Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
File: wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft (raw, json)
Hash identifier: lW/kihN8lNbSQ60WOGuspuX0POoTLPzs/2pFIPsKQ+4=
Subject key identifier: 27:2B:A3:20:A8:7C:1F:25:95:D6:AA:5B:21:91:C5:EC:2D:C8:3D:43
Authority key identifier: C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B
Certificate issuer: /CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
Certificate serial: 019A71B7A731497953E0C128C05A81487CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
Manifest number: 0EE3
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: a6SHvUwdULLlosMj0Qyu3etIaJs.roa (hash: AXN629p0Y1qYqZU9D/jxSCYhJRckcBgGmOm3TSGD8tc=)
2: lg4c_Y9KaB7IeYQtG_NlVFs8Ttc.roa (hash: s0TIgc9o3WnXNq+/Rw0e9Vihi4zyFHKiJVF/TZNGrnw=)
3: wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl (hash: LoTRPjoPUdjHDzh2G/lmaIn7PWB329DfllG03A0yUmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a7:31:49:79:53:e0:c1:28:c0:5a:81:48:7c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=272ba320a87c1f2595d6aa5b2191c5ec2dc83d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:f2:a7:52:1f:b7:d5:e3:02:3d:91:a5:88:
f0:b3:a4:49:39:94:a4:56:5b:ac:da:ac:05:57:51:
af:13:dd:9b:f6:b5:32:7a:c5:7f:fb:b3:f8:48:fe:
99:b9:78:39:44:85:fa:ed:df:d7:d2:15:1a:15:e9:
e2:19:47:89:aa:92:ac:7d:54:8d:c1:80:01:5c:15:
15:0d:8a:b8:ba:ef:42:9b:01:4c:1d:65:89:6e:75:
7d:f3:fb:42:ab:89:32:f9:3d:2f:24:eb:57:19:b6:
37:40:d3:4a:6b:fc:e3:4e:6a:34:77:59:ad:5a:eb:
12:34:b1:2e:d3:82:55:de:ef:7f:1d:4b:61:ca:75:
b5:eb:f9:02:ed:39:b6:7a:51:31:a5:8a:45:a0:f8:
4d:58:df:31:6f:b2:24:b0:28:8d:8c:ce:52:33:b7:
14:de:06:ec:22:e2:ae:e4:f9:77:10:88:f4:1a:40:
d7:38:ab:68:67:4d:a6:2d:aa:11:6b:b8:d1:33:03:
2f:55:19:37:28:f1:c1:94:9d:20:7e:b5:ba:b0:38:
ff:8e:cf:0b:39:c0:97:38:50:fb:7e:4c:1a:00:30:
d3:48:45:9c:a6:67:7a:80:64:81:9e:f0:71:67:66:
24:f1:14:74:59:0b:4a:b5:94:6f:aa:ba:04:3a:6d:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2B:A3:20:A8:7C:1F:25:95:D6:AA:5B:21:91:C5:EC:2D:C8:3D:43
X509v3 Authority Key Identifier:
keyid:C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8b:0d:36:60:4d:9a:1a:59:7f:b4:c7:be:22:b0:ff:ec:1d:
58:72:a1:0d:96:26:78:f0:e5:5f:99:2f:2d:e4:9c:cf:c9:20:
54:87:c3:50:6d:ae:6c:4c:be:a1:e6:00:91:a4:ed:e5:bc:38:
03:ff:be:12:ce:05:09:c0:fc:83:ea:74:7c:09:5b:35:10:9b:
ca:31:50:ba:2d:38:6f:81:62:0b:d2:1a:f6:22:23:08:12:55:
91:90:82:c6:35:85:d7:b4:84:c5:25:bb:b8:55:57:7c:08:95:
da:88:87:11:b8:40:f5:3c:74:dc:86:ad:a5:e1:3b:01:93:ae:
dd:fc:e0:02:c9:06:bc:14:d4:11:73:4b:4e:bf:a2:d1:8b:e9:
38:88:b6:c0:f5:95:07:bb:6f:c0:d3:6e:bc:6b:98:2d:07:93:
8c:1b:d6:e9:87:74:31:8f:01:dd:9a:2b:b3:1c:29:99:ae:c9:
df:cd:db:66:a3:c0:fd:46:c0:36:dc:00:b8:a4:d5:87:7f:60:
a6:5f:c9:e4:37:7a:a9:d0:02:e3:e5:dd:00:db:63:8b:4d:53:
07:80:eb:ff:72:da:37:1a:7b:90:74:24:72:f3:ff:35:ae:97:
4e:6d:27:1f:19:dd:66:4a:61:9d:98:a2:a5:66:08:b9:16:72:
4d:7e:3e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:02 2025 by rpki-client