Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft
File: w6nl9TVmI-HCjy22k-BfxtYEzIE.mft (raw, json)
Hash identifier: oousTVD/FcVH/Visvl9PeT0Uw4aKnCR87lsRCM/zc3M=
Subject key identifier: 7D:DF:E8:FB:C6:C7:88:DE:0B:B6:66:15:8E:36:3E:C5:7B:E5:8A:C2
Authority key identifier: C3:A9:E5:F5:35:66:23:E1:C2:8F:2D:B6:93:E0:5F:C6:D6:04:CC:81
Certificate issuer: /CN=c3a9e5f5356623e1c28f2db693e05fc6d604cc81
Certificate serial: 019A71B886EE5945862E5234B60D0A9038CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft
Manifest number: 01AC
Signing time: Tue 11 Nov 2025 07:01:49 +0000
Manifest this update: Tue 11 Nov 2025 07:01:49 +0000
Manifest next update: Wed 12 Nov 2025 07:01:49 +0000
Files and hashes: 1: w6nl9TVmI-HCjy22k-BfxtYEzIE.crl (hash: aMFrwyXuCB+eQO+Mi8vhv6azaaISdiZetE2JMooEGiU=)
2: yOFLOKqrASqCbG9H8LDQX86pKIw.roa (hash: XxA6ziYUOm/wMTbCGGt/j2IVpWOap4P3oBr16w5IzVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:86:ee:59:45:86:2e:52:34:b6:0d:0a:90:38:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a9e5f5356623e1c28f2db693e05fc6d604cc81
Validity
Not Before: Nov 11 07:01:49 2025 GMT
Not After : Nov 12 07:01:49 2025 GMT
Subject: CN=7ddfe8fbc6c788de0bb666158e363ec57be58ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:37:c7:0e:87:a8:1a:20:75:df:26:d3:cc:22:
a9:05:e6:41:0e:dd:c9:9f:61:23:4f:01:0f:4f:b6:
33:ad:79:a3:76:67:7d:9d:fc:e9:53:4c:f2:15:bd:
e2:b9:02:d3:b5:56:b4:34:5a:9e:55:3c:74:ee:ff:
7c:1e:c6:b5:64:6e:b3:ae:d8:d5:de:c3:3e:e8:92:
97:4e:27:e9:11:50:06:47:e0:a4:07:b6:a5:49:e9:
a4:e7:8f:32:eb:02:4c:d0:79:e0:92:91:ef:b1:8d:
86:df:2d:d4:81:1b:54:fc:ab:71:59:1e:b6:d9:67:
91:b2:fc:0c:af:3b:52:7c:10:56:47:f8:fe:11:34:
57:6f:51:8e:55:68:5c:04:38:76:18:16:bb:bc:0c:
4e:6b:4d:15:49:7e:93:5a:7d:7a:30:19:ff:61:dd:
ca:02:3b:2d:64:07:83:62:eb:39:ea:d0:b8:e5:41:
e9:55:75:56:28:44:70:64:03:67:2a:ad:39:38:93:
00:de:26:13:a8:93:8b:91:76:f1:27:16:68:cc:00:
c1:1b:2e:e8:8f:c1:82:ba:dc:24:25:7e:15:f0:f7:
a9:78:e8:7a:3c:f3:7b:1b:f0:e2:e6:db:2e:03:c0:
5a:61:c2:61:54:f3:81:23:87:87:11:7d:4c:f9:f1:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DF:E8:FB:C6:C7:88:DE:0B:B6:66:15:8E:36:3E:C5:7B:E5:8A:C2
X509v3 Authority Key Identifier:
keyid:C3:A9:E5:F5:35:66:23:E1:C2:8F:2D:B6:93:E0:5F:C6:D6:04:CC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:28:c1:29:91:2a:9d:12:2a:a5:4d:ff:15:22:6e:3c:4d:0a:
60:07:bf:ad:ff:70:af:8d:58:f9:0f:28:b3:57:6e:2f:e3:46:
29:e8:48:8a:3e:88:8b:ed:b6:02:1d:4a:fa:56:18:96:dd:c6:
71:e0:eb:da:b5:6d:e4:1b:79:38:72:e0:6b:b9:22:29:3d:ef:
57:38:b8:b8:74:b3:72:17:97:0f:63:ad:b3:32:4e:88:30:04:
25:74:5a:66:3d:43:8a:e5:4d:09:a3:2a:18:c9:ff:07:3d:de:
05:67:60:6d:6b:9e:bd:e1:87:16:33:b2:85:18:ba:a3:51:7c:
ad:01:a8:50:df:b9:f8:85:4a:fe:1e:9d:15:82:f9:5f:9b:13:
e7:0b:bf:ee:c0:b2:92:a7:bf:b5:59:fe:5e:96:13:97:58:d2:
44:74:be:5f:bd:43:d7:db:83:f5:4f:b5:58:b5:81:c8:d2:12:
37:c5:a5:83:9e:68:d5:ef:8c:96:5d:38:bc:33:d4:18:00:88:
b0:ce:a4:e5:6b:cd:6f:82:fc:a8:db:4b:c8:c6:69:4a:04:90:
10:2c:8f:92:59:a5:06:35:ca:e4:bd:42:5e:c5:a0:69:e7:f2:
5f:ad:31:26:79:58:78:f0:f0:a8:e4:61:6e:d0:12:4f:02:3e:
5a:d8:06:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:39 2025 by rpki-client