Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
File: wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft (raw, json)
Hash identifier: qB9MsltH6kr8XqkgBP6BBBPt1PH2ANpaQbYvaM8UeOo=
Subject key identifier: 97:ED:8B:D5:83:4F:28:1E:80:3C:8D:08:C3:4E:FF:C3:5E:7D:F2:7A
Authority key identifier: C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
Certificate issuer: /CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Certificate serial: 019A42F040F3D909C749176A051342E64A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
Manifest number: 169B
Signing time: Sun 02 Nov 2025 05:00:32 +0000
Manifest this update: Sun 02 Nov 2025 05:00:32 +0000
Manifest next update: Mon 03 Nov 2025 05:00:32 +0000
Files and hashes: 1: vKd8NlEx5qop4iqu250zXE8t3lE.roa (hash: FN1Ryr/mI8CQAU+QgnXcKT4FTQKee0OFCoQuRyraQ08=)
2: wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl (hash: kzuoJEgsPs/EaFsT2IEaNeu9/ljYvlzeWDTCdpAc2o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 01:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:42:f0:40:f3:d9:09:c7:49:17:6a:05:13:42:e6:4a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Validity
Not Before: Nov 2 05:00:32 2025 GMT
Not After : Nov 3 05:00:32 2025 GMT
Subject: CN=97ed8bd5834f281e803c8d08c34effc35e7df27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e3:43:83:00:cc:26:ab:b3:6e:d5:34:f4:f3:
f6:a8:00:e6:70:24:49:97:3f:8c:79:de:70:96:e0:
c7:50:09:81:7c:e4:40:a3:85:ef:81:d8:d1:6c:a0:
97:31:b2:32:36:ea:0b:a1:03:ac:54:be:f6:f0:0e:
54:5b:5d:c5:9d:2a:a0:70:d7:c2:16:28:63:3e:47:
98:1f:8f:9a:9a:d0:27:32:d9:8b:82:7e:f3:49:6f:
e0:13:5a:c7:8f:70:d9:a3:2e:53:a4:77:65:0e:5e:
ee:85:fc:f0:6f:c2:3d:95:28:a3:81:e5:84:f6:bb:
31:d2:44:2b:74:d6:c3:92:41:7e:e4:4e:d5:6c:38:
91:0a:98:be:b5:4c:78:2a:9c:70:20:ea:90:79:d7:
3f:e2:22:a5:55:6d:e3:f2:a3:59:4b:65:43:3b:eb:
aa:42:89:d7:aa:b0:fa:10:93:2d:43:af:29:46:6a:
2e:00:3d:d3:5f:b9:06:72:3f:fc:66:1c:e9:64:06:
07:7f:ee:4d:70:1c:0d:13:14:d0:6e:e5:9c:35:6c:
8c:4d:5d:13:6f:be:fc:c1:d7:c8:07:e9:9d:90:38:
34:d5:1c:ea:41:9c:83:43:0a:69:16:60:04:0d:30:
9e:e6:95:ea:e8:d3:0b:07:bc:ac:31:3a:d9:cd:92:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:ED:8B:D5:83:4F:28:1E:80:3C:8D:08:C3:4E:FF:C3:5E:7D:F2:7A
X509v3 Authority Key Identifier:
keyid:C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:11:65:9b:00:91:a6:01:4d:53:63:9d:bc:d2:ae:4e:c3:94:
f0:b6:33:72:6a:f9:3e:73:70:2f:5e:ce:5d:63:5a:a4:e3:e4:
20:dc:57:8e:7a:1b:3e:e7:33:d8:44:0a:10:d9:43:d1:02:5b:
3c:3e:91:60:85:79:a4:8c:3a:5d:8a:8a:18:15:5a:5e:1c:16:
18:af:5f:c1:eb:f3:ba:80:a2:ba:c5:38:6b:c2:ad:0c:4a:4e:
3e:66:ec:1d:9e:86:6a:46:aa:18:00:5e:22:73:20:82:57:b9:
f4:0f:50:1b:01:75:46:52:8a:84:fc:e8:11:81:62:85:b9:31:
85:07:47:35:21:0e:c5:b5:f6:4e:cb:39:68:63:a2:78:cd:36:
63:ab:ae:dc:32:cf:2e:97:d7:a9:9c:42:af:c9:36:90:c1:81:
7d:01:3e:ef:1b:17:62:e7:25:60:50:00:bc:7f:11:91:e0:42:
da:96:a0:2e:89:19:b8:e7:17:bb:6b:e2:ab:68:63:87:3d:26:
3c:29:7f:26:aa:5f:27:3b:ef:d2:f9:3e:8f:3f:be:d4:2b:ce:
27:7b:9d:d5:f6:ac:6f:fe:ac:5d:78:cc:8c:91:ec:1d:35:98:
23:c9:80:3a:ee:b1:53:74:32:6e:e8:0c:fb:04:ea:39:c6:81:
a6:ed:d4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 07:32:07 2025 by rpki-client