Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
File: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft (raw, json)
Hash identifier: 2FWQXyiBalTT+WEtEL9vaF+BF69hF0CyO7fX0dFEar8=
Subject key identifier: A4:2D:D4:96:32:01:51:D0:A0:E6:47:98:C4:AC:14:05:8C:B4:80:07
Authority key identifier: C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
Certificate issuer: /CN=c30aef396394ea5950dc7956ab1bf491364622a4
Certificate serial: 019A71EE8A700F62F6196625E57506823D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
Manifest number: 1679
Signing time: Tue 11 Nov 2025 08:00:49 +0000
Manifest this update: Tue 11 Nov 2025 08:00:49 +0000
Manifest next update: Wed 12 Nov 2025 08:00:49 +0000
Files and hashes: 1: rZbNK2xJ4XhKao8afy4CimeXVSk.roa (hash: DH234KafhTlCh4Rrjfu8Y3PnZSWa2Wt2QfsLpMy42vQ=)
2: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl (hash: cf44YnwDmEtkfchs1XqxkKC5Lb3nTEi0ISUcG68cAc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8a:70:0f:62:f6:19:66:25:e5:75:06:82:3d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30aef396394ea5950dc7956ab1bf491364622a4
Validity
Not Before: Nov 11 08:00:49 2025 GMT
Not After : Nov 12 08:00:49 2025 GMT
Subject: CN=a42dd496320151d0a0e64798c4ac14058cb48007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:d3:da:c6:de:8d:33:86:39:3c:ec:5d:2c:
6d:34:fc:3e:c7:b2:15:0a:03:ed:2f:d6:44:9f:d7:
73:57:94:8f:41:c8:30:6d:35:5f:ae:29:b3:2c:cb:
03:4a:c2:3c:45:e5:bb:09:a3:0a:ef:7f:7d:d0:3b:
24:24:30:91:6b:32:57:5f:d6:64:73:83:59:60:bc:
6c:ee:49:56:16:ab:eb:7b:1c:2b:67:09:7a:9a:95:
6b:20:6d:6d:06:d7:f1:e9:3e:48:47:76:4d:12:f7:
50:c6:8a:3a:91:a5:e3:69:fe:e3:aa:bd:f1:06:62:
23:74:71:89:44:79:2d:5c:d3:ee:32:46:23:65:cc:
c4:8b:b2:37:fd:b5:e5:bd:d5:fa:5b:28:09:f2:54:
02:e6:84:b4:1a:6f:dc:11:e3:e6:fc:d4:18:b2:ee:
ec:8a:42:fb:f7:d0:eb:05:93:f9:21:d3:b7:53:63:
f3:bf:98:78:3e:c2:45:21:16:43:7d:e6:a2:fc:46:
14:7c:c2:ec:bd:2c:05:02:e1:c1:9c:1f:f1:32:28:
1b:e3:d3:84:b5:57:ac:f9:7d:2b:47:2d:95:46:41:
f9:21:6a:c6:af:9d:b8:1a:27:93:92:40:0b:79:5d:
51:bc:fe:5c:3c:9c:8c:4b:52:24:0e:23:1a:0b:5e:
3c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2D:D4:96:32:01:51:D0:A0:E6:47:98:C4:AC:14:05:8C:B4:80:07
X509v3 Authority Key Identifier:
keyid:C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4a:04:b5:bf:e8:b9:14:9f:42:69:95:88:2a:64:20:ee:8c:
24:cd:69:9e:4f:76:f8:65:88:59:c7:ff:82:98:0b:0d:23:00:
00:61:25:5f:48:37:08:82:d8:62:60:c6:7c:b2:b1:65:90:9b:
3d:3d:4f:e1:fa:71:cf:5d:f7:8a:e6:6a:f9:0c:cb:da:2c:56:
42:0c:b3:8a:21:e1:1f:28:98:80:6a:54:24:30:d8:2d:c8:e4:
e0:04:bc:b8:6f:98:bd:ee:b4:a4:ac:20:78:4b:5d:4f:77:cc:
c9:64:df:dc:5b:0d:e0:08:72:d3:24:32:80:17:8f:ee:d0:eb:
ab:36:46:07:09:f8:0c:d1:0f:d8:a5:eb:67:a1:ad:06:25:48:
e3:e7:59:7d:3f:64:f2:45:2e:67:43:fa:90:b7:d5:d1:40:6b:
e7:de:d1:d6:97:ff:04:58:15:07:9b:ad:a5:04:92:83:38:4d:
8c:a1:dd:01:9b:cf:83:17:ec:1c:b1:2a:e2:cc:ed:f6:79:f2:
ac:80:d8:20:fe:12:05:4c:d0:a5:dd:b2:70:0f:96:9f:04:3c:
bd:c9:49:0b:c3:bd:de:d0:61:60:ce:7f:c6:97:40:af:b5:4d:
94:d9:6a:ff:49:43:fb:f6:e3:c3:f0:62:ae:c5:e6:4d:0a:ee:
6e:02:36:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:03 2025 by rpki-client