Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
File: wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft (raw, json)
Hash identifier: OPosoj3t05vPuitugG6MkXpiviuXX1mRBRnh0xm1OOk=
Subject key identifier: 3C:27:FF:B4:4F:A6:2F:23:04:3B:94:D6:E4:05:43:AD:34:07:AC:F3
Authority key identifier: C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
Certificate issuer: /CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Certificate serial: 019A71B8E325BE127E4A13623610676DF30D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
Manifest number: 08B8
Signing time: Tue 11 Nov 2025 07:02:13 +0000
Manifest this update: Tue 11 Nov 2025 07:02:13 +0000
Manifest next update: Wed 12 Nov 2025 07:02:13 +0000
Files and hashes: 1: 1cyPcd2Vnsepj_sQsmBQuIKwJG4.roa (hash: T6hhaFtSwM402ZP8Qb9OKu3BkFQRH+gZ6KFIIvNDI0M=)
2: wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl (hash: lbJKx1kx4yZQWNrJgU6Sgpn1RPaUKxzAAKF555/kHuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e3:25:be:12:7e:4a:13:62:36:10:67:6d:f3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Validity
Not Before: Nov 11 07:02:13 2025 GMT
Not After : Nov 12 07:02:13 2025 GMT
Subject: CN=3c27ffb44fa62f23043b94d6e40543ad3407acf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:d0:e5:96:63:e4:2e:49:85:cc:00:69:31:
f7:6e:9c:bf:d6:ed:cd:a9:5c:d2:12:f2:5a:8e:11:
20:2c:e1:9e:8d:59:f1:14:63:2e:e0:2d:f9:2f:52:
ec:d3:12:ec:fd:db:22:8d:57:a2:a8:a7:ea:0f:ba:
0a:b4:2c:b1:ab:af:4c:5d:82:1e:12:c7:9a:08:ae:
a1:f0:43:e9:b6:83:3b:af:ec:7c:e3:30:2c:14:26:
de:b9:02:63:b6:76:ec:56:68:d7:bb:2c:97:fb:dd:
03:65:b3:21:e8:55:fb:12:6c:8c:c1:2a:c1:6b:e7:
ea:be:41:00:aa:76:f9:70:57:b5:ec:85:60:e2:cb:
0c:b6:22:ac:30:7d:16:13:c1:d6:8c:44:c2:5a:c8:
89:4b:e5:f5:67:aa:11:bb:b6:c7:e4:38:c1:ed:2e:
85:20:5a:e0:ef:8d:af:bd:e0:c3:2f:13:4b:04:05:
0d:78:c4:dd:18:98:3d:ed:68:34:80:6c:6a:be:4c:
b1:09:e7:0e:0f:30:45:f1:f0:50:a8:df:e9:8d:7a:
4a:8a:4c:5a:6f:cb:60:bd:5f:9d:fd:d4:74:ae:6d:
92:7d:58:07:52:0d:c6:5d:26:b3:7a:63:fb:4b:a6:
9f:74:49:ff:c0:7d:48:25:f2:ed:46:10:a9:ec:50:
43:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:27:FF:B4:4F:A6:2F:23:04:3B:94:D6:E4:05:43:AD:34:07:AC:F3
X509v3 Authority Key Identifier:
keyid:C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ce:05:35:db:f9:8f:ea:dc:9e:e1:e5:8b:41:77:a1:80:f2:
36:dd:ab:54:ab:e7:f6:59:4c:49:8d:a5:ad:e3:fa:17:f6:fb:
4f:3e:e8:c7:e4:31:4d:82:3b:c9:1c:3a:4f:b5:07:ac:cc:21:
b5:81:d8:a7:4e:94:7a:c2:ac:e3:4e:03:0e:62:9f:80:74:9b:
a7:95:be:6f:82:f1:e1:e3:4d:ba:4d:2b:20:ea:de:8f:38:e6:
3d:71:10:f1:77:4e:9b:81:a8:a6:e7:6c:ee:53:5a:9c:59:de:
0e:f2:50:a2:96:c2:87:ac:de:9f:3f:f2:cf:e3:c3:be:a6:1b:
f3:af:29:c4:00:f2:d3:fa:d6:05:53:dc:d3:98:c2:2b:e2:43:
00:b9:71:31:e7:3e:87:89:a5:08:12:47:7a:4f:5f:7f:c4:d6:
b5:d9:60:f7:c9:a9:07:5f:a9:06:58:6d:b1:0d:86:05:2f:16:
f6:64:9d:54:6a:4a:de:00:e0:ed:4f:20:c5:c3:25:59:00:9c:
1f:c7:61:cd:4b:86:d8:4a:0d:d0:c8:2e:21:13:d0:f6:a7:3e:
59:2f:fd:a8:2d:18:c3:03:f4:1a:c6:39:e1:0d:bc:fa:12:b9:
ea:e4:a0:f5:59:b7:e7:17:89:50:c0:8b:7b:12:72:4b:86:2d:
98:f1:a0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:00 2025 by rpki-client