0b:b6:29:4e:9c:06:27:61:f5:7e:b3:fc:c8:ac:a6:93:50:5c:
61:82:82:64:3a:3d:9e:e2:6a:0f:90:c5:85:ab:c0:4c:1f:35:
db:65:eb:9d:2b:8c:10:75:5a:2b:19:44:40:32:c8:00:75:3d:
be:b8:52:9a:be:a9:36:86:9d:d7:dd:21:7c:e8:19:a8:cb:2a:
8c:9b:db:f3:3b:93:34:0b:1e:68:fe:71:2d:72:34:44:97:4b:
ed:05:47:27:2f:32:39:37:bd:45:13:60:e6:2c:7e:2b:ec:1e:
db:30:d7:49:6d:1c:a0:1e:14:c7:3b:e6:c5:f4:fe:1f:cb:10:
09:ad:a2:ec:99:c0:ce:7f:2e:1f:df:40:0c:c6:01:c3:3a:3c:
33:50:31:65:c7:95:a4:d5:7e:57:96:35:28:b2:c1:da:d9:56:
c4:35:2d:2b:03:aa:04:0a:e7:ac:e1:ca:76:f4:f6:66:d0:11:
7f:a0:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:02 2025 by rpki-client