Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
File: wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft (raw, json)
Hash identifier: Zyp4bBWVBAC4Und3aQZk8F9TNu+BoGZYqmbXfYT6DRs=
Subject key identifier: 32:BC:9C:8A:1A:D2:6C:74:FE:6A:C7:5E:D9:C7:21:26:23:09:BA:5A
Authority key identifier: C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF
Certificate issuer: /CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf
Certificate serial: 019A71B87D7AE30B11802938BB9CA54FDFDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
Manifest number: 020F
Signing time: Tue 11 Nov 2025 07:01:47 +0000
Manifest this update: Tue 11 Nov 2025 07:01:47 +0000
Manifest next update: Wed 12 Nov 2025 07:01:47 +0000
Files and hashes: 1: _M9B2KOz2UeSzhUegvYxGA2BwYo.roa (hash: D0dhCF5CGV5Me0OwA23AKaMmK0KyGQzZrCqAnO1Fksg=)
2: wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl (hash: Of9CcfDwfDh/7NRD00FSCZ8h+xNWzF9r/YJG+ozoR5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7d:7a:e3:0b:11:80:29:38:bb:9c:a5:4f:df:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf
Validity
Not Before: Nov 11 07:01:47 2025 GMT
Not After : Nov 12 07:01:47 2025 GMT
Subject: CN=32bc9c8a1ad26c74fe6ac75ed9c721262309ba5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:59:2b:41:1b:7d:92:84:da:f8:f9:49:8e:
99:ec:04:22:e4:26:3b:ed:f8:9c:3b:e3:bd:bc:3c:
1c:1d:7a:48:5c:00:db:70:c7:65:6b:e8:61:83:0b:
3a:fb:07:e7:d9:8d:e2:f3:11:59:46:4b:3d:c0:99:
ca:5b:69:c9:83:90:45:59:7e:ee:c3:81:83:45:b5:
0f:00:7b:fd:5f:cb:a7:fb:08:55:4c:3b:26:a1:d0:
e6:60:6e:51:36:81:73:0f:57:e9:78:98:a2:c1:1b:
93:ed:a6:55:98:a1:64:5d:c1:1b:f2:94:8d:3d:83:
f0:bf:da:e9:e0:9c:4b:c9:4a:9e:84:4e:e2:01:8c:
dd:85:c8:3c:00:fc:86:5f:bf:60:9b:d7:fe:b5:07:
da:1f:2c:bc:27:66:1d:c7:5b:2d:70:7e:e8:cf:cb:
02:4b:49:1d:09:fe:ed:7a:f7:f6:b6:48:0f:ca:9f:
ce:49:8e:e8:0b:d0:bd:d5:ae:b5:84:8e:05:73:47:
92:b4:ca:07:f1:e8:04:7d:42:ae:d0:33:86:ad:e4:
d4:d7:36:1e:17:e1:17:a1:81:e7:e6:61:ed:ac:3b:
8b:7a:2b:65:28:14:56:81:66:cf:0a:04:77:19:9b:
c9:e1:6c:8a:4e:38:3c:4d:b3:0a:f4:70:c7:a8:13:
12:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BC:9C:8A:1A:D2:6C:74:FE:6A:C7:5E:D9:C7:21:26:23:09:BA:5A
X509v3 Authority Key Identifier:
keyid:C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:10:4e:2b:fc:e1:a0:0d:49:bf:46:b0:9c:4b:ee:f1:d9:44:
81:c3:ed:57:db:5f:22:db:4b:cf:62:ed:1a:66:e3:e5:d5:c2:
1c:3b:10:e6:41:43:3d:e6:12:a0:90:02:2c:f4:3d:bf:ca:2a:
dc:95:a4:d7:33:c8:8e:b7:07:8c:1d:cb:d9:78:25:ba:fd:3a:
ce:4c:96:2e:e6:2c:6f:8e:02:7e:d6:92:d1:db:e5:39:6d:f3:
e6:51:3e:f0:cf:c8:86:1f:c3:83:f9:4f:b9:fe:d0:72:cc:59:
bf:db:b9:9e:8e:ca:f6:05:e2:8b:18:c7:bf:30:d7:4d:b8:9c:
5d:d7:20:48:12:06:da:3f:35:6e:c0:ae:1c:df:a9:af:af:f8:
e3:79:9c:ba:bb:4a:c1:90:f1:03:b8:eb:54:7b:bd:0b:74:71:
f8:4f:c5:f6:f4:aa:18:08:3b:33:55:26:e7:56:d8:a5:b5:f5:
e7:2b:59:ef:10:ef:38:bd:ee:e6:85:bc:2f:5f:31:1b:d9:b8:
aa:db:f9:52:54:73:4b:65:2d:94:2c:df:86:b9:f3:ac:ee:67:
09:ab:c7:36:27:67:ef:11:04:f3:b7:4a:b5:b5:e8:7a:ae:c5:
5e:db:45:2e:06:0e:4e:e1:75:36:a6:8a:d5:e0:79:9d:f6:f2:
9f:7d:53:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:22 2025 by rpki-client