Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
File: wVIzr0ulkRnW_xlNfNhmUISm7nc.mft (raw, json)
Hash identifier: RPxqmYxWEEGFNftVXtoA43sWvLj6FrK3MoJ44MoMD/g=
Subject key identifier: 7C:8B:2C:9C:5E:5D:9A:83:63:FA:0A:D2:51:76:B5:11:7D:62:38:6B
Authority key identifier: C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77
Certificate issuer: /CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
Certificate serial: 019A725CA3F29ECFD313EDBE4AD52DC10985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
Manifest number: 0DA3
Signing time: Tue 11 Nov 2025 10:01:05 +0000
Manifest this update: Tue 11 Nov 2025 10:01:05 +0000
Manifest next update: Wed 12 Nov 2025 10:01:05 +0000
Files and hashes: 1: M-zl6ZmtNK_TSwrT44MkMmFWsWY.roa (hash: 4yxdkDwmfz59LnRbcG6OUavxv8vAR+8hlDkw2Ess8wU=)
2: wVIzr0ulkRnW_xlNfNhmUISm7nc.crl (hash: Je/sV3bBEjMn6ggFHQZJ3qiwaMaI8BQY6S6MdtJqvoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a3:f2:9e:cf:d3:13:ed:be:4a:d5:2d:c1:09:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
Validity
Not Before: Nov 11 10:01:05 2025 GMT
Not After : Nov 12 10:01:05 2025 GMT
Subject: CN=7c8b2c9c5e5d9a8363fa0ad25176b5117d62386b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:14:21:9e:27:1b:3f:bf:8f:c7:8a:ec:1a:
6c:ed:b1:99:b9:e4:50:89:51:15:01:81:fc:f7:98:
87:a0:ab:56:48:29:37:dd:5c:dc:bd:2c:4e:6c:7d:
f7:11:20:b9:69:e1:ef:f7:2b:00:72:e6:75:7a:59:
a2:fe:65:d3:54:57:47:8d:15:06:b9:5b:f3:d5:d8:
53:36:01:cf:90:2f:83:5a:85:ce:78:47:9e:c0:95:
0f:43:91:5b:c8:6f:b7:1d:7a:21:dd:b2:6b:de:1c:
3d:a3:ad:47:32:d0:9e:82:5e:91:33:95:8e:22:9a:
e3:c9:8d:8b:7c:54:78:95:e6:ac:c3:c4:b1:1f:53:
f3:3a:fd:81:2a:f0:29:4e:7b:d8:83:66:df:b9:b3:
25:fa:85:63:c0:0e:29:16:33:ad:5b:74:e5:04:94:
07:c1:83:4d:55:30:c4:87:7e:8a:42:be:ef:50:77:
bf:b8:f3:59:84:bd:de:23:a5:5e:c8:64:ec:6c:f6:
69:bc:19:ea:90:c8:9a:85:d2:4e:85:83:5c:13:3d:
27:61:89:0d:e3:3d:e8:09:e9:1e:f6:e0:dc:9e:34:
b5:44:d0:91:4a:e8:12:b2:51:be:fb:d6:bc:77:ec:
42:85:e8:a6:7a:9d:7d:97:44:46:94:a0:62:18:2d:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8B:2C:9C:5E:5D:9A:83:63:FA:0A:D2:51:76:B5:11:7D:62:38:6B
X509v3 Authority Key Identifier:
keyid:C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:da:e2:01:5b:d6:c6:31:78:19:f9:f1:d9:ab:6f:ba:54:12:
9f:07:35:55:a0:95:bc:75:f1:65:67:74:61:cd:84:8f:c3:da:
fd:58:88:a5:01:be:37:be:ac:ea:04:6c:6b:54:a9:75:24:e7:
ee:02:c4:7e:a6:f5:7e:d9:21:09:ad:f0:8e:f3:76:50:cf:94:
19:d6:df:29:a1:39:f1:9b:6f:64:32:2d:2a:06:2d:a4:f2:54:
06:35:e5:76:9a:39:3a:22:56:86:49:3d:ea:8a:1a:a6:d8:9f:
d9:61:fa:ec:82:58:44:04:bb:f8:37:92:90:c1:9f:9c:b9:ed:
6c:b8:87:39:b3:67:ee:5a:95:47:27:dc:0e:d1:d2:d8:8b:d9:
89:c6:f1:5b:f0:2e:9f:6c:28:6b:bb:4d:40:8a:6c:02:23:cb:
bd:28:2a:51:f6:7a:bf:d4:01:5f:fa:9d:e1:2c:66:d8:a4:a1:
84:42:dd:a2:35:e5:9b:bf:b5:ff:77:20:9f:fc:77:5f:3b:31:
b7:28:bf:68:9b:62:d0:22:bb:c9:3c:79:f2:b2:8d:00:bc:54:
7f:58:e6:f0:54:5a:78:22:f2:0d:50:19:3c:2e:7e:2f:af:bf:
ff:1b:5b:6c:6c:88:cc:60:6a:55:d8:29:a3:70:22:26:8f:fe:
9e:43:5a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:41 2025 by rpki-client