Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
File: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft (raw, json)
Hash identifier: 5BFGtAamRzioE+1UF+Yb3+7iQ9Dc6NAuHLp3c1d+HWE=
Subject key identifier: 87:08:6B:25:62:75:C0:B8:21:FB:B7:42:2F:56:27:49:61:6F:86:08
Authority key identifier: C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07
Certificate issuer: /CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
Certificate serial: 019A71B8CAB1A397F872086DC07EF2635D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
Manifest number: 0A3F
Signing time: Tue 11 Nov 2025 07:02:07 +0000
Manifest this update: Tue 11 Nov 2025 07:02:07 +0000
Manifest next update: Wed 12 Nov 2025 07:02:07 +0000
Files and hashes: 1: BTTvC8v66O2EpK1CYoUyKwsnmsY.roa (hash: 8Cg+TzwOE6bqFQKwpEVGr60uQJS1JrcoMWvltGsfhb0=)
2: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl (hash: TKGU6oSi1rpvBSm49oP5WzzCujj6Mu9V0C1Ui9K5nsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ca:b1:a3:97:f8:72:08:6d:c0:7e:f2:63:5d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
Validity
Not Before: Nov 11 07:02:07 2025 GMT
Not After : Nov 12 07:02:07 2025 GMT
Subject: CN=87086b256275c0b821fbb7422f562749616f8608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:a8:c0:ca:71:13:0f:b1:35:c1:5f:69:53:
7c:5d:6d:06:1e:db:08:8e:ec:d9:ff:28:c3:2e:ce:
4a:bd:c4:9e:30:b4:aa:20:2c:60:90:2e:3b:cb:d0:
a3:31:e9:33:0c:41:ac:92:ef:1d:42:28:2c:88:b5:
ae:4a:5b:7a:3d:ef:03:2b:02:d1:3a:66:0c:e8:12:
79:f9:2d:8c:07:ed:90:4e:c1:b4:6c:a0:ba:6c:c9:
b5:ec:40:3a:14:1e:34:25:9a:1c:44:05:a6:ee:6f:
e7:57:14:b0:a4:34:62:3c:a2:9a:bf:e8:8c:4d:d7:
5f:79:84:24:a5:93:bc:b5:8d:ce:c3:87:3d:bd:5d:
97:81:d1:ed:5c:92:0c:2d:eb:4e:39:28:d2:a4:49:
9d:a5:9a:3f:ea:e5:7a:8c:a1:ae:d4:9b:28:ff:ea:
64:36:c9:55:47:d9:36:29:e4:4b:6e:51:09:7b:3e:
b2:51:1d:40:b9:49:00:32:cc:a6:d0:4e:c6:bf:8b:
80:55:3b:f8:03:70:d7:f9:b3:9c:a0:c4:4d:f5:a7:
12:3e:84:4e:5d:42:8c:55:63:b1:52:0e:c6:64:b5:
af:f8:4e:63:87:29:dd:f7:ff:25:97:95:6b:76:de:
77:e0:7d:60:a8:65:cb:f3:4a:1a:f2:cd:62:d0:46:
5f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:08:6B:25:62:75:C0:B8:21:FB:B7:42:2F:56:27:49:61:6F:86:08
X509v3 Authority Key Identifier:
keyid:C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0f:6f:2a:af:d5:44:29:aa:be:28:d0:27:18:18:a6:fa:b0:
00:7a:00:39:d8:f6:cf:76:04:f3:0f:5d:7a:5d:c8:ea:bf:48:
07:b2:ec:b4:56:a0:af:e1:d8:48:22:19:c8:d0:a9:ac:e0:dd:
51:f0:6b:38:91:97:ba:4e:c7:59:de:37:48:c9:b1:a8:50:1d:
7f:a1:2b:b0:55:46:06:7d:1d:a3:30:c0:74:c4:ce:b9:0d:57:
90:83:69:93:a6:12:dd:3e:5b:74:ae:4c:f4:86:22:59:f9:40:
15:e8:a8:5b:96:46:47:15:91:20:a5:f3:b5:e4:6c:75:0a:5c:
c0:57:9b:12:f9:f6:e7:ef:4a:99:e1:41:b0:ea:11:35:78:cc:
5c:a6:04:00:a1:77:9d:25:ee:63:cf:61:fa:cf:ff:bc:54:37:
77:07:05:df:1f:ac:65:94:63:12:60:da:fc:3a:23:31:1f:39:
6c:a0:3c:b9:8f:26:c8:42:74:2f:2f:9b:e7:74:14:c6:54:d8:
ab:56:70:3f:d0:91:d3:21:4a:02:e5:9f:f2:87:c6:1b:da:bc:
7e:77:0a:87:f7:ba:5f:0a:6e:6c:a8:f8:83:79:a4:02:fa:10:
a2:55:81:ab:5b:4d:e3:70:ea:d8:6e:fc:a9:d5:d8:9c:be:b4:
cd:07:1b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:13 2025 by rpki-client