Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
File: wBHuBmZBdQpRFH2NyZobEFZY0gM.mft (raw, json)
Hash identifier: AexefrfkNr8dTWZ7wt+05F18z0UqnoL+wiYp0niG3To=
Subject key identifier: EF:92:44:F9:A6:92:AC:3A:11:BE:7F:15:46:48:45:DA:92:1B:A0:D6
Authority key identifier: C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
Certificate issuer: /CN=c011ee066641750a51147d8dc99a1b105658d203
Certificate serial: 019A722672AC41AF07867F1A0EA9E9C2A69D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:53 +0000
Manifest this update: Tue 11 Nov 2025 09:01:53 +0000
Manifest next update: Wed 12 Nov 2025 09:01:53 +0000
Files and hashes: 1: 1-HSWsiWM-hDl2O_5CedvBQ55YQ8.roa (hash: le2bdDjj8eJvjQqLPVAV9ifpc64QyRhmisD9ayP5j2w=)
2: WfTKVc2urWFHINs-H7ByO8d8wxU.roa (hash: vrGq1fPxckNV2umjKEkVDvs5jt8ww7idFEdo+nD8HaU=)
3: tq6G4XKwLkPscmGDzl0ViLLGYc0.roa (hash: gCrgWGNDXJJp5RhoxWhID/tfHWwjzd875gYTpw7zJGg=)
4: wBHuBmZBdQpRFH2NyZobEFZY0gM.crl (hash: 7H4zXQXBM8qtT1JSX+qrBrVcv8Tp6uz+/HKESfidVXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:72:ac:41:af:07:86:7f:1a:0e:a9:e9:c2:a6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c011ee066641750a51147d8dc99a1b105658d203
Validity
Not Before: Nov 11 09:01:53 2025 GMT
Not After : Nov 12 09:01:53 2025 GMT
Subject: CN=ef9244f9a692ac3a11be7f15464845da921ba0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:63:c0:f8:63:f8:1d:e5:21:b9:72:75:71:c9:
ba:3f:b9:95:96:d0:a4:7d:69:b2:4d:bf:42:a4:42:
ea:c9:25:28:1f:32:45:2c:60:f6:ea:4e:d6:8f:08:
36:98:01:e4:3d:44:45:f2:93:70:48:c9:de:ac:1b:
77:a6:65:d9:74:11:f9:42:91:8d:8b:e6:6a:5c:05:
1d:43:3f:97:e7:5f:44:88:17:fd:d4:03:4f:8f:e9:
99:fe:e3:79:d3:35:97:44:ec:98:9d:64:c8:ef:c8:
a9:c1:bb:b6:d8:6e:da:03:db:40:b8:ff:15:f2:1d:
eb:d9:76:76:9f:cb:ea:b1:fb:17:fa:54:29:5e:80:
5a:a1:2d:c9:ab:28:87:55:47:80:a2:d9:9f:74:a1:
ec:3c:62:3a:af:b0:93:e2:d0:a2:56:a2:de:6d:7e:
92:66:7b:28:e4:3d:8d:63:18:88:de:70:9d:ed:ea:
f6:58:56:54:92:58:8b:ca:8e:e5:68:3d:3b:8b:13:
0d:67:a8:19:a9:df:71:7d:34:53:5b:60:d2:00:21:
d5:87:48:1d:bb:d2:0c:5f:de:4f:d2:ae:49:a1:97:
b9:74:23:9d:d4:b6:d3:6a:06:ff:da:24:ba:04:0d:
b7:43:81:79:53:78:20:91:e8:b6:c5:87:47:38:48:
80:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:92:44:F9:A6:92:AC:3A:11:BE:7F:15:46:48:45:DA:92:1B:A0:D6
X509v3 Authority Key Identifier:
keyid:C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1f:62:d0:62:0a:8a:bc:49:a3:35:ff:4e:13:1e:00:21:40:
61:aa:f3:d2:a3:e5:5b:d2:0e:f4:7a:62:81:12:97:bb:32:b3:
4e:43:13:a9:79:c4:24:8e:18:24:6f:e5:14:48:2d:45:7a:f4:
07:76:0e:e5:31:b6:3d:a1:e4:df:9d:d3:c1:00:95:11:09:6a:
4f:4d:55:2b:8c:d9:7a:3f:81:f5:55:ff:30:51:2c:ea:e1:3a:
fd:71:c8:fa:f4:08:4c:44:6a:a7:00:d5:41:2b:22:5e:d3:bd:
5e:0f:64:fa:21:ca:90:5c:a9:22:b0:d4:85:0a:28:25:b7:67:
73:50:bd:c4:b5:d6:48:c4:1c:41:79:2b:fd:87:03:1f:1f:33:
ec:58:d2:73:a4:eb:20:25:93:19:dc:25:d1:0a:39:19:55:44:
93:0d:23:7c:bf:03:fc:92:d0:9e:ee:4a:72:43:69:26:b8:90:
a5:34:02:d2:94:0e:a4:d2:29:66:9c:99:53:33:85:ec:81:bd:
ca:4e:77:bb:49:63:de:e8:a1:2a:f3:e4:6f:33:14:c7:82:bb:
02:de:ca:e8:4e:fe:ea:cd:fa:15:c0:7f:87:05:9b:15:d1:0a:
75:82:25:51:4b:d5:b4:85:e6:4a:39:f8:10:88:90:55:c6:3c:
98:f5:33:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:11 2025 by rpki-client