Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
File: wDJJW4nc6BsMf4ht38NgS94G2KY.mft (raw, json)
Hash identifier: 9x0rR5//2ejH8A1kxkuUZHDb1GMTQYzsCkCwfS7cOuk=
Subject key identifier: 82:EC:A3:39:89:E2:BD:C9:EA:57:48:E7:3F:E5:80:58:EE:B8:EE:7F
Authority key identifier: C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6
Certificate issuer: /CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
Certificate serial: 019A71B840A48A9CA3BA53589F297A407AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:31 +0000
Manifest this update: Tue 11 Nov 2025 07:01:31 +0000
Manifest next update: Wed 12 Nov 2025 07:01:31 +0000
Files and hashes: 1: mHKZZdX4P1dK57yB0hCJdDCS-A8.roa (hash: sgKlWaet9A3w8v934Vjaqn1vJ0nwSp4V/6BEjtLuqMM=)
2: wDJJW4nc6BsMf4ht38NgS94G2KY.crl (hash: pMcOCaYYcJBNbQRnyP50LZhaqbPN8i0u8M6gv4WbZHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:40:a4:8a:9c:a3:ba:53:58:9f:29:7a:40:7a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
Validity
Not Before: Nov 11 07:01:31 2025 GMT
Not After : Nov 12 07:01:31 2025 GMT
Subject: CN=82eca33989e2bdc9ea5748e73fe58058eeb8ee7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:81:c3:aa:1e:8e:00:4b:8c:c1:7b:1c:9a:
97:dc:fd:60:a3:38:64:19:10:8e:a1:a5:20:a9:78:
dc:8b:5b:63:4e:8a:63:a1:89:3a:e3:93:2c:ff:91:
fb:68:65:26:c6:e8:73:72:c8:c7:02:f8:1e:58:f9:
b1:1b:a8:f1:da:31:1a:93:8e:4c:bc:5c:19:2a:86:
23:7c:6d:de:db:28:92:cd:07:5a:6d:50:95:b0:fb:
6b:3e:e7:db:8b:a2:9d:a9:79:d9:2b:fc:d7:20:7f:
6f:26:4e:74:1f:c4:2f:6e:9e:79:86:ab:3b:5c:e4:
d5:71:32:7f:29:35:96:79:9a:57:62:36:25:c4:66:
82:a2:36:bc:7c:1d:fd:ea:a1:fe:94:54:22:36:1a:
6c:72:b2:0d:d6:01:ba:6a:1a:5a:0a:2f:26:c3:65:
93:f8:92:43:66:1e:78:49:97:61:09:de:57:ac:63:
03:bf:54:de:10:72:72:98:33:94:87:b8:c6:b3:a6:
a2:e8:22:5a:7e:19:d4:b3:c1:2c:62:99:80:1d:be:
93:b0:8a:ad:10:d0:c1:21:8c:95:ac:c8:f7:38:2c:
c3:76:b8:28:5a:8c:f1:77:83:83:d3:ae:4c:9d:e0:
17:8f:ca:fb:b8:0f:e7:26:e0:59:0c:00:19:ec:21:
bd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EC:A3:39:89:E2:BD:C9:EA:57:48:E7:3F:E5:80:58:EE:B8:EE:7F
X509v3 Authority Key Identifier:
keyid:C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:48:e5:2e:87:67:ed:7f:de:75:9d:b1:a3:98:5f:a3:c6:2d:
7f:51:28:55:10:21:44:74:b9:0f:d0:37:86:5d:66:b0:65:e2:
a4:d0:05:60:03:4a:a9:3f:02:5a:e2:d4:a3:ca:b5:d9:05:9e:
70:2d:5a:6d:cc:eb:e0:d0:e0:9a:82:74:5e:b3:05:48:34:15:
3c:af:ab:a7:72:27:15:8d:2b:56:43:60:49:f7:78:81:d2:fd:
5e:4d:bb:80:e3:32:9f:13:e4:55:59:c9:73:21:de:f6:9a:74:
c9:fd:94:c8:44:07:66:2c:7d:1a:c0:ad:76:50:a3:3a:ac:61:
93:ef:10:5c:68:3e:0c:63:a9:1c:1d:17:7f:f6:29:59:73:f4:
0e:f3:27:8d:20:dc:80:bd:2d:23:a1:74:1a:a0:c0:41:e4:8f:
f3:cb:40:cb:a9:9c:23:d5:16:9c:96:bc:0a:13:35:52:bf:6b:
12:e7:08:96:b0:c4:bb:82:3d:18:a3:66:2e:df:48:d2:20:31:
90:5f:3a:70:28:26:51:6a:77:2d:86:40:c9:c9:f1:db:d8:83:
75:a5:a9:98:e9:8a:ce:44:06:04:b3:67:b9:3d:d1:89:58:ee:
03:33:68:f9:e0:35:25:fa:41:39:fc:f5:af:8d:d3:97:90:27:
23:78:30:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:27 2025 by rpki-client