Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
File: wb80sZClHOUwAleRGvMEBPSVH7Y.mft (raw, json)
Hash identifier: jQnVaIypP25jxpTWIoci9dpNDM0GzzpNps4V2EX8eGk=
Subject key identifier: E6:CB:9D:AC:23:86:B6:DA:97:75:54:1C:18:E7:A1:9C:05:0B:34:E8
Authority key identifier: C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6
Certificate issuer: /CN=c1bf34b190a51ce5300257911af30404f4951fb6
Certificate serial: 019A71B81BEC784AE83C0CE38C124888C906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:22 +0000
Manifest this update: Tue 11 Nov 2025 07:01:22 +0000
Manifest next update: Wed 12 Nov 2025 07:01:22 +0000
Files and hashes: 1: 0tyV27ZaRKIuc5h8kTDsBiv4BZI.roa (hash: 1dyOdZnQpGVWWsvnKswgEprRwbXy0vsePve+ulQremU=)
2: wb80sZClHOUwAleRGvMEBPSVH7Y.crl (hash: TsuJ3Bo3uAn8dU5GyAJnm/jpL2fyQBaad2yHTc/dfqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1b:ec:78:4a:e8:3c:0c:e3:8c:12:48:88:c9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf34b190a51ce5300257911af30404f4951fb6
Validity
Not Before: Nov 11 07:01:22 2025 GMT
Not After : Nov 12 07:01:22 2025 GMT
Subject: CN=e6cb9dac2386b6da9775541c18e7a19c050b34e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:91:7b:a0:c6:13:67:31:d2:ae:3d:f4:2b:
94:24:f9:af:dc:a5:6a:b6:15:7d:4f:9d:2d:3c:5e:
12:3e:89:2c:45:75:6e:9f:e9:9a:2f:fd:66:0c:7d:
27:85:63:49:7d:b0:34:54:e5:4c:fe:03:cb:ad:a9:
ae:83:d6:1c:93:3b:bb:23:d3:6e:b4:1b:98:57:21:
5c:60:f1:7b:26:72:45:d9:28:4f:6d:28:94:4d:a5:
03:c4:bf:91:7e:00:a5:00:d1:a4:1c:ed:40:26:18:
b2:fa:b7:b9:4a:60:9f:71:01:6e:d1:f2:6c:bb:6c:
2d:44:68:b6:a0:fc:4a:4a:99:d3:27:57:75:91:26:
f0:37:79:dc:34:f3:a9:06:fe:36:51:64:4a:4a:06:
2b:ce:94:7e:97:cd:3c:38:7e:01:11:97:2e:0f:54:
5f:f7:a1:cd:74:54:99:4e:09:25:b1:b1:43:b2:30:
ac:90:6b:fe:ad:85:34:45:3d:94:a4:e0:af:89:87:
bf:b9:6f:4e:84:8f:8c:60:3a:89:de:27:77:e4:ac:
49:fc:22:9b:fd:69:37:8c:26:9e:e9:58:35:ef:85:
ff:16:b1:96:77:14:eb:3e:37:b8:e3:1d:35:c3:56:
9d:b4:71:29:06:59:d5:cf:e5:04:7a:c3:61:f6:ea:
9c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CB:9D:AC:23:86:B6:DA:97:75:54:1C:18:E7:A1:9C:05:0B:34:E8
X509v3 Authority Key Identifier:
keyid:C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:84:42:21:93:a1:33:31:13:51:54:07:b1:07:31:53:bb:19:
ea:2e:d8:05:36:9b:a5:e7:27:1d:25:f4:79:19:7c:e0:07:a6:
3e:4b:a3:05:8e:cf:65:ee:49:ad:13:7c:d2:8c:1a:d3:bf:35:
f6:07:d8:f9:4f:72:28:a2:73:1d:f8:10:e1:d3:d9:6c:cb:af:
c7:51:7b:0d:0b:60:bd:df:aa:28:aa:93:c0:0b:3b:e3:60:50:
5e:03:77:82:2e:aa:3d:bc:10:3c:fb:9a:c5:09:ab:8b:0e:c1:
55:7d:2c:f6:ba:c6:14:a3:6e:df:4f:3b:fe:b8:66:c7:d5:51:
f3:c7:c8:3f:ef:e5:ac:f6:cd:6b:8f:e0:89:1b:59:b6:d2:c7:
42:d9:65:7d:ad:3a:6b:8c:e8:52:67:84:ec:ef:50:00:45:f8:
d4:a6:48:51:35:48:04:d5:d1:e8:d5:65:bf:01:30:81:aa:ba:
0c:e4:1f:a1:f8:3c:3d:25:11:92:15:31:a6:82:7d:c0:36:07:
f7:a4:db:64:65:3b:fe:a7:cb:7a:40:65:42:16:6d:8b:a2:83:
5c:e7:41:aa:21:26:e8:01:99:e0:77:75:56:d9:2f:2b:dd:b2:
0f:fc:af:36:7a:2f:11:9f:bc:64:a9:4e:3e:a9:9c:fb:c2:87:
ec:5f:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:47 2025 by rpki-client