Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
File: wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft (raw, json)
Hash identifier: 0wVRJd9Vz+swFX/CR4SkW8FbkswgSW4+XE+D+ZHNFVE=
Subject key identifier: A7:B3:27:8D:98:48:F3:BA:BE:73:F6:C4:13:DE:67:DF:17:96:52:F0
Authority key identifier: C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E
Certificate issuer: /CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
Certificate serial: 019A71EEBE933716DCBFC34F18163C991B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 08:01:03 +0000
Manifest this update: Tue 11 Nov 2025 08:01:03 +0000
Manifest next update: Wed 12 Nov 2025 08:01:03 +0000
Files and hashes: 1: 6-ydJeMMctB8c_kcu4H6al3x9lI.roa (hash: gkHYAXqWoGGFpT0nUFUwvYsxIUFHF9fDa7NiP95iNN8=)
2: wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl (hash: 53Am9jl94U7pO08CEybBPaMnAAa5nUf0FSEHzuuiMiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:be:93:37:16:dc:bf:c3:4f:18:16:3c:99:1b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
Validity
Not Before: Nov 11 08:01:03 2025 GMT
Not After : Nov 12 08:01:03 2025 GMT
Subject: CN=a7b3278d9848f3babe73f6c413de67df179652f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:1a:44:f9:e0:41:95:21:c3:2b:1b:fc:5e:
01:bc:4e:db:33:3b:5e:82:5b:60:87:96:f3:b1:b2:
ac:a8:c1:92:e9:19:b0:42:de:8e:2e:62:18:b3:82:
98:78:65:0a:50:f5:8a:12:33:01:58:11:78:56:8c:
73:b0:44:7f:c8:ca:34:86:ab:45:c8:ae:82:79:c7:
37:f2:c9:d4:d3:6d:2c:cc:f6:00:04:4e:2d:b4:1e:
83:9e:c2:5c:6d:53:b3:8c:d3:7f:62:ae:48:a8:46:
d8:d5:c8:ca:c0:d7:1d:be:5f:e0:22:07:8c:99:a8:
8d:3d:ed:4c:7c:a4:9a:39:7f:46:07:48:20:0d:c0:
c9:21:05:c8:cf:81:e9:9e:d4:fe:eb:93:6a:6d:7f:
c2:78:44:4c:54:47:e2:92:46:45:62:7d:e7:1a:9e:
3a:8d:40:2e:57:0b:b0:46:19:79:26:f6:c1:e1:05:
22:82:1d:a1:2e:87:eb:94:72:3e:2c:fa:02:9f:e5:
08:61:bd:da:23:02:b3:98:c3:15:d6:dc:c8:90:db:
a4:17:02:e1:dd:d0:48:4e:d7:a0:5d:bd:00:29:6b:
e7:f0:9b:5a:ff:c0:b7:4c:89:ac:0d:74:97:51:0b:
24:43:7e:49:60:e8:70:cd:be:08:72:8d:c1:ac:44:
2e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B3:27:8D:98:48:F3:BA:BE:73:F6:C4:13:DE:67:DF:17:96:52:F0
X509v3 Authority Key Identifier:
keyid:C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d8:44:cd:2c:a7:b9:62:f7:16:00:3c:93:51:90:77:32:10:
7e:39:fe:25:d9:fb:df:c8:ab:f7:f8:7c:bd:4a:ec:04:02:f3:
2b:a7:f3:25:e6:8f:20:f9:3e:1f:8c:02:67:f5:22:23:31:79:
d8:70:f8:85:52:7c:cb:82:40:31:04:31:70:85:10:a6:88:05:
e1:38:55:8b:2b:0b:cc:7c:03:a1:4b:e9:9d:fa:8d:2d:f0:b5:
a9:4e:a5:06:7a:35:ee:bb:93:23:31:8e:87:5d:93:2f:59:5f:
73:11:46:3b:d1:69:fa:28:e6:39:63:2c:f7:13:a7:29:88:47:
37:1d:6c:5c:44:11:0d:dc:0b:d5:a7:bd:0f:03:d8:2b:56:6c:
5b:bd:cc:60:ca:5b:84:87:14:86:25:84:39:f5:2d:fc:75:71:
dd:06:cb:05:98:cd:cd:98:c9:7c:0d:7c:59:cd:c4:f0:62:39:
46:3f:10:7d:e3:bb:35:07:1c:ce:14:fb:0b:06:45:9c:e6:d3:
f8:0f:96:1b:5f:34:ce:7e:14:5d:70:cb:d6:77:9f:10:e3:37:
03:b8:3f:fe:4e:08:37:b7:b9:a7:5f:17:93:b3:64:c4:d5:17:
70:6f:44:df:72:39:fa:49:b2:53:4b:57:63:0a:45:8f:4f:d7:
4b:bb:b1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:32 2025 by rpki-client