Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft
File: wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft (raw, json)
Hash identifier: 5863XOKwSirTr9AC4fwLG/2OPEkR9sWjJGoaMv8tA9Y=
Subject key identifier: D9:AA:E3:07:20:84:DC:4F:35:39:D7:0B:08:40:64:20:BF:64:DA:9B
Authority key identifier: C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
Certificate issuer: /CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
Certificate serial: 019A2AB0AA76CAD87F118B5464003E98E3CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft
Manifest number: 1709
Signing time: Tue 28 Oct 2025 12:00:12 +0000
Manifest this update: Tue 28 Oct 2025 12:00:12 +0000
Manifest next update: Wed 29 Oct 2025 12:00:12 +0000
Files and hashes: 1: Jgr7sI_MQ1aofzWtw-nihD3i2Oo.roa (hash: gaxxG0d8OZJYS5NjwczzEeAHbzOn6c5dbyMUhDM1ej8=)
2: wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl (hash: GQmF4McjZJOWixfGOBoWcknPpKrEqi66CSJ38ySA9lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b0:aa:76:ca:d8:7f:11:8b:54:64:00:3e:98:e3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
Validity
Not Before: Oct 28 12:00:12 2025 GMT
Not After : Oct 29 12:00:12 2025 GMT
Subject: CN=d9aae3072084dc4f3539d70b08406420bf64da9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:74:c1:ee:bc:7b:19:66:1c:63:74:14:4c:61:
8d:0c:37:ce:5e:40:16:0c:a5:35:52:b2:34:50:ae:
7d:00:f9:52:82:8f:3b:75:4a:c0:be:32:48:75:f2:
a9:3d:7e:90:b4:95:53:7a:bf:ec:5a:36:89:01:68:
51:ca:33:ca:49:9c:1d:79:3b:02:7b:e0:fc:06:87:
46:13:a3:48:a1:e3:a4:bd:0c:27:53:9c:90:2a:e9:
cf:ba:54:e2:90:2a:a4:9f:9f:8c:33:3f:23:03:59:
d4:78:fc:72:f9:fe:86:66:04:de:5f:ce:ed:29:02:
73:7d:f5:e0:eb:bf:72:a1:54:49:16:1f:34:31:8e:
ee:bd:65:8d:70:7b:65:cc:6e:3a:fc:7e:20:b9:b3:
d2:f7:00:bb:e5:3d:37:a6:01:fe:6c:92:0c:6f:74:
36:e6:67:13:64:dc:66:64:21:63:e7:dd:83:fa:22:
de:07:ea:33:a5:7b:d7:41:bb:af:a2:c6:77:11:83:
49:43:5d:b9:0a:46:30:71:ce:35:4d:bc:eb:59:41:
98:33:17:2b:d3:32:8d:77:d7:ae:6a:ae:60:de:bc:
6c:46:fd:7c:90:25:b8:95:08:c7:0a:4a:c4:0f:c2:
ff:57:29:9f:d0:d2:f9:eb:6a:e5:f7:de:93:f6:d9:
0a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AA:E3:07:20:84:DC:4F:35:39:D7:0B:08:40:64:20:BF:64:DA:9B
X509v3 Authority Key Identifier:
keyid:C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:11:80:41:a1:17:9c:29:63:ad:36:48:ba:31:b6:c7:be:21:
08:58:ea:34:59:e9:93:53:6d:3f:1f:df:59:75:cc:9e:3e:d8:
2b:03:2c:80:ab:26:0d:f9:e8:91:3d:5b:b2:fd:55:0a:3d:25:
7c:b2:95:03:fa:3a:c3:94:71:fc:c4:b0:81:06:2b:b5:d5:b6:
30:de:87:02:6e:19:e7:5d:71:36:89:74:fb:e5:e9:54:0e:40:
a4:c1:c7:1c:b7:54:bd:0d:ae:bf:91:7a:53:49:1a:6b:f3:92:
50:a9:ed:c8:f1:11:35:a8:9e:ea:94:30:96:85:f2:3a:91:67:
ff:21:34:03:25:3c:d6:a3:d1:ae:df:9b:5b:8b:a9:d2:17:fa:
db:68:81:9c:52:dc:2b:83:2e:a6:fc:2a:3e:b9:23:c5:81:c7:
3b:0d:e0:fd:e8:b3:ba:61:f9:5d:21:75:2e:ad:4d:57:00:06:
a7:41:c9:94:a7:ce:53:e1:9d:2a:2a:30:47:a8:8f:bf:db:e6:
24:c0:37:0c:fe:62:99:ab:c6:31:19:a6:6a:b1:30:b4:65:82:
1b:75:b9:53:e9:43:19:47:d3:c8:af:ee:87:34:41:45:29:9f:
d3:ee:c6:5a:08:aa:5c:54:ce:b7:14:41:82:41:68:75:da:14:
e7:77:79:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:18:31 2025 by rpki-client