Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
File: wGWeHdFAebUh2SsfUsvE_TI-GNM.mft (raw, json)
Hash identifier: LhI+j1w7I61BRzpPFeTW+/Kza8dv5BJ3TdxTqluP/Dk=
Subject key identifier: 4A:30:B5:3A:AA:40:17:30:A0:9E:6C:E1:C5:23:B9:7C:41:F1:06:1B
Authority key identifier: C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3
Certificate issuer: /CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3
Certificate serial: 019A73380D29A3456E0998CF420E1E75FDB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
Manifest number: 0431
Signing time: Tue 11 Nov 2025 14:00:44 +0000
Manifest this update: Tue 11 Nov 2025 14:00:44 +0000
Manifest next update: Wed 12 Nov 2025 14:00:44 +0000
Files and hashes: 1: XmdSMCmint9DPZ--cCLmS94eFwY.roa (hash: Ecj0xnHDR2ooGxeY4fWUT554GHurKxl+Q6h8BrSfnec=)
2: wGWeHdFAebUh2SsfUsvE_TI-GNM.crl (hash: Y+cmjO3UEOdl6uj3x9wFeWFo6DW4Ir9UxzPuypW8b5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:0d:29:a3:45:6e:09:98:cf:42:0e:1e:75:fd:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3
Validity
Not Before: Nov 11 14:00:44 2025 GMT
Not After : Nov 12 14:00:44 2025 GMT
Subject: CN=4a30b53aaa401730a09e6ce1c523b97c41f1061b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:71:be:64:18:88:4b:17:2e:07:5c:fc:e9:5c:
e1:d5:2d:5e:7a:c2:aa:2d:6f:bd:bd:29:5a:ad:db:
56:7d:70:a0:a2:2f:c6:06:18:a7:7d:94:09:04:c6:
84:d6:0e:8e:02:70:7d:c8:c2:ca:b4:fc:48:43:04:
35:66:d0:24:30:a8:5a:58:4a:55:15:cf:a0:4a:b7:
47:d0:41:3c:f7:77:14:8b:62:30:9e:11:f4:3c:b9:
cf:fa:c0:51:ec:30:5a:6c:61:65:8f:55:42:b5:a1:
76:c8:96:fd:56:dc:6f:34:71:a4:76:8d:01:0f:c7:
e1:91:5c:af:79:19:6f:69:c8:da:c6:85:3f:ef:23:
77:9c:9d:91:12:0c:8a:28:a8:17:0b:13:b0:63:4e:
47:3a:21:b9:03:25:42:fc:3b:00:ba:26:0e:db:d0:
90:95:f4:ee:b3:cf:9d:2d:f5:6e:43:a5:ab:2d:54:
39:0c:c7:64:39:15:60:0f:65:df:ed:a8:bc:5e:89:
1f:b1:61:a0:d9:50:5c:b5:2a:fd:1c:94:90:15:d7:
5e:04:71:f9:e9:07:45:03:1e:a7:49:94:79:5b:a1:
57:9a:1c:d9:81:5c:02:d4:1e:cb:d6:e4:1a:dd:40:
57:0e:c5:c8:59:28:fc:e7:fa:69:b2:9c:3f:60:60:
82:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:30:B5:3A:AA:40:17:30:A0:9E:6C:E1:C5:23:B9:7C:41:F1:06:1B
X509v3 Authority Key Identifier:
keyid:C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:13:67:91:04:85:b2:05:3a:bd:82:09:b4:35:d4:55:94:f7:
8f:e9:f1:e9:03:87:85:58:10:d2:d9:8b:d5:0b:65:3d:ef:08:
98:c6:32:6d:a1:a3:f9:8b:80:5f:13:53:8a:42:8c:83:fd:c0:
2a:70:00:91:f6:80:cf:49:e5:75:c0:58:c4:1f:34:ec:4e:0f:
e2:3d:57:68:30:c8:ca:2d:fc:22:7a:2d:e8:8c:eb:de:ea:d0:
2b:1d:0c:d7:e0:9f:96:a1:f7:c7:3f:03:fa:14:81:1e:e7:e6:
ae:e3:39:c2:1c:7c:64:20:21:3d:7c:20:d7:03:14:39:06:4a:
f9:6e:3c:b9:d9:c4:5c:19:dc:a6:2e:d0:d8:6e:52:91:cd:5b:
5b:23:25:79:de:2e:78:e7:3d:26:90:19:6d:28:59:c7:bf:d0:
68:59:6b:88:9b:7a:90:a3:27:f2:5f:84:92:da:60:c5:3c:b2:
12:a2:a1:a1:f3:41:7e:b0:5c:b9:fa:43:05:25:54:ec:03:0e:
35:24:3e:44:ce:ef:70:6b:75:ca:6e:68:35:cc:74:d7:6b:40:
a1:5e:9f:3b:63:3e:8e:18:25:dd:7b:3f:19:45:ef:69:90:fc:
11:ba:8a:e9:04:75:8a:a7:e2:a1:95:4a:96:47:c2:60:90:e3:
fc:ca:1a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:21:35 2025 by rpki-client