Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: 4TLLDZJmrq1ZJo41W76+1wAxfBG/WC83J7s3xcJ5rU8=
Subject key identifier: 4B:FC:91:7A:61:D8:AC:F5:2A:1E:78:80:7E:03:57:D8:36:86:D8:34
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 019A01EBD2BA3DFDD369C16477731B74979F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 075C
Signing time: Mon 20 Oct 2025 14:00:23 +0000
Manifest this update: Mon 20 Oct 2025 14:00:23 +0000
Manifest next update: Tue 21 Oct 2025 14:00:23 +0000
Files and hashes: 1: 6zfU2J2wR6MMPAQDPcdRmDUSTTk.roa (hash: qvQ90YxdjeGEsA7jHHHCLNHaXx9teWbipOiBvb0hjRc=)
2: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: ESOTd6cSeY3UYksFLayXSKMfly0hDYXvzTBAD6dDiYg=)
3: x0gusjZxaAiftvAcjczux1Ius_E.roa (hash: HFa+GGzqn2pKQb0OIJEk/YaY1MmpeAOG1mYH0pjtvqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:eb:d2:ba:3d:fd:d3:69:c1:64:77:73:1b:74:97:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Oct 20 14:00:23 2025 GMT
Not After : Oct 21 14:00:23 2025 GMT
Subject: CN=4bfc917a61d8acf52a1e78807e0357d83686d834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:e6:f2:23:3d:ad:a3:0f:11:eb:b8:f3:23:
48:73:b4:5d:3b:41:96:b1:d4:4f:4f:45:8b:63:70:
ac:58:db:62:13:5a:1d:af:18:10:f2:40:70:20:3f:
7f:56:af:cc:72:36:43:34:24:85:d5:63:37:5a:3b:
7a:dc:b5:7d:a5:56:51:3e:50:70:2c:a8:14:5d:e5:
47:a1:91:a8:d2:51:fb:7b:82:b3:66:78:c2:51:dc:
c9:18:b0:80:83:6d:bf:ac:1b:57:22:db:b6:db:d7:
62:4a:6e:ee:01:84:68:0f:ea:e3:d2:5b:66:14:f2:
e8:80:22:3b:0c:87:88:2d:ac:5a:72:7e:3f:7d:f1:
d3:f8:33:71:0e:10:8a:8c:51:74:41:b8:c1:29:aa:
81:c0:9a:27:45:52:c8:39:40:3b:e3:92:bc:e0:2a:
2a:41:be:eb:02:85:b5:8d:f1:bf:39:4a:5e:96:a9:
3a:ce:e6:a9:01:55:16:cd:64:ba:46:62:c8:ec:5e:
1c:9d:9c:9a:9c:6d:6e:ae:38:4b:7e:f3:84:c4:f9:
68:19:13:09:5f:19:d4:89:d6:84:4b:19:78:31:4a:
19:3f:77:0d:58:70:cd:27:7c:cd:22:21:34:9d:6a:
61:b9:3c:2a:70:aa:42:b6:6a:97:1c:db:3e:39:e0:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FC:91:7A:61:D8:AC:F5:2A:1E:78:80:7E:03:57:D8:36:86:D8:34
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5a:9b:42:69:8b:5c:9c:84:92:3d:8e:c8:61:10:98:db:5a:
44:1d:62:cb:08:47:80:43:39:88:6e:10:2d:7a:02:ea:05:88:
07:5b:4a:ce:23:e0:d0:02:9a:29:ed:0f:62:d0:09:56:9d:10:
cb:1c:f1:f7:a5:0d:bb:79:49:96:fc:e0:24:67:1a:32:25:f6:
59:5e:80:53:d9:5a:f6:87:9e:33:9b:66:01:76:af:35:bd:73:
2f:19:9d:48:3d:02:72:e6:d8:69:1c:6b:5c:41:dd:84:34:64:
85:1c:01:9a:94:f8:70:db:49:8f:c5:a2:91:50:61:a9:5c:3f:
75:91:4a:9b:fb:1d:82:81:7d:b8:e4:aa:02:6b:b4:49:81:94:
37:2c:a4:ae:bd:8d:40:e3:43:5f:1b:59:d9:3b:f7:5a:9c:e3:
2c:ac:d4:53:ca:91:3e:ef:23:13:42:6a:a9:2d:48:6b:00:37:
01:19:60:30:87:bc:05:86:05:62:08:81:02:d9:08:ba:92:4d:
ca:42:dd:a0:9f:63:fd:03:ec:cb:d6:28:be:3a:da:9d:a1:12:
0a:12:af:ad:6c:95:33:3c:9b:6f:a3:4a:64:2e:e7:f7:f8:8e:
81:e3:24:e2:36:91:8f:9d:29:0e:2f:2b:bd:3d:e7:b8:9c:5c:
ec:fd:eb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:36:26 2025 by rpki-client