Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
File: wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft (raw, json)
Hash identifier: pz/n3N/RoKD16N8ORyVNtUKx3NU9+n09hwaoKsf4IwQ=
Subject key identifier: 06:9F:D0:17:E4:0C:94:40:13:0A:A6:68:37:AB:F8:8B:EF:AD:20:D8
Authority key identifier: C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
Certificate issuer: /CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Certificate serial: 019A7149D06FF44CC67AEF7BA421880525CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
Manifest number: 0694
Signing time: Tue 11 Nov 2025 05:00:54 +0000
Manifest this update: Tue 11 Nov 2025 05:00:54 +0000
Manifest next update: Wed 12 Nov 2025 05:00:54 +0000
Files and hashes: 1: MNSRA94GnwCWIcU0ZUPSgfJJzYA.roa (hash: vFvm6d7yLwrA+IkFyq24dAxJUZKY/00AaFr5EwDXEoE=)
2: wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl (hash: Edm7VH/fQAnPvVhc8NYl2yYuOcXys7HKmVnzJyDolTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d0:6f:f4:4c:c6:7a:ef:7b:a4:21:88:05:25:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Validity
Not Before: Nov 11 05:00:54 2025 GMT
Not After : Nov 12 05:00:54 2025 GMT
Subject: CN=069fd017e40c9440130aa66837abf88befad20d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f4:fa:c6:be:62:22:35:b3:ce:0c:34:01:e9:
d7:40:ed:02:75:e1:24:68:85:4b:5c:f0:1d:d9:6e:
e1:78:57:2b:d8:49:7c:19:cf:60:18:b9:1c:2a:b1:
70:b0:62:c2:f2:0c:82:2b:8b:60:25:8b:65:f4:ed:
99:bb:af:c5:bb:c4:df:22:0e:47:c2:2f:b0:09:e4:
88:95:50:fb:2b:95:e8:10:20:cd:e3:58:93:f8:68:
45:b3:d5:64:dd:78:53:b9:34:b5:3b:30:be:51:4d:
60:bb:61:2c:47:c0:39:ec:7b:1c:53:ba:f8:69:5a:
05:f2:fb:bb:82:d6:a2:b2:91:8f:b7:e7:c9:04:cb:
80:23:62:7d:ae:b3:a7:85:5a:cb:3e:d6:42:f9:27:
34:db:36:61:b0:b4:d4:b5:62:ee:41:03:27:b7:1e:
8b:e8:4b:d6:a9:c4:44:9a:57:25:3e:da:c9:1e:a8:
0c:af:a7:9e:6e:cb:6c:49:ff:2b:84:ed:f7:52:94:
82:7d:b7:8c:a9:cb:e5:80:69:bb:72:9a:64:de:9f:
31:bc:67:8c:3d:f3:52:95:2f:39:d3:4f:0d:73:2d:
cc:9f:bb:bd:ab:18:b0:b6:96:1b:78:42:7b:e7:a5:
bd:5f:40:4f:3e:57:6d:51:bd:5c:fd:6c:ce:59:c1:
f4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9F:D0:17:E4:0C:94:40:13:0A:A6:68:37:AB:F8:8B:EF:AD:20:D8
X509v3 Authority Key Identifier:
keyid:C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1c:56:ff:39:8d:f5:a1:b4:bf:ba:9f:f1:f3:bf:00:65:68:
79:57:10:37:55:0e:3a:3b:9b:0b:d4:71:a1:dd:09:62:15:26:
f8:0b:3f:fa:0e:81:b2:5b:70:11:e7:3d:48:35:7c:fa:f6:82:
11:72:dd:87:93:c4:11:9c:7b:30:9b:4c:70:60:25:f6:cc:11:
4d:e9:8b:2f:61:38:1f:0e:ab:58:a4:1b:c6:af:ca:98:bc:d2:
cc:81:09:99:a0:c4:d2:fa:18:3a:63:30:34:62:fe:e0:76:56:
99:21:f0:ef:c1:8d:90:ac:05:bb:51:58:79:f4:bf:9a:2e:15:
5e:a4:21:ea:3f:1b:00:dc:9d:4d:43:73:50:9f:92:27:12:7c:
50:b5:c4:34:ea:7f:88:6e:0c:e6:f8:6b:8a:09:8e:2b:58:a6:
c3:3b:68:66:3e:d8:18:f1:8e:b9:06:b6:e9:65:81:2a:3e:a3:
60:cb:a0:dd:62:f7:6a:4e:69:84:bb:82:57:a0:ba:d6:47:12:
fd:fe:38:c3:98:ff:ea:69:b1:ce:d0:ea:ab:6c:a8:c8:74:8b:
85:f3:f6:ad:ab:5c:8f:8c:9e:d4:86:ec:19:ad:01:b1:ae:cc:
b5:89:1e:95:e9:8c:42:99:bc:12:61:06:1c:50:db:38:ba:b4:
0d:14:f2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:45 2025 by rpki-client