Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
File: wPDumEJicDHsomTaxl5f72OUP5g.mft (raw, json)
Hash identifier: yIlHjej2kXyWsDCAxa0/j+ZdD2A/TYgVTdmn+iTP7wI=
Subject key identifier: 55:8B:2B:22:C1:17:2F:11:BC:E7:AA:E6:49:1C:21:3B:11:8A:F6:EA
Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
Certificate issuer: /CN=c0f0ee9842627031eca264dac65e5fef63943f98
Certificate serial: 019A2EFBDD0DB7108E80F1B56DE7D24F2900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
Manifest number: 0DCB
Signing time: Wed 29 Oct 2025 08:00:49 +0000
Manifest this update: Wed 29 Oct 2025 08:00:49 +0000
Manifest next update: Thu 30 Oct 2025 08:00:49 +0000
Files and hashes: 1: KyVtpyRTcvgBS4JaV8NPZOuwdLQ.roa (hash: iY3Qd0RfijC3WmQCC9uFX5dUNLie0ZRKHtS62kmKzs8=)
2: wPDumEJicDHsomTaxl5f72OUP5g.crl (hash: KpCMCe+jBTchCBgCZ/g2s4R6wCaPwnBwSAjO4NkoD1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:fb:dd:0d:b7:10:8e:80:f1:b5:6d:e7:d2:4f:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98
Validity
Not Before: Oct 29 08:00:49 2025 GMT
Not After : Oct 30 08:00:49 2025 GMT
Subject: CN=558b2b22c1172f11bce7aae6491c213b118af6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:c7:45:ee:3c:0b:84:85:d7:37:35:c6:5c:
9d:59:1b:96:31:f0:0f:50:9c:c3:e0:4a:53:c9:f8:
b4:aa:a9:d8:a6:ed:67:ea:2f:d8:e1:77:59:1c:28:
f0:41:be:40:ca:f8:2a:6d:87:ae:70:7e:de:5d:df:
b7:36:45:6a:24:55:8d:bf:0e:4e:06:6c:0a:5b:53:
19:ef:87:b7:ae:33:f9:b7:78:69:7e:24:b9:3f:54:
eb:19:c3:76:34:52:0c:3b:38:d6:fa:89:ce:b9:dc:
00:cd:3d:aa:d3:b0:d3:bf:49:0d:6e:a4:3f:2d:52:
51:f7:a6:2a:c4:e1:73:e8:10:54:ba:48:29:19:3e:
7d:93:13:2c:de:97:66:d7:55:3d:fe:8c:08:7b:4a:
cb:b0:4b:cd:4a:9e:9e:ce:dc:44:9b:33:6e:1a:4e:
80:5d:33:fb:e7:bb:7b:3b:db:11:70:c0:f7:52:1f:
6a:aa:f7:a7:6a:2a:55:f3:7c:9a:1f:3f:59:ff:c8:
56:f6:16:04:34:ec:ba:7e:6e:6c:77:f2:ad:4d:8d:
6b:c2:aa:7a:8f:c7:86:44:83:ad:9f:bb:4d:fa:63:
b6:c8:f0:cb:cd:22:33:be:0e:74:27:5c:86:24:6b:
10:ee:36:e2:df:7b:4c:e5:fd:4c:00:f3:5f:64:9c:
42:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8B:2B:22:C1:17:2F:11:BC:E7:AA:E6:49:1C:21:3B:11:8A:F6:EA
X509v3 Authority Key Identifier:
keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:48:ae:00:cb:d8:fb:2f:ad:15:04:e4:13:48:e3:39:cc:cb:
7c:d7:2c:c9:91:69:c5:58:aa:14:89:5b:db:82:f3:50:74:4e:
4e:44:50:4b:2a:f2:b8:7b:46:a3:db:a5:a7:4b:88:b7:33:66:
be:dd:70:0a:0c:58:36:f1:f8:d9:48:6d:eb:fa:30:4c:52:0d:
cd:41:1f:00:ec:ca:94:16:6c:cc:8a:26:b3:1a:a0:bd:1a:0f:
49:5f:5f:66:67:91:68:99:d1:9a:5f:3b:cf:99:25:04:f0:40:
5e:bd:c7:de:6f:62:f0:25:32:51:08:dc:1c:4b:f1:d2:83:b3:
ac:33:4d:e4:b8:83:30:e3:79:52:e7:7e:ee:c9:e7:bd:64:23:
93:24:77:64:74:05:5b:8b:1c:a2:00:85:67:9e:b6:95:a4:4b:
f6:ec:17:b3:6b:a7:32:e3:08:b1:09:48:9c:82:d4:ed:6d:18:
1c:43:40:a6:84:d6:12:bf:66:72:5b:35:46:9f:6c:c6:e8:af:
3e:ae:d1:2f:8e:69:f3:c8:8e:d7:e1:ac:00:5f:d1:43:34:71:
ef:6d:31:31:d9:72:41:50:cb:3f:85:61:94:e6:72:05:c5:55:
51:b0:3a:ed:ee:de:4b:e4:11:5b:d2:b4:8a:89:cb:de:2d:cc:
61:c8:55:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 11:26:10 2025 by rpki-client