Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
File: wDwpVm71n88akNgtCK4QxjD5S4g.mft (raw, json)
Hash identifier: Zi7zaqZb83xx/kv7XLVf8D0gRc9HInsvqpqaG7cdFiw=
Subject key identifier: 38:5C:FB:7D:B9:97:97:6B:3A:76:E3:5A:6D:0F:DF:A5:61:2C:4E:21
Authority key identifier: C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
Certificate issuer: /CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Certificate serial: 019A72CAA8D0F54759EC881042AA170663DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
Manifest number: 0D86
Signing time: Tue 11 Nov 2025 12:01:15 +0000
Manifest this update: Tue 11 Nov 2025 12:01:15 +0000
Manifest next update: Wed 12 Nov 2025 12:01:15 +0000
Files and hashes: 1: uzj0M_v78Wm5cOmGNR7lI0TOqoE.roa (hash: Cc5JUHGDDrTaWZVeYu5I0BROPsTv83fnO7z2DC5tGzs=)
2: wDwpVm71n88akNgtCK4QxjD5S4g.crl (hash: ycxr4dr3/5U6HK36vDNUR31KLi8RMw4B+PlT1WKIAl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:a8:d0:f5:47:59:ec:88:10:42:aa:17:06:63:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Validity
Not Before: Nov 11 12:01:15 2025 GMT
Not After : Nov 12 12:01:15 2025 GMT
Subject: CN=385cfb7db997976b3a76e35a6d0fdfa5612c4e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:a4:1a:7d:8e:74:a1:10:9b:c0:c7:82:e3:
30:08:1d:0d:ca:d4:a0:65:df:34:a2:84:01:f3:cd:
49:9a:6e:0e:91:a3:67:c9:7c:51:10:cd:57:54:a8:
81:cd:7b:ef:8b:9b:df:4a:43:c5:fd:55:c5:25:f3:
17:36:56:d8:be:66:65:50:26:d4:54:b2:b5:8f:da:
2b:73:22:05:95:db:dc:39:64:aa:59:89:54:90:a6:
8c:c0:e4:42:b2:29:21:ca:33:21:ae:a7:a4:1e:08:
85:a9:ea:d5:de:15:f2:de:3d:82:96:0d:73:8c:30:
7a:6c:fa:70:4e:4d:0b:eb:a7:5c:6e:f0:de:4f:69:
34:63:33:f1:78:27:fa:d5:54:fa:f8:a4:9e:e3:6e:
6a:fe:e8:bd:43:57:89:7e:42:bd:e7:79:95:1f:13:
7b:25:b1:99:b8:b6:7f:c4:6b:f8:40:f6:b4:e2:9c:
d5:75:4d:d5:cc:73:32:bc:18:bc:96:40:b8:f5:4e:
d9:86:e8:75:c2:1c:4a:96:04:cf:62:78:f9:b8:ed:
22:47:e1:ed:71:06:28:c8:45:e7:ba:bc:c6:0b:59:
81:ba:41:f2:fd:3e:77:d0:8e:9b:cd:9c:3b:17:80:
23:61:4f:72:da:ce:31:c0:6b:7a:17:48:a2:4e:77:
50:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5C:FB:7D:B9:97:97:6B:3A:76:E3:5A:6D:0F:DF:A5:61:2C:4E:21
X509v3 Authority Key Identifier:
keyid:C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:66:e2:ed:35:e6:47:31:73:5a:fd:cd:18:53:dc:a3:f0:c0:
69:16:cb:bc:a0:64:de:5d:5e:40:e8:0b:c8:fd:64:20:dc:7d:
c8:68:22:b5:c7:76:35:56:0a:bf:09:54:62:eb:5c:b2:e6:c4:
50:f1:19:8e:05:af:d5:e8:fe:08:74:59:74:db:1e:54:3d:3e:
8f:38:ae:f2:9c:09:28:e1:e0:93:2d:86:af:46:c1:e9:00:f6:
15:f6:c3:57:e5:7a:b8:c1:f4:14:90:dd:07:b1:18:75:f2:e1:
6e:27:f6:2e:6b:35:41:a5:5b:1c:00:0e:7d:02:be:a2:c0:d2:
14:94:02:84:fa:9d:97:b7:19:cf:6c:a5:81:b6:9b:83:bd:3c:
bf:ab:b5:aa:0a:85:82:64:3f:88:3c:49:aa:74:6c:f2:31:62:
92:ee:6e:0b:77:45:94:8d:0e:34:5c:30:d0:5b:7e:a9:2e:cf:
01:d2:e0:93:7b:70:cd:38:44:d8:24:c0:08:f5:2a:c9:db:fe:
60:56:90:98:07:9b:8d:72:72:82:5f:64:85:01:04:4b:90:f2:
75:19:65:71:6f:12:b5:8f:91:2e:cb:38:22:0a:43:97:37:81:
34:ea:03:20:cd:31:4f:3d:8e:2e:91:10:10:90:ac:aa:88:c5:
e4:f3:96:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:47 2025 by rpki-client