Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
File: _wcypCMoB0cBFCIh49RqKfKWwpw.mft (raw, json)
Hash identifier: UlDeKEf6CN8skMg978nqtU+tD40N78gPGDy5yuFF3Vw=
Subject key identifier: 0F:55:A0:41:4E:A3:7E:23:86:36:53:52:DB:BD:97:D7:EA:C4:22:E8
Authority key identifier: FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C
Certificate issuer: /CN=ff0732a42328074701142221e3d46a29f296c29c
Certificate serial: 019A70A544095F0FE9EF522A36FAF509FFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
Manifest number: 02CD
Signing time: Tue 11 Nov 2025 02:01:10 +0000
Manifest this update: Tue 11 Nov 2025 02:01:10 +0000
Manifest next update: Wed 12 Nov 2025 02:01:10 +0000
Files and hashes: 1: 1-dSj2fWJdUO6bz9sc2BYVK5JDQE.roa (hash: dsFKxx55TJI4durjTXMUPKnGnFdN9dd8cpckDwK4aTc=)
2: _wcypCMoB0cBFCIh49RqKfKWwpw.crl (hash: kwt3idbxWXiza44Z6h4RHgl7ygaGRM/qKBC71HcIBnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:44:09:5f:0f:e9:ef:52:2a:36:fa:f5:09:ff:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff0732a42328074701142221e3d46a29f296c29c
Validity
Not Before: Nov 11 02:01:10 2025 GMT
Not After : Nov 12 02:01:10 2025 GMT
Subject: CN=0f55a0414ea37e2386365352dbbd97d7eac422e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:43:9d:20:ac:2c:a0:bf:42:f9:ee:5e:b5:
d0:03:79:41:2d:20:f9:d1:7a:52:07:34:c2:99:2d:
c1:40:2c:6f:f2:26:31:d7:86:1a:c2:b9:e7:3e:29:
bd:9d:90:9e:df:3d:0a:aa:98:22:a8:b8:5b:14:72:
d5:ad:de:7b:97:12:0c:fa:06:e0:e7:a8:ea:8a:6e:
c7:a5:09:37:51:6f:a2:dd:48:42:92:bb:a4:39:2d:
22:d3:03:ad:3b:2b:e7:d3:db:5b:58:b2:7d:7d:9d:
be:7a:5a:29:ee:0c:ea:34:7b:23:d7:7f:d5:1a:54:
71:83:79:f3:2b:b2:51:ac:d1:42:d3:4c:07:68:ef:
7b:a4:75:4f:94:18:de:a8:9e:af:75:f9:e9:b7:d3:
ac:b2:ea:b6:77:3e:0c:79:59:b5:68:9b:44:e2:96:
4c:f2:20:36:90:9a:d4:03:8f:65:c7:f4:7a:20:ee:
d4:bf:83:a4:21:93:5f:56:25:c2:97:e4:22:cb:c6:
25:d5:95:91:ca:7b:c6:d0:e6:04:72:87:3d:0f:d4:
02:ea:01:3a:c3:1a:88:87:5a:24:d4:f7:a8:a3:c0:
2d:ec:d7:f3:c1:8f:16:ef:e8:f2:c8:fb:0b:6a:ca:
61:a2:8e:42:df:09:88:54:15:81:d5:fa:d0:88:46:
e5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:55:A0:41:4E:A3:7E:23:86:36:53:52:DB:BD:97:D7:EA:C4:22:E8
X509v3 Authority Key Identifier:
keyid:FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:51:35:fa:49:96:67:b8:4c:40:0f:e2:95:df:aa:8f:f7:1e:
11:c7:ba:b7:d5:92:34:3b:1b:2f:af:3e:e3:b6:e3:93:a9:6e:
f5:15:9b:e6:5a:bf:dd:4a:40:fd:f0:91:b7:bf:33:cb:13:cb:
24:4b:00:fd:b0:bd:71:6f:5f:75:68:38:ac:65:04:60:70:73:
68:72:fc:cb:e9:9a:94:ac:f2:66:fb:69:d9:ec:6a:93:be:a9:
4e:a1:f8:cf:4d:cf:10:f2:d1:3a:f8:b0:53:25:fd:0e:c8:ad:
a0:42:c5:c4:d4:1c:d4:ad:a1:62:0f:7a:a2:90:cd:36:ef:26:
2a:78:94:d0:0d:81:db:de:4f:34:46:94:be:fe:88:f7:1b:08:
5b:f8:41:2f:4f:90:0a:65:cb:3d:8c:16:20:0d:f0:4d:4f:2d:
b2:22:43:da:c3:e4:32:ef:df:1e:79:37:93:d4:93:40:bf:a6:
2b:5e:71:3b:a3:0c:b0:ce:09:c6:44:d7:87:0e:4b:6c:30:f6:
8e:4f:55:a1:58:31:fd:82:82:d1:c9:92:bd:1f:8b:7e:b3:80:
1b:15:0f:9d:a6:f8:ec:84:1b:cc:55:c5:94:8d:c3:34:91:5c:
1d:24:08:b7:9f:f4:2e:a3:4e:a1:fe:17:62:92:ba:68:ba:f8:
4e:9b:71:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:05 2025 by rpki-client