Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
File: wDxpSwadoTLPTEvXwdIiloY7F20.mft (raw, json)
Hash identifier: hYjdA+TDtqCisgnhRC8l1TU1TNzrtTeLr7DLt4KlirE=
Subject key identifier: 9D:9A:6C:41:80:BB:C6:72:4C:E5:B7:F3:EB:CE:5B:8D:F1:90:66:F9
Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
Certificate issuer: /CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Certificate serial: 019A4470DD7944C1C58E0815CD5A9FAC5799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
Manifest number: 037D
Signing time: Sun 02 Nov 2025 12:00:38 +0000
Manifest this update: Sun 02 Nov 2025 12:00:38 +0000
Manifest next update: Mon 03 Nov 2025 12:00:38 +0000
Files and hashes: 1: D83JF5HJmZ_nDCEolR80xNvS-M8.roa (hash: 2gVW9uQvzf9z69pIhSOEl0MnJWNxJhApE/Mz251JqN8=)
2: wDxpSwadoTLPTEvXwdIiloY7F20.crl (hash: YWYS2+e0y/kbm0Q3mpspKPsRylP38N0zkDC7uDygAR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:44:70:dd:79:44:c1:c5:8e:08:15:cd:5a:9f:ac:57:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Validity
Not Before: Nov 2 12:00:38 2025 GMT
Not After : Nov 3 12:00:38 2025 GMT
Subject: CN=9d9a6c4180bbc6724ce5b7f3ebce5b8df19066f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:65:63:d1:dc:b6:a1:31:9c:00:51:1f:19:
b5:5e:53:21:ba:c0:53:1c:11:98:a0:f5:21:8f:cc:
7c:e9:ed:7b:0f:8c:8c:4f:d3:48:bc:7a:96:4a:56:
df:73:90:eb:d3:19:18:d1:54:b3:47:25:29:5b:36:
1c:4c:b7:98:1e:26:c3:6e:9b:74:56:77:da:c0:94:
9c:fc:54:f6:f3:ea:02:f4:a2:98:86:4b:34:72:11:
a8:20:9c:4c:dc:50:c3:88:a3:ab:56:60:d8:56:a6:
17:63:7a:29:cf:26:68:bb:62:4c:b5:c5:56:6d:ee:
d5:c3:06:36:ba:cf:ca:36:d7:88:c1:18:9c:91:84:
07:b8:32:07:4f:eb:6c:a4:e0:10:00:86:c0:51:a6:
10:3d:53:0a:3d:37:78:29:ff:aa:98:0f:b0:4f:9f:
8d:5c:43:c8:6e:95:dd:76:7c:fe:4f:30:70:89:79:
94:a2:e3:fc:95:0c:c8:82:86:49:bb:30:7d:5b:39:
7e:d9:5d:64:90:32:f7:06:45:e6:42:41:d5:80:94:
75:47:16:da:de:ac:fc:04:0e:18:6e:53:47:dd:be:
7c:4b:b4:97:46:de:2c:40:d9:cc:1d:05:96:56:32:
e0:79:b9:c2:0c:4c:40:57:17:36:93:2b:4a:a7:a5:
2b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9A:6C:41:80:BB:C6:72:4C:E5:B7:F3:EB:CE:5B:8D:F1:90:66:F9
X509v3 Authority Key Identifier:
keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9e:73:e7:f9:39:24:cd:43:9a:27:51:40:5b:de:7d:48:64:
e2:94:49:1b:39:df:c5:d9:ac:df:58:fd:8c:71:a6:49:61:c9:
de:31:50:04:da:e6:99:5f:03:de:5c:d3:0e:f2:2c:6d:f9:cc:
cf:ac:16:d0:79:61:9c:16:47:0a:49:c9:3b:08:a1:e3:2d:55:
b8:bb:af:e8:f8:f8:46:70:b6:fd:8c:33:1c:3a:32:54:53:ba:
a1:10:92:10:8b:64:27:d6:f8:2b:02:aa:e5:d1:91:2e:86:54:
c9:e8:78:3d:35:ab:74:df:0f:0a:f2:dd:26:78:79:cd:d6:25:
9d:c2:a8:a5:1b:e1:b6:e8:e6:1f:c7:2c:7c:10:6a:bc:ce:b1:
02:4e:1c:96:5c:54:b6:f6:49:1c:4a:77:d2:1a:07:e6:07:5d:
13:8c:30:86:ed:8c:c5:87:54:7a:ad:a3:8e:4f:54:a9:37:c5:
a9:7a:f6:9d:1b:0c:60:2d:f7:ee:57:6f:61:10:5f:a6:a5:e4:
07:4c:d8:a0:da:92:85:83:ea:f9:78:f8:85:74:13:a9:eb:fc:
c5:b9:9d:ab:f2:20:a9:2b:10:3c:9d:67:f1:75:b3:c3:dc:a1:
4d:f9:91:d4:8e:38:9d:5a:1b:88:b0:bf:69:0e:97:09:65:6d:
db:6e:9a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 19:33:06 2025 by rpki-client