Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
File: wneN4qm-mAISA4LnUNFZ6Vhywq4.mft (raw, json)
Hash identifier: H2V0OlCjH6lVPdcxbANy/HsioJGxNfqOvoA64u89x18=
Subject key identifier: FB:84:5B:57:E7:90:E3:7E:AD:76:F0:E1:CC:47:5D:B2:1A:52:AC:D8
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 019A5DFA1BAAADFB1044D10E480E5CB81A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
Manifest number: 1845
Signing time: Fri 07 Nov 2025 11:01:03 +0000
Manifest this update: Fri 07 Nov 2025 11:01:03 +0000
Manifest next update: Sat 08 Nov 2025 11:01:03 +0000
Files and hashes: 1: n40E_mpSUbDrPRin7wGLybLjxqo.roa (hash: n8pRkvwikyBf8VB7ZruFdea9HTihfe0isjxqpvjQRDY=)
2: wneN4qm-mAISA4LnUNFZ6Vhywq4.crl (hash: 4gh7QB9uBK5nC/Lsz1TvLF1pg9jcfaFPN6IJwKGsMCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:fa:1b:aa:ad:fb:10:44:d1:0e:48:0e:5c:b8:1a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Nov 7 11:01:03 2025 GMT
Not After : Nov 8 11:01:03 2025 GMT
Subject: CN=fb845b57e790e37ead76f0e1cc475db21a52acd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:32:7a:b8:6e:4e:af:e0:f0:5d:ac:22:8d:1a:
fd:2c:19:52:a7:94:de:2b:49:8e:c0:02:35:1a:4d:
ae:a4:8e:30:8c:cb:e4:9f:1e:d1:fa:f9:41:1e:61:
62:2f:f6:3e:6d:3c:e7:38:4d:61:48:eb:75:c9:ad:
1d:6b:51:d0:eb:cd:85:56:98:37:06:c4:c4:00:39:
e4:7b:3c:9d:d4:06:ea:01:54:e1:ca:9f:2a:d0:05:
61:ea:1a:37:65:2b:e1:e9:5c:57:c7:10:c6:7e:24:
49:55:f9:e4:14:ce:e6:c2:e6:f6:c5:5b:3e:90:0d:
8a:a6:e6:17:8f:96:97:0d:13:de:08:fb:22:e9:38:
8d:ac:9b:66:af:8c:04:dc:42:25:72:d7:0f:64:54:
85:e9:8b:f2:45:5c:6d:6f:24:6f:82:a0:87:70:bc:
29:54:98:69:e8:09:6f:2f:87:c3:d3:43:73:fb:d5:
49:00:08:f6:04:48:46:3e:90:de:db:34:38:7f:c6:
6f:29:fd:9c:8a:af:16:ba:bd:55:1b:85:45:7c:b9:
2c:bc:ad:8c:fc:1b:46:f5:14:64:71:f7:d4:92:f5:
50:7f:24:25:ef:89:af:49:cb:eb:15:81:ee:6a:9b:
b0:38:5d:d8:bf:f9:a2:75:c5:0f:a8:d3:fe:73:d8:
c1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:84:5B:57:E7:90:E3:7E:AD:76:F0:E1:CC:47:5D:B2:1A:52:AC:D8
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:76:33:2c:81:44:d6:95:f5:35:f1:71:3e:1d:9c:3a:12:43:
92:a6:da:60:13:12:7b:76:98:4c:a0:df:d1:b6:fe:fe:dd:53:
03:1f:52:92:4e:7a:6e:12:3d:4b:f9:7a:8d:0d:0e:52:b9:75:
9a:1c:69:3f:2c:6f:8e:a6:87:15:ba:80:70:f7:cb:ae:f8:51:
5e:a6:e8:9d:78:68:2c:df:f7:02:b5:4b:52:f9:d4:a1:0d:67:
14:80:93:15:67:db:bd:cf:4e:d6:84:61:86:fb:84:3f:a3:82:
4d:e5:20:77:41:4c:f0:79:0f:c1:1c:81:34:56:41:da:f3:01:
91:a0:96:f4:0d:0c:71:cb:e3:ef:52:8b:f6:a7:f7:ff:ef:7e:
17:0e:23:08:fb:50:a1:9a:45:01:1f:1d:a2:74:50:db:34:c5:
c7:e1:c1:be:90:35:ba:dd:ae:35:4e:20:d6:e0:83:bd:6b:bd:
7f:03:af:1e:73:6c:c7:b5:79:f2:58:a7:ec:9d:70:4e:ee:15:
08:9d:3f:f0:c2:4e:4b:55:19:d5:d4:1d:9f:b5:38:d6:5e:e5:
86:95:d2:7b:7e:8b:ee:fd:65:6b:ff:81:cf:c0:b4:3d:98:eb:
25:1d:e4:19:e1:99:31:51:d7:51:13:29:cb:5a:f2:47:2a:3a:
0a:8b:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 12:43:11 2025 by rpki-client