Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
File: wvPozdMcgnmN3vk0AfKcfcqmr20.mft (raw, json)
Hash identifier: QvrxDMigvWj48aowhUw/CmqQOkQrdspNHGAM0wMzAkQ=
Subject key identifier: 00:DD:D0:CD:01:16:86:B7:CE:3A:8A:62:41:9F:74:50:C0:3E:AB:49
Authority key identifier: C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D
Certificate issuer: /CN=c2f3e8cdd31c82798ddef93401f29c7dcaa6af6d
Certificate serial: 019A70DC50D936E55B8129794D775D9D90BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
Manifest number: A8
Signing time: Tue 11 Nov 2025 03:01:18 +0000
Manifest this update: Tue 11 Nov 2025 03:01:18 +0000
Manifest next update: Wed 12 Nov 2025 03:01:18 +0000
Files and hashes: 1: wvPozdMcgnmN3vk0AfKcfcqmr20.crl (hash: qkHv6HuJG8g6yEKERlunsOQy5d8YZqcBa8a51zdFNc4=)
2: xIllA8mBfD0CE_Yok6WhXftpMvk.roa (hash: tUc/QZEe3fgD7JMv9CZx61iqBXYp1mekZgazOTqgam8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:50:d9:36:e5:5b:81:29:79:4d:77:5d:9d:90:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f3e8cdd31c82798ddef93401f29c7dcaa6af6d
Validity
Not Before: Nov 11 03:01:18 2025 GMT
Not After : Nov 12 03:01:18 2025 GMT
Subject: CN=00ddd0cd011686b7ce3a8a62419f7450c03eab49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:96:05:1d:60:ad:cb:e3:04:d9:62:c1:57:
9f:9a:0c:b8:d2:90:2f:bd:82:55:31:d9:bd:39:29:
08:3a:47:6f:df:3c:b9:0a:64:85:37:97:4f:91:92:
cb:b3:16:2e:1d:7a:20:b0:43:3f:c7:81:a3:49:62:
71:3f:12:4d:32:15:ea:e3:6a:da:29:94:85:2e:85:
e9:85:f1:11:88:2c:91:db:be:06:f2:61:25:85:63:
87:2c:b7:a9:af:e0:d8:a1:83:c9:8c:00:cf:ae:5b:
f4:c0:43:10:fe:bc:5e:a5:a0:0c:08:02:28:bf:50:
7f:f2:ce:86:98:80:7f:0a:24:b6:43:2a:3a:1d:74:
e1:4e:d5:81:88:ca:8c:0a:ef:d3:5d:de:f3:ce:bd:
95:7f:8d:1a:50:0e:15:7a:be:7e:09:54:5f:92:97:
80:c7:7e:c5:a2:82:cf:55:57:7c:5c:92:4e:e8:6b:
cc:9e:8f:99:a1:7f:98:71:f4:fd:a4:df:93:7f:94:
18:f4:c7:93:27:af:27:d2:89:22:a1:23:4c:11:3e:
c6:81:c3:51:c7:89:ff:ef:7b:55:79:14:77:4b:ca:
89:05:f5:a7:27:e7:a7:cd:9f:c3:a9:2e:4b:b3:36:
e4:20:5d:8e:3d:9b:64:b4:8a:ae:2f:11:0f:f9:d3:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DD:D0:CD:01:16:86:B7:CE:3A:8A:62:41:9F:74:50:C0:3E:AB:49
X509v3 Authority Key Identifier:
keyid:C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:18:82:58:e9:0f:1a:ea:59:1a:40:0c:87:12:e9:80:fc:c5:
b9:0e:6b:b5:66:48:6c:f7:8d:bf:5d:b0:65:2f:10:eb:6d:5f:
ff:7f:4d:22:22:60:e6:41:be:3d:33:93:5f:22:84:8d:23:21:
50:56:88:8b:15:89:63:63:63:7e:77:ca:92:4c:75:60:c0:04:
c1:6f:1b:f1:36:f6:fd:36:82:3e:39:41:23:6b:bb:ec:d9:00:
b0:59:2d:1f:75:5b:b0:1c:65:a0:c2:53:90:09:a7:75:7b:c4:
72:eb:ef:f2:9c:5a:d9:45:90:32:45:45:99:14:02:ed:bd:5a:
6c:3d:fd:17:6a:b9:ca:c2:38:45:00:36:95:fe:b8:f7:22:b0:
82:c2:a2:af:ab:74:90:72:16:60:3f:ba:8d:bf:b9:1a:1e:33:
cf:ac:b2:c7:69:29:8f:ab:33:ed:be:40:21:2c:e2:40:ed:c8:
ce:f4:11:5b:9a:86:c7:6d:43:85:e2:3f:12:4b:ad:c6:cb:f3:
e4:2f:0e:c6:2f:02:63:10:5a:56:d5:ac:26:66:23:d9:b3:f4:
a7:b1:cf:66:30:b6:67:d3:94:8a:ca:3d:e8:d4:f4:93:9d:57:
a2:be:cb:de:3a:b5:26:c7:53:fd:d2:78:09:65:ab:ea:ca:ab:
db:bc:50:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:44 2025 by rpki-client