Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
File: WyUo3AddUec-4NCQ4dKh9c-uj_s.mft (raw, json)
Hash identifier: 25HAgiQ6CSqXQAl+4myQhqQb4DXS06TTXLIQPdNSsXQ=
Subject key identifier: 68:D4:73:A0:23:EA:DB:18:23:77:ED:BB:4C:01:B6:07:46:1A:9F:42
Authority key identifier: 5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB
Certificate issuer: /CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
Certificate serial: 019A7149F224E1DE7BAA7FBFE3CB5702F5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
Manifest number: 0224
Signing time: Tue 11 Nov 2025 05:01:02 +0000
Manifest this update: Tue 11 Nov 2025 05:01:02 +0000
Manifest next update: Wed 12 Nov 2025 05:01:02 +0000
Files and hashes: 1: WyUo3AddUec-4NCQ4dKh9c-uj_s.crl (hash: kiY6uMqoWYfK5fEte0eHmRGdND5GTTvsK4c0NnrfCFk=)
2: yJQwQMARRrVe9vIkjsREE8o5TT8.roa (hash: eXLzlsDPHHeDqRfh3yuG7C5MD8Da8VfpIofRm28xfrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f2:24:e1:de:7b:aa:7f:bf:e3:cb:57:02:f5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
Validity
Not Before: Nov 11 05:01:02 2025 GMT
Not After : Nov 12 05:01:02 2025 GMT
Subject: CN=68d473a023eadb182377edbb4c01b607461a9f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:ec:fa:4b:33:72:b3:ce:d3:ff:33:bc:40:
fb:9e:ee:c6:fa:86:ad:f2:4a:da:be:26:f1:00:7d:
08:3d:31:2b:59:f4:df:eb:6d:74:4d:2b:f4:c2:7e:
57:9f:c9:47:29:26:ab:fa:e1:9f:92:f0:d2:18:76:
da:6f:e8:45:c7:33:94:12:28:38:d6:3a:d1:10:fa:
60:e9:4a:d8:48:6e:da:1e:89:d6:2f:e7:26:b5:6e:
29:7e:62:8b:05:e1:24:83:5c:5f:59:84:d2:c9:66:
be:c5:19:25:38:49:e7:ca:07:30:f6:63:ed:d1:d6:
67:d4:6d:ac:d2:cd:3a:af:96:7d:c8:e0:bf:0a:e2:
de:c5:cd:c6:d5:b0:a5:59:e0:b7:83:5c:11:66:81:
6b:e5:9c:32:fa:99:8d:c9:b5:e2:3e:38:95:95:20:
e9:2b:0b:05:9a:ec:1f:2e:6a:76:28:70:22:29:64:
d1:d4:b0:a8:ec:4f:95:2f:50:fe:7a:ef:f4:09:ca:
93:22:ea:ed:c0:50:f9:40:85:9f:10:34:10:1f:69:
6e:f8:9a:b3:59:c5:3c:c2:16:9e:9c:83:84:fa:b9:
d4:4d:6d:f4:1e:40:1c:fb:07:cf:2e:15:0c:ed:0f:
63:dc:00:1d:1d:84:e9:08:2e:20:be:e6:cd:ab:6e:
c7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D4:73:A0:23:EA:DB:18:23:77:ED:BB:4C:01:B6:07:46:1A:9F:42
X509v3 Authority Key Identifier:
keyid:5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:01:bd:8e:2f:dc:b3:a4:86:72:0f:96:f8:ec:16:b1:9d:97:
dd:f3:06:98:92:74:8f:8f:1a:bb:f6:d6:56:ca:d8:b9:38:79:
a7:cc:f2:49:5e:0e:2d:3f:74:34:8e:cd:0c:55:21:98:73:d9:
87:0d:f1:d2:76:81:8f:24:ed:88:b2:62:56:8a:ea:8d:d5:42:
d6:27:d7:84:0d:2d:b9:ce:37:88:e9:6a:1e:33:06:ca:0d:40:
7f:bd:af:c7:c0:68:9b:23:58:cc:43:c3:ad:f3:9d:24:dc:71:
31:aa:98:f4:51:b2:10:eb:e6:2a:65:30:52:a5:61:91:49:7b:
00:6b:a1:91:88:5c:3a:6c:7e:85:c5:cb:b0:9d:7b:e2:58:9f:
ef:c4:81:bf:16:8a:b0:47:64:d4:71:09:1f:7e:3a:53:11:80:
ff:62:11:86:26:c9:94:07:c8:29:ec:2b:df:85:9d:d5:60:ae:
de:62:4a:dc:2e:59:5c:de:46:bd:0a:76:f8:df:d1:2e:b8:68:
9e:ed:96:56:0f:fa:28:87:bc:9f:5a:44:09:a9:b4:74:91:00:
c1:06:3e:60:0a:c8:9b:35:84:e1:84:cc:44:4a:e4:12:14:a7:
34:21:7f:00:ab:d0:be:d3:52:8e:05:5c:04:66:5c:30:65:7c:
18:d3:a4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:42 2025 by rpki-client