Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
File: wMfxuj-ucTZOkysFYNYCxXJd2o4.mft (raw, json)
Hash identifier: 5t+1RdzsmGpSl7wafnSfKuoK1lMLtTR5A/OJJHG5t1U=
Subject key identifier: 12:DE:FF:09:4D:47:E7:50:EA:C9:7A:48:DD:E3:3F:74:6F:18:76:13
Authority key identifier: C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
Certificate issuer: /CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Certificate serial: 019A72CA5672BCB3F9400F97E49D3E17FE16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
Manifest number: 0B98
Signing time: Tue 11 Nov 2025 12:00:54 +0000
Manifest this update: Tue 11 Nov 2025 12:00:54 +0000
Manifest next update: Wed 12 Nov 2025 12:00:54 +0000
Files and hashes: 1: Ts1wD-6dXK6YF6lbWc4Bp6qGGOU.roa (hash: l6AYzjv5b4VOeQIHxSNacHxCFNVxW6gn4dbeXJ7uQKA=)
2: wMfxuj-ucTZOkysFYNYCxXJd2o4.crl (hash: 6TtgVk9uwKzHMlVQ//d0a5D4W0s+1iriV0zCehXqZD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:56:72:bc:b3:f9:40:0f:97:e4:9d:3e:17:fe:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Validity
Not Before: Nov 11 12:00:54 2025 GMT
Not After : Nov 12 12:00:54 2025 GMT
Subject: CN=12deff094d47e750eac97a48dde33f746f187613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:9a:1f:29:d2:93:82:66:05:2a:9e:a0:dd:
80:22:95:bf:97:5e:50:24:c5:89:de:38:df:54:f6:
8a:9e:c8:a5:8e:41:15:d2:bd:4f:16:e9:db:d4:db:
04:4f:74:e4:c0:f2:5a:bd:98:03:5a:58:c2:ac:40:
d9:95:1e:6b:01:aa:3f:44:88:2b:99:7e:25:cd:3f:
c7:19:46:8e:86:0c:e8:91:b1:6b:be:82:c3:d3:32:
70:39:9a:60:6f:65:52:47:74:0c:52:cb:cf:bc:99:
5e:1b:d8:90:81:39:6d:4a:21:1c:2e:40:d4:c6:04:
43:6f:2a:05:94:5a:16:7c:db:4f:32:6c:e6:d2:29:
76:d3:35:31:f1:49:f2:fe:69:96:f9:94:76:36:f5:
b4:54:19:b8:9a:19:5e:71:fe:30:d9:65:39:ea:09:
94:2b:48:39:27:71:82:0b:f8:b1:11:10:85:29:35:
f4:58:18:07:83:63:02:b5:d2:a9:0d:3e:af:eb:33:
08:76:16:6c:bd:52:09:0e:67:3a:90:3e:b9:61:25:
40:f4:43:8a:fb:fe:43:b2:5b:71:82:90:97:7c:c7:
2f:32:8f:2e:c4:ce:95:35:c6:ef:37:f8:68:0d:74:
9d:ce:a6:65:cd:00:c1:d3:6e:00:38:24:8b:79:86:
05:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DE:FF:09:4D:47:E7:50:EA:C9:7A:48:DD:E3:3F:74:6F:18:76:13
X509v3 Authority Key Identifier:
keyid:C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:85:c1:ca:b7:72:a1:fc:f5:df:33:db:c7:4d:65:e5:14:ab:
c1:55:f8:c2:42:7a:f8:12:d1:fe:4a:50:4f:bf:8b:c6:6a:9d:
60:15:d3:67:69:1f:8f:1e:8c:53:94:ac:1a:e4:2a:f7:25:5d:
cd:c7:a4:27:ec:bb:75:fa:c9:7b:e1:15:eb:8e:39:64:0a:08:
03:c8:19:51:04:f4:9b:89:c7:56:f6:b1:5b:84:aa:24:49:7b:
04:26:11:9e:fc:82:6b:1e:2c:43:7e:54:fa:e9:e1:52:b3:5d:
6c:d4:e1:6b:f3:34:30:12:23:14:9a:68:dd:2d:c6:48:64:f5:
46:c9:34:a8:e2:e5:7c:41:96:b8:91:f8:6d:3e:17:1b:6f:58:
b5:a4:b1:6a:e5:b2:02:fa:c9:73:a6:c9:63:a6:56:5f:58:c4:
b2:87:74:ef:4f:76:22:79:64:f2:d6:c7:60:d2:65:71:31:96:
89:c1:29:06:82:a4:f7:06:f9:e6:23:99:0d:cc:cd:63:4f:58:
19:d6:4a:42:11:db:57:a1:a2:96:66:cf:e1:bc:34:d3:72:d4:
20:11:3d:2d:14:e2:6d:eb:14:11:a7:d1:89:17:d7:07:1a:07:
3f:f6:3e:55:ff:75:00:1d:dc:ae:fd:a1:97:79:cc:b6:5b:12:
97:65:27:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:49 2025 by rpki-client