Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
File: wuJKnaa-B1Tt3BR41pTm2p4Volg.mft (raw, json)
Hash identifier: IqOKlHejddiz2zSthKYipKTfJRhWnPPEAvCXMrnmTn0=
Subject key identifier: 6D:7B:64:C6:57:F8:37:C9:8E:8E:50:44:0F:55:E8:13:76:5B:95:29
Authority key identifier: C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58
Certificate issuer: /CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
Certificate serial: 019A725C6E605DB43F8A95EB8E3674AD2163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
Manifest number: 16AE
Signing time: Tue 11 Nov 2025 10:00:51 +0000
Manifest this update: Tue 11 Nov 2025 10:00:51 +0000
Manifest next update: Wed 12 Nov 2025 10:00:51 +0000
Files and hashes: 1: h69ZP3KGJST0X8t2H0a84vHIE78.roa (hash: J750FBzG47GmCm3WoGWQrJESMcKlRjC1SRSpKQ3Vchw=)
2: wuJKnaa-B1Tt3BR41pTm2p4Volg.crl (hash: Ywdw2pNIz0Lz4iCXUfZ2kwIEg8A7ZxFUXFXrOQRyqO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:6e:60:5d:b4:3f:8a:95:eb:8e:36:74:ad:21:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
Validity
Not Before: Nov 11 10:00:51 2025 GMT
Not After : Nov 12 10:00:51 2025 GMT
Subject: CN=6d7b64c657f837c98e8e50440f55e813765b9529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:eb:5b:db:72:eb:b6:b3:0a:2f:ba:6e:fd:
7f:e8:30:81:f8:8f:03:eb:c3:a3:0b:2d:cb:67:73:
32:be:56:6b:28:ef:37:04:18:95:67:b3:34:3a:4c:
7d:38:e5:64:e7:dc:7a:40:79:74:5f:86:f4:5e:90:
0f:2d:30:53:f9:bc:b3:bc:a8:03:d4:7c:2f:5c:4a:
3b:d7:c3:7f:2d:f1:cf:b1:d7:2a:2f:e6:4f:f0:eb:
65:7f:d8:1d:c8:60:e4:6c:b7:9c:8e:45:c9:8c:7e:
33:d9:35:e1:c1:45:70:b6:a3:11:f0:6f:02:1d:a4:
2c:a6:64:e5:1e:9f:0b:0e:e8:17:74:9e:36:6e:3f:
07:0b:b3:7a:25:d9:d0:05:77:f8:dd:ef:a6:b9:fd:
dd:87:8e:6c:b4:04:1d:2a:a0:91:83:89:bf:81:bd:
22:9d:8d:e9:9c:6f:38:6f:2a:2d:dd:2b:ff:05:80:
0b:c6:6a:44:ac:54:b8:b4:ef:87:77:d4:8f:11:a3:
25:be:49:18:15:bb:9b:e8:47:88:b5:ef:55:d4:32:
d1:94:23:16:d2:80:71:a0:cf:05:5d:db:b9:05:6c:
ef:5b:40:c0:a9:70:ba:72:2d:a3:a1:62:24:66:59:
3a:5e:40:2c:6c:9f:64:f6:7e:d6:53:bc:07:bd:2f:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7B:64:C6:57:F8:37:C9:8E:8E:50:44:0F:55:E8:13:76:5B:95:29
X509v3 Authority Key Identifier:
keyid:C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:87:d9:85:d0:5b:47:28:e6:8a:e6:ec:42:94:32:2b:ca:cd:
21:cc:77:e9:74:64:bc:02:09:64:c7:5d:c2:89:2d:ec:7e:0d:
f1:b2:9c:64:84:fb:61:04:78:d7:41:ec:94:e5:7b:73:08:85:
07:ca:df:bd:1f:fe:8b:fc:02:7a:44:a9:cf:fe:81:84:f4:39:
20:29:8a:50:dd:37:67:4e:ce:a0:df:80:90:da:5b:59:80:d4:
f1:bd:c5:aa:41:94:c2:03:ff:d5:1e:6f:15:f7:18:21:5e:24:
12:fd:c3:ec:73:21:2d:0c:a7:7d:04:20:a4:82:17:d9:d3:da:
5d:46:e8:56:f8:71:d1:9c:3b:18:fa:4d:09:58:2d:d4:1d:e3:
c8:56:a3:07:c5:fd:ed:47:5b:87:d4:85:56:d5:cf:88:6f:be:
7a:1a:4c:99:3a:41:6b:43:37:bc:dd:99:45:08:fe:80:cd:d4:
83:c4:a5:14:33:ed:3d:8e:d3:70:52:8d:15:42:66:52:64:90:
00:d0:e7:c6:4f:c3:b5:e7:d7:d4:14:73:7f:ab:3e:72:73:ea:
7a:02:78:99:cc:47:93:5d:c8:8e:cd:25:3e:f3:11:63:71:fa:
fa:fe:fa:74:1e:6d:fb:a1:13:b5:c2:ef:fd:74:7f:63:4e:df:
e8:eb:62:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:57:42 2025 by rpki-client