Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
File: wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft (raw, json)
Hash identifier: KEzZgkrzbjYlyTh3L4MxluMSVJ58FWD7aVxiiZLT13I=
Subject key identifier: D5:71:43:68:76:65:08:55:A2:64:BD:B6:DE:3C:D9:9A:41:3D:1B:37
Authority key identifier: C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
Certificate issuer: /CN=c2bf81ab950a18034630c25830749e650eb4e634
Certificate serial: 019A725CC1BBF5A15C62F2B27A4A591F36BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
Manifest number: 068E
Signing time: Tue 11 Nov 2025 10:01:12 +0000
Manifest this update: Tue 11 Nov 2025 10:01:12 +0000
Manifest next update: Wed 12 Nov 2025 10:01:12 +0000
Files and hashes: 1: nlp-yymaqYzgw12m1QvoCWjeZIw.roa (hash: Yssi7rDTBVMdou6reFU3+Vkw3D/c6F2oI+HGCYZH4Sw=)
2: wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl (hash: qY49Mc7//q76XJfjY5w/eEXU1rsuxPALklmuCdgn7XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c1:bb:f5:a1:5c:62:f2:b2:7a:4a:59:1f:36:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2bf81ab950a18034630c25830749e650eb4e634
Validity
Not Before: Nov 11 10:01:12 2025 GMT
Not After : Nov 12 10:01:12 2025 GMT
Subject: CN=d571436876650855a264bdb6de3cd99a413d1b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:17:4b:40:f1:17:e7:1a:31:7b:cb:38:7b:53:
57:4a:38:74:80:b2:8c:fb:ef:30:02:df:5c:9d:57:
3a:07:1d:e7:38:e9:4e:ce:43:c5:85:3d:e0:05:92:
47:a9:1e:e6:d3:37:63:cb:81:87:d4:0c:45:8e:c5:
e8:ac:f4:c7:5e:49:3e:78:ce:4b:3a:78:a0:bb:50:
91:93:cb:7c:61:1d:fe:cc:a6:05:d3:d4:bb:cf:d0:
a5:fe:0f:0b:c5:a6:cb:10:77:34:19:a8:07:04:dc:
91:68:fe:8f:86:8f:3e:f6:a3:25:36:58:1b:83:50:
b6:a4:f6:59:f9:f6:ad:73:89:a5:46:06:55:94:1e:
ef:28:2f:65:07:4c:c8:c7:dc:e7:58:ec:59:bf:f7:
1c:a8:88:88:7b:e6:2c:52:f5:86:6b:f5:c0:3c:51:
ab:57:7a:84:2e:68:27:a5:9e:d5:26:ee:be:64:0e:
00:b5:83:f2:a5:b4:a0:89:30:45:25:92:3f:a7:a7:
ef:7c:53:4a:57:7d:4d:35:75:ef:6d:82:8b:77:14:
ab:ec:90:f6:ae:80:aa:4c:f8:08:b6:f5:f9:0f:66:
32:a0:c8:42:4c:46:9a:22:43:c5:22:82:0a:9d:f1:
49:80:2b:c9:4e:22:de:45:5b:b4:64:5d:31:e2:4b:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:71:43:68:76:65:08:55:A2:64:BD:B6:DE:3C:D9:9A:41:3D:1B:37
X509v3 Authority Key Identifier:
keyid:C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:55:c9:64:c8:f0:70:3e:34:89:f1:2e:59:e6:ba:b4:e8:b4:
8f:95:dd:8e:73:0b:3a:b2:4f:e4:84:57:ad:02:48:2c:e5:e8:
ab:5f:c2:31:5f:66:8a:ae:33:c5:09:d0:66:e0:59:65:c2:7b:
05:87:1d:1a:5b:6a:01:d8:e7:d3:ff:e7:68:e8:46:b8:07:99:
83:8d:4a:f8:9c:f4:10:c2:32:0f:13:b5:01:26:c1:a5:45:27:
a9:82:16:68:26:6d:0c:6a:c5:4f:c9:91:63:36:c1:2c:fa:e9:
f3:46:e0:43:5b:5e:a1:cb:0d:21:6f:8d:56:fe:20:01:e6:80:
a7:3a:6d:e4:e8:bc:dc:d9:5c:35:35:fe:fc:40:2a:ad:a9:d1:
d7:cc:96:66:bd:ea:40:7a:6b:e9:dc:79:d6:bd:47:71:a4:ae:
6c:2f:fd:a4:7b:3c:27:67:31:e0:cd:9b:10:9a:e9:c1:ac:24:
41:ba:7d:af:f5:8e:93:54:09:85:cd:b5:f4:1d:7e:a3:c0:17:
e6:c4:07:29:96:a9:2f:67:ea:b3:0d:80:91:a5:14:da:e5:17:
2f:8c:8f:87:c7:fa:e9:a1:c9:0f:7a:4d:81:61:d2:19:c2:94:
89:7f:e5:94:5b:43:4f:8a:1c:11:16:6d:88:51:97:1a:6f:cf:
65:db:30:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:00 2025 by rpki-client