Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
File: wWfFkcwblqHKT5EP4QHvkE2h4hg.mft (raw, json)
Hash identifier: ddUTP3vPeitdh3oM7FgqESlFr45ouAz4iP9hglOYUrc=
Subject key identifier: 60:A8:1A:E2:8B:CE:74:9F:8B:C2:3B:64:52:A3:77:2A:41:4C:BD:78
Authority key identifier: C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18
Certificate issuer: /CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
Certificate serial: 019A725C5A3E938EE56402CFD9756E39BB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 10:00:46 +0000
Manifest this update: Tue 11 Nov 2025 10:00:46 +0000
Manifest next update: Wed 12 Nov 2025 10:00:46 +0000
Files and hashes: 1: WpUhoumLDTywn-hlHQU-VDabUzs.roa (hash: 9FT2QaZNDoK6y/oGgYEly9qHrYE52q7Wpp2ENNu/WYM=)
2: wWfFkcwblqHKT5EP4QHvkE2h4hg.crl (hash: xMJm6ZH2tgUMBA4G9KeOkgY3aUQaKNW+6eukAVis+MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:5a:3e:93:8e:e5:64:02:cf:d9:75:6e:39:bb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
Validity
Not Before: Nov 11 10:00:46 2025 GMT
Not After : Nov 12 10:00:46 2025 GMT
Subject: CN=60a81ae28bce749f8bc23b6452a3772a414cbd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c0:66:e3:48:9c:65:c7:3e:55:2a:86:9a:c5:
da:8a:b8:d7:af:08:b0:a6:95:bd:18:0d:ce:ac:25:
f8:1c:6d:b5:4f:bb:88:b7:c8:75:9e:b5:d2:aa:39:
30:b8:39:2f:35:db:04:13:f7:71:d1:a5:73:83:66:
01:9e:2e:76:43:74:aa:7b:72:6d:dc:9b:4a:d3:ed:
60:85:81:46:36:af:cf:20:1f:53:f8:b7:b5:f1:e1:
df:7a:c7:53:bc:4c:81:52:4c:af:3b:cd:7c:42:d3:
cf:53:11:33:e4:72:c6:9e:e8:0a:c3:52:ab:d4:f5:
e0:df:4e:de:7d:1d:e2:4e:a5:5d:2d:0d:4d:a9:a3:
d9:01:3c:e0:94:e4:8d:6b:58:49:58:7c:72:ec:6d:
46:c9:5a:c7:98:86:62:5f:f6:b7:6e:1a:e6:e1:44:
98:dc:65:4a:26:0b:cd:38:5a:e1:2a:3e:c1:98:bb:
e1:52:d9:d8:db:30:6a:a9:b9:fc:fa:9f:93:d6:4a:
18:3d:68:22:dd:29:8e:c7:06:b5:b5:b4:bc:00:f1:
36:df:fb:ac:aa:61:69:6a:cd:88:41:f7:67:07:28:
59:03:b0:db:5d:86:e5:7c:7e:6a:f6:eb:7c:07:11:
40:17:50:af:d0:36:20:a2:34:c6:b5:74:be:6a:d6:
5c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A8:1A:E2:8B:CE:74:9F:8B:C2:3B:64:52:A3:77:2A:41:4C:BD:78
X509v3 Authority Key Identifier:
keyid:C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c4:4c:8f:52:84:fa:9f:22:ea:e6:51:09:95:73:e8:2a:49:
06:d7:81:f2:3a:03:42:82:eb:ad:f1:9c:3e:00:94:ac:79:f0:
fa:da:77:49:2f:be:43:64:cc:15:44:a8:4a:91:b7:41:c0:d6:
eb:40:27:70:d7:13:12:9b:02:15:44:d2:62:fe:e2:28:50:e4:
c2:03:6e:1e:21:e0:15:b9:e7:fc:52:46:0d:d6:f6:ab:12:de:
33:a4:74:69:9c:1d:ef:7b:ac:da:63:95:8f:ad:ef:da:d5:5a:
97:7a:11:22:48:62:44:c8:79:96:5d:d1:ce:67:a1:57:7a:2e:
ab:c5:a5:fe:31:d3:16:43:07:78:b7:99:3c:ba:37:68:84:f2:
57:06:8d:38:d6:e6:42:54:00:98:79:a9:69:be:2f:5b:af:9b:
11:9a:ec:ba:5e:47:77:ec:02:91:4a:a2:cd:07:8c:d0:b0:f8:
de:13:2d:14:56:3d:64:26:5b:65:f0:5a:71:2a:79:5c:ef:54:
11:2b:90:21:cf:41:8f:dd:81:e2:e6:16:eb:11:2a:e3:d2:41:
23:4b:06:8e:0e:c8:04:01:c4:5a:f5:5c:61:fa:f5:fb:8d:5e:
a1:ed:55:f1:3e:1e:6e:33:5a:e2:91:09:0c:45:47:0e:93:73:
1a:f2:1c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:42 2025 by rpki-client