Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
File: wc2HDWChpsQgZxWK7rzA4_1t2B8.mft (raw, json)
Hash identifier: wa29M82rr5pWxiPFElrhbVjW16WzeBlmCLTpYMdoqdo=
Subject key identifier: 06:A6:04:28:E2:9B:2F:6C:76:2A:D3:7C:B2:14:6D:C3:B7:78:2E:D3
Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
Certificate issuer: /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Certificate serial: 019A240A088CDD44AA0A2AC14E4D7C6C2F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
Manifest number: 03DA
Signing time: Mon 27 Oct 2025 05:00:28 +0000
Manifest this update: Mon 27 Oct 2025 05:00:28 +0000
Manifest next update: Tue 28 Oct 2025 05:00:28 +0000
Files and hashes: 1: BqHb_zqnMM3dIgBF_BTfgVY5a5k.roa (hash: uhtJUVXZSGPPQKjYqbLF+Cz5CPTBTCYfz/c5yIRK4Ss=)
2: wc2HDWChpsQgZxWK7rzA4_1t2B8.crl (hash: 3tz/Y2pxRwzcBEF6zKwOIcW7z62EQ468yvJLCWskDcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:08:8c:dd:44:aa:0a:2a:c1:4e:4d:7c:6c:2f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Validity
Not Before: Oct 27 05:00:28 2025 GMT
Not After : Oct 28 05:00:28 2025 GMT
Subject: CN=06a60428e29b2f6c762ad37cb2146dc3b7782ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:2a:b0:f4:5f:0b:43:9f:a7:72:9f:1a:b7:
03:d6:be:1c:49:d8:6e:73:fb:eb:80:88:50:b7:87:
74:40:50:4c:23:67:e9:3e:85:5f:9d:88:e0:08:92:
8a:14:97:a4:ed:bb:83:d0:0b:71:cd:c0:aa:ab:69:
ee:81:87:f8:cc:87:6e:24:99:61:93:dd:40:64:cb:
26:11:7f:a5:85:df:5c:9c:ae:3f:ba:21:6a:0f:74:
fd:fc:35:41:6d:2a:64:9f:ab:6f:c4:90:d7:68:e9:
ba:04:12:9d:af:1e:35:7c:d6:a3:90:05:a2:63:07:
5c:ed:8a:cf:ec:66:7a:d3:37:e8:23:f5:30:d2:45:
22:03:d3:64:30:fb:42:be:df:2b:2b:e0:9a:b8:88:
58:54:04:e2:92:87:ad:6e:bf:bb:b7:6c:ed:b9:14:
b9:13:0a:86:c4:b5:33:bc:af:da:fc:f5:e0:d0:3e:
c2:89:45:9e:f2:d0:07:ad:cc:e1:24:38:01:37:78:
a2:83:9b:2d:c2:91:09:73:8a:e1:e0:16:e4:a8:22:
11:11:b6:ce:0a:2f:1f:62:dc:28:08:96:33:f6:19:
61:e3:e1:9e:b7:d8:c3:67:4e:02:a2:7a:aa:e7:05:
e5:7d:81:f0:1c:cf:79:c5:5e:18:3b:c5:f9:06:30:
7a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A6:04:28:E2:9B:2F:6C:76:2A:D3:7C:B2:14:6D:C3:B7:78:2E:D3
X509v3 Authority Key Identifier:
keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:85:0f:b5:24:7a:7c:1d:f2:38:8e:a5:b5:66:eb:27:37:38:
a9:dc:de:8e:40:10:83:d3:16:91:1d:e2:ff:b9:a2:2b:a7:e3:
77:53:bc:da:d1:2c:41:c9:99:9e:e6:42:15:a3:e1:2f:b1:a4:
12:46:7a:60:c4:06:5d:2e:f1:4e:73:e3:5b:b2:56:b1:b7:08:
b3:61:fd:41:93:5b:3c:f2:cb:89:32:1b:bf:34:8f:94:ac:40:
32:4c:c7:f3:6c:1b:0a:94:b0:c1:b6:20:83:c2:29:99:d9:ab:
61:e5:64:ea:c5:cc:19:8e:b2:00:18:83:e0:7e:4e:ef:10:1d:
c1:bf:cf:66:43:f3:c8:34:d5:9e:7a:8c:67:14:f7:27:cf:05:
93:1b:94:d9:95:42:cb:29:17:3c:21:a3:0e:a2:f9:a8:e6:81:
f1:30:43:4c:10:4a:68:5b:b5:39:30:01:69:6a:31:72:30:56:
0e:f8:18:6f:b2:b8:49:73:73:92:ea:ae:75:56:b4:75:86:dd:
2e:ee:41:8a:c8:93:04:7e:f2:67:22:f7:48:89:01:b3:1e:87:
b0:f2:1d:60:e3:3b:c7:57:99:65:9f:3a:0d:75:7f:a3:db:85:
f9:a3:48:c1:cd:05:42:e1:3c:25:a0:e2:3f:38:21:1e:6c:52:
9d:96:b1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:37 2025 by rpki-client