Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
File: wjZC0as50wnsXzPk6IFK3DWEgl8.mft (raw, json)
Hash identifier: dewPtNw2nR09uEB+TKrWT2UmVpgo2XNvcM1e5zV1vOQ=
Subject key identifier: 97:58:07:33:28:A6:06:26:02:EB:0E:4D:3C:98:7A:94:61:4D:0F:CA
Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
Certificate issuer: /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Certificate serial: 019A533F487D67CB47438ED87BFFE9D4F995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
Manifest number: 0BC1
Signing time: Wed 05 Nov 2025 09:00:47 +0000
Manifest this update: Wed 05 Nov 2025 09:00:47 +0000
Manifest next update: Thu 06 Nov 2025 09:00:47 +0000
Files and hashes: 1: XIE6pSr5Se_ddJ-sbF0LHvUWRNo.roa (hash: ksy2bMoShyEx+Z2LrrV0ovXdXkbwK/G4ElQgVhhEd+k=)
2: wjZC0as50wnsXzPk6IFK3DWEgl8.crl (hash: yhBedd3qKUzrsrF9BYeGRhQI6OfEGkQdX1lDJnUWhak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:48:7d:67:cb:47:43:8e:d8:7b:ff:e9:d4:f9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Validity
Not Before: Nov 5 09:00:47 2025 GMT
Not After : Nov 6 09:00:47 2025 GMT
Subject: CN=9758073328a6062602eb0e4d3c987a94614d0fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:2d:5c:aa:dd:f1:2b:26:3c:e8:cc:f5:54:
b0:81:1a:17:0c:f8:09:92:e4:ce:ae:0f:34:9a:6d:
0c:0f:c8:a5:3b:f3:a8:21:e3:86:bc:07:d2:35:7f:
77:9b:26:6c:de:f7:2c:1c:ab:4f:78:91:2c:fb:c0:
75:82:ff:6d:89:76:02:74:b0:25:95:bc:e8:27:04:
08:ff:00:b0:8c:b5:ae:de:6b:89:c3:df:6a:6f:a5:
c4:1d:3c:55:5d:08:6c:02:ea:85:4f:b3:c5:cd:ec:
c6:1d:ac:12:11:e7:48:79:03:89:7d:7b:63:6e:6f:
e3:ae:6d:82:be:17:00:c4:2e:35:1a:a6:9d:cd:68:
f9:c9:c9:2d:a6:d3:d4:2c:b9:cd:a8:de:6e:a3:c1:
3d:bd:4f:5f:d7:a4:16:5c:20:1f:e9:51:b6:7e:88:
6d:03:52:c9:ce:45:b1:c7:01:06:a1:f4:e0:57:29:
29:22:e3:76:05:05:67:15:78:04:99:52:2d:2b:6c:
5f:e7:32:5e:92:17:6b:4f:95:2d:14:04:49:a9:fa:
74:98:7a:2e:c0:0e:6a:c7:73:9b:74:7d:e8:77:d1:
70:3c:39:b2:3e:68:b6:51:01:54:4a:54:7d:06:75:
6e:51:94:a9:39:12:c5:36:b7:72:46:8a:10:2d:fd:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:58:07:33:28:A6:06:26:02:EB:0E:4D:3C:98:7A:94:61:4D:0F:CA
X509v3 Authority Key Identifier:
keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c3:5a:27:58:a3:bf:2c:bb:0f:97:7d:0f:ba:1d:fa:5b:76:
b3:9f:c4:07:f2:26:76:11:e8:05:60:8f:fe:8f:c7:ce:a3:66:
cb:7a:df:e4:58:72:1b:cf:f1:32:7f:86:f5:b3:63:43:11:a0:
15:06:ea:39:c5:18:91:83:e9:55:0f:01:35:cb:1c:2c:e9:7c:
d8:bb:52:10:5b:24:6c:32:1c:ba:fa:34:e3:3d:2c:ea:c6:ed:
07:b1:86:19:0b:92:4c:25:d4:59:10:12:19:68:b8:6a:d3:4a:
df:75:18:56:f6:a7:14:32:21:26:0b:b6:97:3a:ff:69:94:0a:
03:1f:75:9d:a6:69:c5:1c:a0:26:23:c3:f0:9f:c6:a5:e3:9a:
07:05:c8:37:d7:75:bb:ba:c0:b5:84:9e:5f:7a:2b:f9:c3:a6:
89:88:ef:32:f0:f2:09:79:95:19:93:62:bf:5a:5a:e4:4c:02:
82:39:42:98:5f:9c:ab:a0:99:58:c0:67:bf:4e:7a:88:ea:c4:
e7:d3:17:c9:58:6b:a5:b3:1d:9a:e0:10:2c:cc:c2:1e:99:71:
4c:51:27:de:f7:10:72:9c:90:a9:e3:a6:aa:97:73:08:a6:cd:
d2:20:76:3e:b6:e9:30:df:3d:cc:f4:c4:0d:47:49:38:72:87:
34:65:14:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:21:00 2025 by rpki-client