Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
File: wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft (raw, json)
Hash identifier: aXMrOqwulODrdLmsSIdkO2923BsXd8SXNTNuz0wFr1Q=
Subject key identifier: 77:FE:0A:A0:23:CD:D3:E9:E9:68:61:73:56:DB:4D:2D:AD:65:17:B0
Authority key identifier: C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
Certificate issuer: /CN=c11f603de409a710fdae62cac1c55393a953b5b5
Certificate serial: 019A71EE7015324D3B57945EA8B248E9E87B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
Manifest number: 0414
Signing time: Tue 11 Nov 2025 08:00:42 +0000
Manifest this update: Tue 11 Nov 2025 08:00:42 +0000
Manifest next update: Wed 12 Nov 2025 08:00:42 +0000
Files and hashes: 1: UsAeeJKz5x5UM9R7HFO2Dgzi0jA.roa (hash: FFiDVfqG1v30MyW/O7JaJbrLiihT2L0idYJ853z7lV4=)
2: wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl (hash: ylDmR5m6RROxxtJg1VbRPDWzTeBEq7xTSpqS+Rasm7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:70:15:32:4d:3b:57:94:5e:a8:b2:48:e9:e8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11f603de409a710fdae62cac1c55393a953b5b5
Validity
Not Before: Nov 11 08:00:42 2025 GMT
Not After : Nov 12 08:00:42 2025 GMT
Subject: CN=77fe0aa023cdd3e9e968617356db4d2dad6517b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:54:12:2f:4d:d8:90:bb:c8:68:c7:59:09:
3c:77:a0:6c:1d:e9:c6:91:ed:73:31:30:41:fd:24:
d5:12:da:c4:a0:ad:c6:17:8d:6e:7e:f1:b7:fc:1c:
a5:2a:de:1d:7d:62:23:58:3e:71:3c:f8:f4:cf:97:
e5:8f:95:87:0e:7a:c7:fd:18:b1:f0:36:eb:09:bd:
93:b3:ff:38:96:4b:5d:94:4b:24:22:50:80:a1:43:
d5:67:cc:e8:4f:82:2f:88:09:e9:4e:ae:6c:08:9b:
f1:d6:c5:fa:55:e2:6d:e5:57:9e:24:61:89:05:bc:
dd:8f:60:87:f3:81:41:fa:da:48:e3:b9:97:1a:0e:
20:82:dd:ac:e4:d8:88:e9:8d:6c:2e:25:05:34:c3:
70:e0:19:38:90:e8:b7:ec:6d:97:34:f2:b4:db:13:
f9:ce:62:f2:bf:8f:9a:35:3c:87:ea:ee:3a:26:47:
a5:40:4b:43:e3:ef:38:22:4f:19:2b:fd:9b:aa:22:
79:d5:77:67:d2:f6:5f:2e:9d:87:bb:12:b5:f4:55:
64:6b:ba:df:a5:0c:fb:22:e8:f8:e1:94:41:9b:ac:
2e:ff:c3:56:50:79:82:83:f8:d0:ef:90:62:2b:b9:
5d:76:48:da:0a:7c:61:1d:87:09:23:fe:fc:81:35:
2d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FE:0A:A0:23:CD:D3:E9:E9:68:61:73:56:DB:4D:2D:AD:65:17:B0
X509v3 Authority Key Identifier:
keyid:C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fc:33:24:87:b0:16:fd:d5:68:56:3f:b5:f8:36:f1:be:b6:
3b:94:3d:0c:ea:d6:df:00:3c:03:3d:f9:e7:2f:a9:77:4f:43:
68:14:14:c4:dc:29:7e:dc:e1:ba:e5:a4:ac:7f:23:4b:c0:94:
fa:36:f0:7a:d0:86:e1:3f:eb:9e:59:30:fb:36:5f:ce:b7:b1:
f6:9c:03:92:3d:7a:e2:98:92:e2:aa:68:79:20:a7:0e:2b:61:
dc:b6:ca:32:e9:00:40:d9:4f:43:b6:d7:46:ac:d1:38:f1:f5:
00:a8:46:61:f6:fa:e2:e6:20:22:e3:10:1d:e4:04:67:09:41:
8e:70:8d:1c:33:ff:d7:4b:b3:73:ff:e6:8d:f4:df:a8:db:07:
39:35:35:24:f8:15:0c:43:2d:0e:39:dc:8e:95:59:c7:34:78:
4f:e7:c6:e9:7f:3a:73:92:35:7c:09:99:b2:16:cc:78:d0:95:
7b:bb:a3:4e:b5:84:c2:25:81:2c:16:ff:a7:27:7e:9a:4e:90:
ae:6b:92:8c:8e:72:4e:71:9a:6d:8f:b7:7a:fa:c0:67:13:8f:
7b:8d:c2:1d:c6:fd:e8:d1:54:17:74:9a:de:15:76:f1:4d:b5:
dd:72:6d:8f:58:0d:38:e6:4a:7d:be:83:8d:70:0f:25:ad:bc:
e1:29:c8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:37 2025 by rpki-client