Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
File: wUMgTpetea1qHwlA70GxbyB7SJ0.mft (raw, json)
Hash identifier: SHcdbTV7GYUyp/i2Klipz21COs6qnY7d7h7oQjRhKO4=
Subject key identifier: EB:50:CB:B4:00:D0:CB:CD:24:49:A7:B4:BD:9A:C7:9D:41:96:28:3B
Authority key identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
Certificate issuer: /CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Certificate serial: 019A71B80A2792851CA1455BD0895DCFC1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
Manifest number: 7F
Signing time: Tue 11 Nov 2025 07:01:17 +0000
Manifest this update: Tue 11 Nov 2025 07:01:17 +0000
Manifest next update: Wed 12 Nov 2025 07:01:17 +0000
Files and hashes: 1: We_eJU8uhiQBtd3wrWn-ZlbXQRc.roa (hash: 6QN0Fg3SAd13aQtCCegpoqGppEXLz5qo/Z2EDHmRRaY=)
2: psikfGn6FpQqhh0DSl5jsvwmwiU.roa (hash: cPs/n9SJJJcAsyUWs++t4L7KylflYtT7QnrTpSDlQIQ=)
3: wUMgTpetea1qHwlA70GxbyB7SJ0.crl (hash: O5l5wz3r2jXT7JoWdVhhJQikl5IgN2sl8ASWUtm6KCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:0a:27:92:85:1c:a1:45:5b:d0:89:5d:cf:c1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Validity
Not Before: Nov 11 07:01:17 2025 GMT
Not After : Nov 12 07:01:17 2025 GMT
Subject: CN=eb50cbb400d0cbcd2449a7b4bd9ac79d4196283b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a5:cc:03:0a:5a:45:0c:d2:7e:c4:35:04:c3:
22:a8:94:51:b7:6b:3c:f8:23:f0:97:94:c9:33:1c:
cc:cd:23:ec:03:25:81:aa:a3:04:da:36:63:c4:2b:
e7:71:9e:83:5f:11:6e:d1:85:28:c2:38:6b:5e:93:
93:4b:5b:f1:3c:a5:7a:f2:9b:1c:d0:36:15:ca:77:
bd:52:79:cc:bc:92:b8:1d:f0:a6:02:5e:aa:66:2f:
b9:d0:76:31:df:9a:6d:5c:97:da:7a:64:e4:bf:6b:
38:85:b7:86:1a:20:17:da:8c:73:17:07:ac:83:91:
cf:48:ca:1e:d0:fb:ef:23:0d:8e:88:ac:61:ba:21:
a3:3f:8b:29:b6:3f:a2:75:60:42:89:ce:6e:91:cb:
d0:27:29:f4:14:eb:3d:c0:93:96:a4:59:a4:d5:aa:
96:53:26:ce:b0:e7:71:17:1b:6e:cd:f9:fa:6d:4a:
f5:bd:5a:9e:8c:e2:d3:70:37:68:76:50:00:a0:c9:
1d:80:37:b9:85:76:3c:bb:1a:e6:98:62:94:f5:be:
4a:38:91:e3:3e:17:79:68:d7:0e:09:85:08:15:83:
ff:98:c4:e2:a2:78:19:78:7e:7f:70:fd:d6:83:d7:
1d:bf:5e:81:e5:bd:1b:93:a1:12:be:ba:dd:07:6f:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:50:CB:B4:00:D0:CB:CD:24:49:A7:B4:BD:9A:C7:9D:41:96:28:3B
X509v3 Authority Key Identifier:
keyid:C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:07:14:5f:06:b7:ed:b5:47:9c:7b:e3:b1:80:f4:96:34:80:
f8:dd:d1:93:8c:82:e2:fa:5f:4c:0e:3b:fc:27:d6:7f:83:42:
a6:19:cd:9c:85:8a:bb:27:7a:c3:67:a4:6c:81:87:98:08:f7:
bb:8c:e7:4e:ca:a7:c8:52:9d:57:6b:27:eb:f0:d1:82:29:22:
04:e4:bb:26:fa:f8:d8:e8:b6:a4:b5:39:31:34:1f:80:e4:d4:
81:4a:a4:4b:d5:68:f3:3d:53:56:6e:a8:d0:ff:56:45:cb:f0:
35:d5:bd:a5:73:30:2f:7c:4f:24:2e:31:50:5c:b0:88:6f:c9:
20:bb:9c:61:0e:af:2e:96:fb:00:85:e4:bb:96:9e:53:fc:c9:
cc:e2:57:08:6d:04:22:d5:40:d5:e1:64:f9:a4:af:22:0e:de:
9b:ec:c1:63:60:b9:1a:00:be:7b:22:0d:65:f0:03:90:fe:06:
0f:91:35:76:27:06:8f:6a:6a:b8:4b:0e:cb:7c:a9:a3:27:af:
66:c7:66:86:be:cd:23:78:90:d3:8e:a8:89:d7:57:2c:a8:ba:
bf:d1:d5:cc:e5:02:ef:c4:99:48:19:77:4b:a0:68:59:9f:c4:
f6:00:86:e1:b8:f4:59:a9:43:2b:1d:70:91:30:28:47:9b:81:
02:65:76:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:47:05 2025 by rpki-client