Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
File: wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft (raw, json)
Hash identifier: P5g+N0uQsrAJIwN/+aIJlimrEENdZRSNu3QDejUjli8=
Subject key identifier: 55:B5:A2:7B:2F:16:C8:39:C1:EC:DF:C5:0A:98:10:3E:63:D3:81:74
Authority key identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08
Certificate issuer: /CN=c14d63d39707d45a8c683cb52e47171d136ce508
Certificate serial: 019A25C16610BA314211D219CCB373BB3ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
Manifest number: 0FCA
Signing time: Mon 27 Oct 2025 13:00:22 +0000
Manifest this update: Mon 27 Oct 2025 13:00:22 +0000
Manifest next update: Tue 28 Oct 2025 13:00:22 +0000
Files and hashes: 1: VWUmt1-Lc9mwWkzpXFUMDbb2UqE.roa (hash: Tjmb/lxEFBxZz68PrILtJGnl1lSlmzqzB3RT5UoyTR8=)
2: wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl (hash: EPRLjHxeyzkADRGs+FwjHlVE/fJTkgGoD7oFe54C3LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:66:10:ba:31:42:11:d2:19:cc:b3:73:bb:3a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14d63d39707d45a8c683cb52e47171d136ce508
Validity
Not Before: Oct 27 13:00:22 2025 GMT
Not After : Oct 28 13:00:22 2025 GMT
Subject: CN=55b5a27b2f16c839c1ecdfc50a98103e63d38174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:69:9e:65:af:b4:71:1f:5b:b6:d5:65:75:
13:af:8a:70:5d:a4:df:11:91:a1:41:7a:9e:17:b8:
cf:22:6e:92:69:b8:b1:3c:35:89:7c:a9:58:ec:68:
e5:a2:d3:78:42:ce:0c:ea:f7:fc:cd:eb:98:e0:87:
34:bb:28:fc:76:2b:7b:94:93:eb:f3:ab:9f:4a:9b:
82:83:14:eb:ba:75:d6:5b:7e:e6:bf:36:14:04:6e:
00:c2:77:d0:01:b3:ad:5c:fc:5d:50:4b:5e:79:a2:
35:13:94:5c:27:c0:0c:b1:12:5e:d0:a5:14:d1:f3:
01:d3:32:50:2e:9f:57:5e:df:76:5d:a3:70:3d:9b:
7f:ef:52:d9:e9:eb:4e:ce:af:07:03:b2:b5:84:64:
54:14:41:e2:1a:e7:ce:55:08:6c:82:c3:d5:be:fc:
b1:3a:9c:51:17:aa:05:7b:6b:3f:4d:c5:f9:e7:9f:
87:62:25:ce:50:71:52:9d:2e:4b:28:6d:20:5b:6b:
a8:8a:67:52:c2:4f:be:ad:6d:fa:9f:5b:c1:21:c3:
62:c5:9d:56:8a:29:74:7d:c2:0d:df:d4:1f:a4:a6:
74:a1:25:a8:ef:f8:bd:0e:04:36:0f:85:e2:6f:f3:
84:8d:17:11:cd:b2:9b:24:7d:c0:08:ca:f4:cc:3f:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B5:A2:7B:2F:16:C8:39:C1:EC:DF:C5:0A:98:10:3E:63:D3:81:74
X509v3 Authority Key Identifier:
keyid:C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:45:1c:af:93:20:b9:16:c2:b7:0f:59:9a:75:43:67:74:76:
1f:fa:4d:8e:a9:3e:93:f8:52:1d:1e:73:0a:ba:47:40:79:76:
34:be:02:07:af:c5:e9:93:66:f4:97:c6:10:fc:4f:e3:6a:6e:
64:8a:1b:94:9d:fa:85:d3:d7:08:f0:8b:15:8f:36:7c:2f:08:
44:37:cb:ef:13:8e:dc:59:85:50:61:09:06:02:a6:fd:4c:74:
54:27:49:cd:36:03:4a:7c:36:7c:5f:bf:88:f3:ff:96:46:2a:
ab:f6:cc:eb:f7:db:7d:0d:82:59:ee:7c:85:55:5e:eb:f5:ae:
23:3e:6d:5b:06:20:8e:dc:da:f9:08:e7:5d:e7:a4:02:88:c8:
3b:d1:0b:cf:27:38:79:53:74:fc:29:06:83:35:92:3f:d1:50:
64:5d:03:c2:9f:8d:b7:8f:eb:40:36:27:06:dd:87:5a:de:d0:
f2:c4:b7:83:b4:70:42:e9:b9:a9:e0:3a:71:41:28:fd:e0:cb:
49:7b:1d:2e:4d:5b:20:90:28:51:e8:e4:e5:37:15:40:20:cf:
0a:68:57:d2:4b:19:27:85:0f:67:04:a7:0e:db:30:3b:22:17:
39:1d:38:8b:ec:60:6b:8c:3f:54:59:22:7c:8f:bc:a7:ae:98:
bc:05:7f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:06:25 2025 by rpki-client