Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
File: wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json)
Hash identifier: nEcBGd4HXxz8131RY3JZI6lcsXmYihicwCwstbj7c1M=
Subject key identifier: 55:FD:AD:62:E7:49:BE:13:86:96:CE:A9:7A:16:D8:E2:2F:71:50:88
Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
Certificate issuer: /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Certificate serial: 019A70A51B7771CEA7ED61B8DC1472020BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
Manifest number: 0FF2
Signing time: Tue 11 Nov 2025 02:00:59 +0000
Manifest this update: Tue 11 Nov 2025 02:00:59 +0000
Manifest next update: Wed 12 Nov 2025 02:00:59 +0000
Files and hashes: 1: T_9TOa_stF5E9eIWRjxCGlAnn6k.roa (hash: 4V/y6Lec10YacV5wmtQBGvh+cufcrshrFw6PyKn/laI=)
2: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: zdpi/H43ZKQ9ZyUZ1poSw25SM7+INdKqkHr9SQHh8rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:1b:77:71:ce:a7:ed:61:b8:dc:14:72:02:0b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Validity
Not Before: Nov 11 02:00:59 2025 GMT
Not After : Nov 12 02:00:59 2025 GMT
Subject: CN=55fdad62e749be138696cea97a16d8e22f715088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:77:58:23:6b:bb:ef:b1:d7:0f:cc:59:9b:
6f:60:2e:80:2e:b3:35:02:d0:9d:81:d4:26:12:2e:
fa:76:a4:9d:e6:13:04:35:9e:f9:19:62:47:16:95:
ac:b3:e2:18:20:e3:98:9b:b0:d1:8f:f2:f0:52:7a:
13:a1:20:5e:65:91:1e:d1:2a:43:1c:92:39:56:fb:
0d:be:9d:e0:30:e9:dd:20:ae:cc:c1:eb:48:21:19:
0c:ea:d7:d7:0e:2e:69:26:0a:23:b7:f2:ad:24:49:
93:8f:64:0b:73:78:d8:74:59:59:c7:cb:92:8d:0c:
2c:01:8f:eb:03:6c:48:d8:fd:9a:4f:d6:66:3d:df:
f2:f2:48:05:05:e2:dd:9e:68:b8:da:04:58:6a:98:
9b:91:b7:61:d7:58:1b:1d:4b:9b:7e:48:67:98:c0:
33:99:9a:bb:32:88:91:e2:b9:c3:f3:07:42:71:16:
a6:a8:7a:7a:6e:22:51:b5:d9:df:7b:3e:2f:d3:50:
62:be:b1:a9:1c:9b:cd:09:6d:b6:82:e1:30:2d:72:
e2:11:c3:22:64:22:5f:16:c7:7f:e7:0d:27:30:fe:
be:40:4b:98:75:d4:f1:a0:be:f6:e1:c0:bb:f8:0c:
97:19:73:90:e9:dc:52:60:43:b1:29:d5:ae:83:33:
fe:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FD:AD:62:E7:49:BE:13:86:96:CE:A9:7A:16:D8:E2:2F:71:50:88
X509v3 Authority Key Identifier:
keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:29:1a:da:ba:84:d1:09:33:d9:0e:e5:be:e8:7e:a6:4e:96:
fb:20:ae:45:d7:96:ca:d2:c0:dc:c1:1c:5f:9c:29:59:16:a9:
5e:45:24:f5:0d:21:e6:26:21:ca:a8:ff:ab:29:dc:4e:b8:5c:
4b:0f:c2:9e:ff:f0:98:2f:bb:05:a5:ed:11:0b:09:8b:cc:f3:
2e:66:30:63:56:6b:04:3e:d6:ae:9d:4b:8c:25:53:e1:ea:3d:
de:b8:d2:88:78:b5:10:50:ff:53:22:52:ca:0b:4c:b6:58:d8:
0c:ef:a3:0b:fe:54:58:39:c7:73:0d:5a:42:e9:b2:0a:cb:35:
b7:2b:e0:59:86:b6:3b:61:03:23:b4:31:a5:8c:38:e1:97:4f:
85:f5:c5:4d:56:45:7b:eb:72:0a:5e:f1:4f:b5:24:37:ae:6c:
3d:ab:87:3e:0f:25:8a:97:54:38:fa:8c:c4:7a:f6:8c:39:ce:
95:c9:e1:01:00:9f:d1:17:1d:cb:38:ad:27:10:f4:03:fe:12:
6f:02:ea:78:0e:46:99:d2:3c:be:17:87:e8:d7:e8:b1:23:3c:
e2:9c:42:1b:6f:9b:ba:24:87:21:e3:6f:ef:47:97:c7:79:da:
74:0c:64:e9:7a:81:7f:8a:1e:62:90:5c:be:50:d5:1c:21:08:
4a:d7:c8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:05 2025 by rpki-client