Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
File: wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft (raw, json)
Hash identifier: 7HC/DO7fv6wfs+AFLjxlDcjb6+DX9+VQvTNF/Gs/f1A=
Subject key identifier: 41:75:DB:45:B5:4B:4A:02:4B:1E:86:45:56:B8:63:B2:F8:D9:39:E9
Authority key identifier: C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36
Certificate issuer: /CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
Certificate serial: 019A725C383F14891EDB3802C187E89F7DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 10:00:37 +0000
Manifest this update: Tue 11 Nov 2025 10:00:37 +0000
Manifest next update: Wed 12 Nov 2025 10:00:37 +0000
Files and hashes: 1: hFaskM76WmkGz-mPiPTUpMiqZxk.roa (hash: luq1omNBXihu/qimESEN6qhU6P0bWFQ94OAUTpScUXc=)
2: wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl (hash: 19Y6q2cNPOSSaKgX6wSGWgcCFApwr22EwBjEyE4JlMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:38:3f:14:89:1e:db:38:02:c1:87:e8:9f:7d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
Validity
Not Before: Nov 11 10:00:37 2025 GMT
Not After : Nov 12 10:00:37 2025 GMT
Subject: CN=4175db45b54b4a024b1e864556b863b2f8d939e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d9:96:dc:3d:06:fa:2c:d7:87:bc:a1:1e:1c:
ec:7e:7d:d5:3d:d6:df:e6:04:85:e5:36:ec:5c:3d:
88:c4:5b:c4:40:f8:31:70:5c:82:f4:a9:40:fc:82:
4b:6e:95:6f:cb:74:51:5d:81:22:a3:f7:d2:f0:29:
e5:14:f5:a6:30:4b:58:41:44:e3:53:d5:45:31:c5:
8c:ce:5a:b3:43:d2:42:18:2a:8a:5f:98:59:29:2e:
1b:94:61:8d:64:ac:2c:cf:e7:4d:d8:8c:f7:1e:d2:
3b:ad:cb:89:7d:c3:13:30:d3:06:62:69:98:4b:d1:
d3:c8:18:5f:9f:3a:34:c7:83:09:da:0e:f2:8e:bb:
98:f0:d6:5e:a3:43:d9:50:9d:85:4c:e1:0d:a5:cc:
5d:ae:fc:17:4a:ea:d2:15:a4:f4:10:b7:0b:3f:57:
52:af:66:c4:19:d1:cf:44:12:60:2e:18:ae:fe:c6:
0b:e8:76:77:4b:2c:55:e5:6f:ba:11:dc:f8:53:73:
f6:e4:60:a9:ff:a9:ac:d8:d3:0d:63:c7:e5:90:b6:
7e:35:53:28:1a:49:f2:55:ab:79:33:16:d7:ac:42:
57:1b:09:b8:8c:c4:98:2f:10:a1:47:ee:7a:21:36:
cf:cb:cb:7c:e1:96:bc:69:bc:67:10:fa:60:e2:ec:
42:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:75:DB:45:B5:4B:4A:02:4B:1E:86:45:56:B8:63:B2:F8:D9:39:E9
X509v3 Authority Key Identifier:
keyid:C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:93:fa:6a:2b:4b:37:a3:d5:40:61:29:32:2a:4a:9b:4a:6f:
34:eb:d3:c0:02:71:58:19:95:98:fb:e1:6d:0f:65:4a:a8:56:
fb:5f:7e:c8:24:d6:39:22:e5:63:fa:0c:bf:a8:a4:07:d5:1c:
67:b4:d1:b8:0f:75:3c:b2:af:b2:16:04:a7:cd:4f:a0:16:95:
44:b1:c2:b4:9c:55:f0:4a:95:b8:a1:02:f8:b1:6f:50:f9:5d:
01:3c:38:81:d6:d4:87:3f:13:60:cf:fc:45:45:c5:24:7a:57:
6d:c0:bb:28:89:ae:07:00:13:ea:82:ba:ca:77:e5:ee:ab:19:
c8:9b:50:98:e4:3c:01:42:48:dd:99:45:87:5a:b8:ea:fd:cf:
0a:3c:b5:1b:17:2b:43:72:23:48:4a:75:99:85:9b:f6:9f:98:
a8:2b:ef:7f:65:9e:0f:b8:f1:a5:8c:1e:74:a2:da:99:e1:c3:
83:95:66:37:a3:39:d3:de:4f:27:f7:3c:ce:7f:5f:57:dc:8a:
69:13:e8:49:04:e8:97:b6:6e:bc:e8:ec:16:61:58:06:2a:af:
5f:8b:31:5b:3b:73:32:44:65:5b:f7:fe:8c:80:d5:b0:bf:06:
80:9b:dc:cc:a6:82:0f:5b:fd:cb:aa:cc:b9:9d:87:86:d3:c7:
d0:af:73:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:32 2025 by rpki-client