Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft
File: wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft (raw, json)
Hash identifier: svtgPPxdXufapbgUsCTzOn/L3zKvxi15GJZRRNFRqfc=
Subject key identifier: 53:9E:84:84:61:D0:D7:1D:C2:6D:49:8D:7E:74:23:70:80:3C:C5:23
Authority key identifier: C2:E1:DD:A1:DF:73:F3:FF:6A:E4:F5:E7:C7:B2:4C:AB:35:E6:84:9D
Certificate issuer: /CN=c2e1dda1df73f3ff6ae4f5e7c7b24cab35e6849d
Certificate serial: 019A71B83C3A2752906B893F0590DF98A65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: C5Ye6AW-98gvfnKh3BLJSV5ipoY.roa (hash: 0TAu53NWs0YR6cx7TDfJzDZx9gyaFfPOZu8ZpGicQ9k=)
2: wuHdod9z8_9q5PXnx7JMqzXmhJ0.crl (hash: zIMLQcVML/OQpJkZIPcX0xRhDrupQRh+2UyCp6Il63I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3c:3a:27:52:90:6b:89:3f:05:90:df:98:a6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e1dda1df73f3ff6ae4f5e7c7b24cab35e6849d
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=539e848461d0d71dc26d498d7e742370803cc523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:90:24:6a:ae:3a:1a:82:d0:0c:71:92:15:
8d:b9:46:3d:f0:93:84:21:8b:bf:2d:21:56:be:24:
81:97:8e:b7:87:6f:a8:8d:16:d1:15:75:1a:e6:a2:
f6:35:64:40:a3:2c:e8:3e:ff:a4:03:66:fa:fa:3a:
14:45:50:1b:c6:dc:0c:35:54:82:46:5b:4d:26:b7:
3b:58:68:4d:dc:76:e6:f0:81:c9:2b:df:55:0e:4d:
82:2a:88:e7:e8:0b:dc:59:ad:69:02:b1:e0:a4:7c:
4b:e3:e9:72:56:4a:11:4a:19:12:71:a0:1b:d2:8c:
a1:d8:17:c7:12:71:cc:54:9d:ec:f7:71:ec:2f:57:
76:1b:94:76:a1:9c:24:e8:77:57:6d:bb:9f:3b:d3:
2d:15:42:3d:f9:02:1e:e0:95:b7:68:5a:eb:31:82:
85:61:53:d2:7a:0e:81:53:ce:92:74:86:43:e9:4f:
a0:2f:45:55:95:e6:27:49:14:7a:6d:54:34:59:eb:
30:6f:c3:25:57:8c:da:74:15:00:d8:b9:f5:4b:f1:
0b:7b:15:80:87:a5:11:93:88:bc:81:aa:1f:3f:01:
a7:da:12:b4:01:74:e7:28:6d:d0:5b:5a:ee:7f:0d:
5a:ed:c8:fd:c7:13:38:7f:cc:60:3f:a3:16:0c:dc:
f3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9E:84:84:61:D0:D7:1D:C2:6D:49:8D:7E:74:23:70:80:3C:C5:23
X509v3 Authority Key Identifier:
keyid:C2:E1:DD:A1:DF:73:F3:FF:6A:E4:F5:E7:C7:B2:4C:AB:35:E6:84:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:de:67:3e:48:fa:92:9f:be:e4:1f:a8:83:68:ac:67:f1:65:
7c:76:16:60:e6:be:7c:5c:e4:60:cf:bd:b0:29:84:75:61:53:
3e:1a:30:b8:a9:16:a7:14:e6:ba:e8:e4:27:1a:4c:b5:48:ba:
f1:73:3f:fd:94:28:34:e5:a8:56:88:d3:35:49:75:b8:ce:67:
9e:05:2c:cb:21:13:36:d0:39:74:83:9d:dd:8c:d8:66:9e:d3:
78:7e:b6:bf:c2:f5:c2:bb:e7:a1:b6:a6:9d:81:4f:a3:05:f1:
a8:63:60:8f:df:84:42:1e:a5:85:0a:15:27:65:f3:17:a1:7d:
51:87:2d:9d:7b:a4:b8:02:8b:8b:0e:33:90:eb:6c:c1:d7:07:
a6:24:17:d0:e2:40:d4:d6:0d:b5:de:65:c1:5b:a7:64:ca:fe:
c8:1f:1f:89:33:46:82:58:18:d3:6f:3a:27:cc:6a:82:6b:d6:
da:eb:2a:b7:ef:2e:60:42:4d:c5:aa:32:ff:53:0b:d6:c7:84:
30:7a:e8:22:2b:9a:a8:45:b0:a4:0c:4e:46:07:09:92:b2:01:
0f:c5:ae:3e:d2:71:1f:60:77:ac:f5:06:87:49:e8:a0:49:bf:
b7:d5:63:1e:0f:55:3a:bf:14:46:a3:19:17:6f:9d:d0:f5:41:
73:7e:7a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:59 2025 by rpki-client