Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft
File: wPadL0dEdNu1f2vsjC1l1eDClmE.mft (raw, json)
Hash identifier: gnkPdDkX9J+rhscX82jNbTO7PF+R899X25UmBYSR5EU=
Subject key identifier: 62:D4:4D:8B:7C:3C:13:B2:49:CB:C5:4F:C4:FA:CA:48:13:38:05:F5
Authority key identifier: C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61
Certificate issuer: /CN=c0f69d2f474474dbb57f6bec8c2d65d5e0c29661
Certificate serial: 019A72261EBDDB8C9D7EA69D49280FD5B482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft
Manifest number: 116E
Signing time: Tue 11 Nov 2025 09:01:32 +0000
Manifest this update: Tue 11 Nov 2025 09:01:32 +0000
Manifest next update: Wed 12 Nov 2025 09:01:32 +0000
Files and hashes: 1: 1-f9PBVCsqBgm5V29oKXRRYWkevY.roa (hash: 7Ql3JH1RgsBJ7ZK4VNDw9mOs8UhnRqnrPre6nqQT+h0=)
2: wPadL0dEdNu1f2vsjC1l1eDClmE.crl (hash: 3fSYxMHUmjyMPh2QmVrPXMHx62pIuhJTcmYCs4o8XzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1e:bd:db:8c:9d:7e:a6:9d:49:28:0f:d5:b4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f69d2f474474dbb57f6bec8c2d65d5e0c29661
Validity
Not Before: Nov 11 09:01:32 2025 GMT
Not After : Nov 12 09:01:32 2025 GMT
Subject: CN=62d44d8b7c3c13b249cbc54fc4faca48133805f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:d6:20:97:4f:61:2d:2d:6c:53:1f:57:0f:
41:40:ba:4d:da:c2:2d:78:28:66:81:96:f6:4c:1f:
86:a4:03:ca:b2:4d:bc:20:72:29:23:e2:5a:ec:fa:
11:d6:30:8c:88:51:8b:db:0a:76:bc:9f:7c:f7:c9:
76:55:be:01:40:48:1f:fd:c1:5c:d1:fb:23:58:5f:
3d:3e:88:b1:09:8a:31:d5:15:f8:46:bb:19:8a:d9:
ca:22:6e:ae:7e:09:72:a0:20:93:13:97:bd:3b:f9:
8e:f4:a3:96:2d:d4:b5:93:1a:dd:ba:30:9e:47:7d:
27:15:c4:1a:33:31:37:d1:83:2b:17:74:1e:18:c3:
b6:c8:fe:8c:f7:55:5b:72:88:62:11:d5:b4:c5:29:
72:15:1a:cb:a4:04:67:a3:e3:30:e3:6b:00:79:c9:
22:b9:19:61:29:da:5b:10:74:8e:ca:f5:6b:1a:28:
9c:75:0a:dc:90:29:d0:b9:7d:4d:67:5c:1b:23:15:
41:3e:ba:08:62:56:d7:4e:17:2f:61:9d:c1:23:66:
95:1f:13:a0:a8:bf:27:e2:96:a0:d0:38:fc:25:17:
ff:6f:68:bc:12:97:d7:45:b9:ee:19:db:31:b5:c0:
4e:eb:1f:ba:48:d0:9c:69:0f:95:e5:a2:5c:01:a6:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D4:4D:8B:7C:3C:13:B2:49:CB:C5:4F:C4:FA:CA:48:13:38:05:F5
X509v3 Authority Key Identifier:
keyid:C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6b:07:fd:1d:d8:05:fb:74:04:d0:de:da:f4:9e:ca:d2:c3:
d5:f6:84:00:07:29:72:f3:73:2c:e0:cb:b0:9d:31:69:d3:db:
8f:9b:16:e0:cb:82:5b:03:f4:ec:13:1b:1f:a5:55:3c:8e:59:
28:8a:ee:0b:9f:2e:03:bd:5c:56:42:60:bc:08:fe:77:bd:49:
f5:2a:f2:8a:e4:1f:01:d3:a4:d4:8a:ad:4a:e1:ea:56:ef:32:
5c:f2:6c:96:23:0e:eb:26:76:ea:80:4c:3a:b9:1c:76:91:d1:
6a:06:7d:7a:bb:92:64:9f:15:d6:dd:46:c4:b3:d4:85:99:d0:
7d:5a:04:29:29:35:7b:80:6f:77:4b:8d:fa:66:91:63:31:96:
f5:23:44:79:c8:b3:cd:ec:5a:71:b5:b2:92:a0:84:28:ff:de:
7f:27:2d:98:07:13:46:5a:2c:a2:c1:8d:5a:d1:82:63:58:de:
74:07:c4:ab:c8:a4:e1:8b:5f:ea:db:f2:d5:aa:f4:eb:56:bc:
bb:b4:21:ba:58:86:09:85:cb:69:81:3c:06:88:e5:fc:15:3a:
1c:d0:09:80:29:9b:0c:eb:7b:c9:df:11:49:c1:f9:6d:62:f5:
65:56:1b:8d:88:0c:0e:61:90:ce:be:96:c0:8b:ae:18:69:e1:
c0:7b:6a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:00:39 2025 by rpki-client