Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft
File: Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft (raw, json)
Hash identifier: ngm6N0PaB0l36qvrLbhDT/tUwGMZpko1p4XPDWOVQGM=
Subject key identifier: 5A:5A:B3:E3:E0:EF:20:AD:37:8F:5A:B3:B5:71:B4:9D:10:60:7B:1C
Authority key identifier: 59:DD:05:74:6F:9A:28:87:56:C3:0A:FA:8C:45:99:5B:77:50:55:F8
Certificate issuer: /CN=59dd05746f9a288756c30afa8c45995b775055f8
Certificate serial: 019A725CC647FB5095F9F3A9BC68F4E6BE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft
Manifest number: 0181
Signing time: Tue 11 Nov 2025 10:01:13 +0000
Manifest this update: Tue 11 Nov 2025 10:01:13 +0000
Manifest next update: Wed 12 Nov 2025 10:01:13 +0000
Files and hashes: 1: Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl (hash: gaSGD2v5fKD9OQUhjNe3r5EdWgtEz3VYKRBbftxLZEU=)
2: od-eaeRv-_TtiWVxF1AsQmL-p6M.roa (hash: xxM+CC0rClETGMS9YhA+QBIZ3skgkCaIksfRH7MZZ+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c6:47:fb:50:95:f9:f3:a9:bc:68:f4:e6:be:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd05746f9a288756c30afa8c45995b775055f8
Validity
Not Before: Nov 11 10:01:13 2025 GMT
Not After : Nov 12 10:01:13 2025 GMT
Subject: CN=5a5ab3e3e0ef20ad378f5ab3b571b49d10607b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:f9:d2:55:15:b2:4a:20:02:7f:56:75:b4:
3f:5f:fb:8d:68:fe:9b:f3:05:c7:69:8b:6f:01:d3:
8b:af:e8:2c:5e:57:fc:e2:7c:ae:62:22:16:ad:90:
05:41:f0:23:6d:e3:10:59:c4:a0:09:ca:70:95:b4:
5a:88:94:67:e5:49:cc:30:ce:81:73:32:b9:ec:d2:
9f:f6:a4:02:5b:2f:f5:6c:80:24:10:24:e8:04:3d:
b0:23:1c:6f:bf:4f:3e:db:8a:d6:eb:68:98:6d:26:
f4:4c:da:7a:86:b9:1c:8c:a4:09:0c:ee:b4:d6:19:
00:f1:99:ab:fb:5c:cf:fc:d5:0f:ea:06:78:75:88:
81:19:12:6e:a8:3a:29:e9:fe:ae:7c:dd:f4:d5:8b:
50:2d:92:90:78:65:17:cd:2c:38:0e:1b:ee:8a:4c:
6d:90:7d:c2:79:5e:b0:ef:02:a8:ba:c1:a4:0b:58:
f5:38:fe:66:d8:4d:d3:76:ee:ba:d3:ed:13:dd:1a:
8e:b6:ff:9e:d4:fa:2c:6b:1b:27:74:52:bc:63:f3:
73:21:3d:29:c4:cc:01:e0:83:a9:1e:48:74:fa:30:
d7:be:32:d0:ea:e8:2a:0d:c2:24:f9:86:44:d8:c5:
c8:37:b7:91:95:21:1a:ed:ac:d0:14:b3:8c:6a:b1:
27:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5A:B3:E3:E0:EF:20:AD:37:8F:5A:B3:B5:71:B4:9D:10:60:7B:1C
X509v3 Authority Key Identifier:
keyid:59:DD:05:74:6F:9A:28:87:56:C3:0A:FA:8C:45:99:5B:77:50:55:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:f3:75:22:5d:22:c0:88:29:02:38:f2:44:4f:9c:3b:bd:54:
c3:15:6a:bb:74:6d:53:62:3b:36:3c:95:55:51:c1:8e:5c:d3:
06:f5:ef:f8:39:2f:88:e1:fc:d1:6b:07:41:3a:8f:66:ae:d2:
98:16:28:83:3b:6d:f6:6a:0c:a6:77:72:be:42:a1:1c:3a:80:
1c:03:a0:7d:df:78:44:07:cb:cd:bf:a8:de:37:da:80:1c:98:
26:5b:4f:26:3b:0d:3c:a1:cf:6b:0e:69:49:dd:96:c1:ba:14:
28:ff:68:cc:c3:57:87:fe:15:68:f1:d3:95:1a:a0:3b:7c:85:
8d:af:22:09:0c:6a:16:9e:bd:22:75:fb:66:9d:b5:9e:05:e8:
23:4d:40:65:64:22:e6:4d:ad:dc:0c:c1:e8:e2:2b:9a:e7:34:
dd:d7:2f:af:17:4c:27:45:2f:f7:41:16:bb:fa:cc:49:66:5f:
02:9e:69:53:63:fd:71:a7:ba:8f:6f:09:7a:48:62:25:1d:81:
a0:06:86:79:ea:db:d3:c8:3b:d3:22:e9:81:89:10:34:b9:0a:
b9:11:4a:d7:65:aa:b1:33:a4:b8:ba:da:1f:f3:43:39:a2:21:
11:f0:1f:3d:12:f3:74:78:5c:82:89:68:58:0a:e6:43:9a:8c:
55:ca:5a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:51 2025 by rpki-client