Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
File: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft (raw, json)
Hash identifier: LUP50MkdOUqOELypGWHzQz9P9Svpsu4zKcwjj+S053E=
Subject key identifier: C3:7A:27:0C:82:0E:6F:59:20:8B:6A:2C:90:7C:75:70:6F:2E:43:5D
Authority key identifier: C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
Certificate issuer: /CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Certificate serial: 019A72260040046D8ACFE94FC0C34B6F57FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
Manifest number: 10FB
Signing time: Tue 11 Nov 2025 09:01:24 +0000
Manifest this update: Tue 11 Nov 2025 09:01:24 +0000
Manifest next update: Wed 12 Nov 2025 09:01:24 +0000
Files and hashes: 1: HwLDpTIt6plI2sCVLbeUjnqOAJc.roa (hash: yvIMoIjc3gOAvuIICfd6lLbgjDWXL7Ecab2rJN91n/I=)
2: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl (hash: Eeu6pYdK0Dgf/FfI60e6o3KafNZ1JjO604WiXnx51MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:00:40:04:6d:8a:cf:e9:4f:c0:c3:4b:6f:57:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Validity
Not Before: Nov 11 09:01:24 2025 GMT
Not After : Nov 12 09:01:24 2025 GMT
Subject: CN=c37a270c820e6f59208b6a2c907c75706f2e435d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:c9:3e:df:43:14:58:c4:ba:b9:db:2c:7b:
37:c7:4f:1a:4f:05:a0:e3:52:46:a2:d7:2c:f0:98:
6b:b1:77:4b:7a:d4:c6:98:e4:d4:5d:dd:5b:64:16:
bc:6b:a2:3c:e5:22:78:bf:fd:1a:f1:27:9f:30:0d:
69:0b:66:e9:74:30:fb:b0:4a:31:34:f7:15:9a:24:
1d:95:dd:56:79:65:ad:5c:3e:4e:07:74:5a:e4:ce:
6d:9f:8f:94:c2:7a:ab:5c:b1:e8:f1:16:9d:7b:28:
16:57:39:75:84:be:ea:a1:24:d2:0a:91:ad:3c:b1:
82:5b:1c:f3:3c:4e:4a:47:42:cc:75:c3:07:61:2e:
7b:9f:6f:1c:f3:09:ec:7e:c5:a6:69:b7:c9:a1:a8:
61:b9:bf:27:5a:e2:37:6f:2f:78:de:c0:9a:8d:16:
2f:08:f4:56:31:d8:21:5c:7c:02:1e:65:7d:48:c7:
59:6f:5d:36:5c:91:b7:43:64:9b:e4:b2:a9:15:61:
7c:00:da:e9:d3:6c:8c:09:55:26:d0:9b:48:03:df:
8d:89:db:79:cd:3b:df:fc:ac:fe:84:f3:95:f3:9e:
8f:31:07:af:26:34:51:1f:37:20:11:f9:ec:a7:2e:
a4:42:16:4e:a0:a8:77:c2:fc:e3:7d:35:ee:7d:53:
ff:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7A:27:0C:82:0E:6F:59:20:8B:6A:2C:90:7C:75:70:6F:2E:43:5D
X509v3 Authority Key Identifier:
keyid:C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:75:95:bb:8e:cf:1e:04:63:4c:2f:76:f6:5c:2a:6f:b4:11:
b5:cc:04:6d:d5:9d:c5:7d:c6:bf:6f:13:8b:af:2a:83:b6:33:
a1:d3:f8:94:3c:b3:aa:44:b4:d6:36:fb:8c:23:36:4e:21:9f:
56:1f:04:d9:3b:cd:99:2b:e8:c2:db:90:6f:e8:23:b0:76:a8:
3d:94:b4:96:94:23:91:13:a8:8d:da:55:e1:2e:a9:10:83:6c:
d8:99:78:2b:a3:68:84:56:f2:60:36:54:a4:dc:43:c8:7d:c5:
5e:fc:c5:34:c3:a9:3f:99:18:91:fa:c8:19:96:e8:f4:ab:1b:
b6:f4:ce:58:c1:bb:ee:3d:90:52:47:06:d9:63:16:db:3e:eb:
9b:22:9a:f1:8c:af:0b:3a:f9:10:44:e9:e0:b1:4a:3b:fa:3e:
2b:4a:cd:92:71:4e:fd:9d:9f:20:ae:97:da:17:06:d4:dd:8e:
59:5a:de:c2:50:b1:f3:23:b2:15:dc:f9:5f:4f:8d:4b:da:2e:
ca:4b:51:15:9b:f6:b1:91:21:85:ec:23:96:38:d4:6c:a8:11:
54:ab:cd:d0:0f:00:ca:81:0f:7f:cc:65:a5:6d:2a:fb:fb:43:
d2:6b:1d:ff:e3:62:55:c0:20:e3:e7:17:8e:fb:9c:fb:59:8a:
57:3d:06:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:46 2025 by rpki-client