Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
File: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft (raw, json)
Hash identifier: lTvCbYh8YTZ7s5GLLR4Hmt9J0qZG3ldv2JE6lJn/hJI=
Subject key identifier: 27:3B:80:D2:A3:CF:4B:B6:43:5C:7B:3D:CC:24:4C:9F:A5:8A:B8:02
Authority key identifier: C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
Certificate issuer: /CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
Certificate serial: 019A72259DA202D03040819ACEF18581A3EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
Manifest number: 081B
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl (hash: Bpmc21TD53OSrv9uOAhtF22K1laEYealhiL6pylSd/I=)
2: zpicEsTdAQH31s_U5VTklFFkx3A.roa (hash: F4NgHOhmdVZSO+9LtvSeSBchmLUaANtpy3YFPClVpoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9d:a2:02:d0:30:40:81:9a:ce:f1:85:81:a3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=273b80d2a3cf4bb6435c7b3dcc244c9fa58ab802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:d2:ff:6a:49:80:50:a8:45:a7:21:b3:36:
7c:ec:07:f8:0d:a6:d6:77:82:f7:a7:55:dc:92:68:
cd:3f:38:91:65:7f:23:1d:71:49:db:5a:96:85:42:
e4:e6:35:fe:59:c4:ef:03:b5:19:ee:cb:d6:f6:bd:
b4:57:3f:57:21:2b:c3:c3:39:37:bd:c5:c4:50:7b:
94:62:10:f1:7e:c9:97:b5:76:6f:91:8a:47:8f:06:
b6:b7:23:e2:46:fe:0b:33:ee:9f:18:65:8b:a9:3a:
36:33:63:72:05:68:2e:d8:cb:61:c1:05:a4:ff:e5:
5d:47:e2:82:ca:5a:cb:f1:55:61:5b:ea:29:ec:08:
05:53:4d:6f:d2:db:da:07:97:17:32:51:71:bb:6f:
c0:89:16:39:81:a6:9a:32:ac:d6:29:70:1c:57:ea:
ff:6c:fe:d7:8f:9d:2f:b6:1c:54:19:94:18:b2:28:
da:86:83:ab:d6:ba:92:b3:13:88:f1:b5:03:42:50:
7d:63:f9:e2:27:1a:22:98:78:8f:c8:a9:d3:b4:96:
fa:ab:b9:ef:fe:20:57:17:e4:c4:a4:1b:ce:07:4b:
94:9a:69:bd:f5:ec:5d:e9:f9:70:f5:35:31:85:fc:
f5:af:16:45:74:c4:ad:4d:f7:37:e4:79:f6:b0:80:
bd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3B:80:D2:A3:CF:4B:B6:43:5C:7B:3D:CC:24:4C:9F:A5:8A:B8:02
X509v3 Authority Key Identifier:
keyid:C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f8:df:42:5a:ed:9c:93:9a:0b:84:53:0f:2c:c6:9a:a7:ba:
fe:5d:21:3d:a1:8c:f9:8e:23:af:32:3d:7a:8d:a4:dd:e5:23:
17:50:a9:37:b1:01:3f:cf:b1:1a:b9:d9:47:c8:13:39:e7:92:
52:dc:0d:ae:12:1c:04:57:b3:0f:8d:4a:79:5c:ad:bb:a3:d7:
8d:4a:95:67:01:f0:d6:5e:0a:d6:16:d1:fe:ed:78:fc:bf:54:
37:51:ae:7c:5f:bb:ac:5f:c7:72:47:29:fb:db:ff:58:b1:ee:
2f:e3:a6:f8:91:08:21:5d:93:da:13:5a:2f:6d:1c:1b:8f:4c:
90:c9:72:32:fd:d6:5b:36:7f:6a:a2:75:63:1e:d4:07:bb:61:
2e:ff:d1:d8:6d:5b:10:9a:70:55:f4:71:6e:f8:c1:7f:a9:a2:
13:a3:4f:f5:9e:55:ca:eb:dc:a6:89:fd:44:bc:3a:77:00:f9:
47:ab:25:09:dd:e8:b3:33:ef:4a:12:30:ad:47:86:25:cd:c6:
be:d8:0e:90:20:a3:5d:9a:29:fb:bb:04:77:ee:71:f2:73:e8:
83:16:a0:45:f5:5b:65:85:ed:92:34:e6:51:d4:ac:c9:7a:77:
06:08:2b:76:00:53:61:ac:39:95:b5:d7:87:74:ff:49:6a:c8:
ea:e2:aa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:54 2025 by rpki-client