Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File: wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier: hDK0Nur3jXcKDpMP6DoPMDJjiRojfr8uM+Qr0NYsUkg=
Subject key identifier: 73:BD:91:37:2E:D9:34:27:F4:36:AB:06:3C:A9:2B:1A:1A:1C:0A:34
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer: /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial: 019A70A4F75A1631496F0DBEAD601BAF67FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number: 053C
Signing time: Tue 11 Nov 2025 02:00:50 +0000
Manifest this update: Tue 11 Nov 2025 02:00:50 +0000
Manifest next update: Wed 12 Nov 2025 02:00:50 +0000
Files and hashes: 1: jQ35y5JqdtG9WdmH02jLEjnZC4E.roa (hash: FipHH6QD7PJQoRtOLX5VjgWSjY2BOLQCjuClzQsUWi8=)
2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: oxU9s6t1hXLBdLzmE/jV4uomVE8/5oh8cNJJ+yGQJ6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:f7:5a:16:31:49:6f:0d:be:ad:60:1b:af:67:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Validity
Not Before: Nov 11 02:00:50 2025 GMT
Not After : Nov 12 02:00:50 2025 GMT
Subject: CN=73bd91372ed93427f436ab063ca92b1a1a1c0a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:bf:b9:e9:ec:6d:75:1a:da:91:96:99:6c:
83:43:d5:30:f4:e9:cc:8d:9d:a9:1f:9e:60:14:b4:
80:a9:08:ad:13:8f:1d:0d:ed:f2:ba:7b:99:bd:72:
fd:59:82:43:86:22:a4:69:d8:d4:a3:6f:ce:11:2a:
d9:cd:4d:a0:65:f4:ae:ba:b5:4e:ee:54:55:6f:6b:
8a:fc:2e:e5:27:87:38:e8:b6:fc:0e:12:4f:e5:13:
d2:51:0b:7d:c7:f6:2d:e2:e7:c6:d8:c1:62:52:f3:
32:7b:45:b3:58:c6:8f:fe:e6:5b:43:78:97:2a:c8:
fc:7a:c6:01:b6:d8:1e:e6:f7:84:9c:7a:d1:9a:06:
7e:62:6c:94:95:0a:f5:7a:98:28:70:b7:8c:69:38:
d3:d6:86:5b:57:1c:a7:69:29:1e:e9:8f:81:06:f9:
7d:66:a7:fb:db:10:85:91:0e:2a:cc:0c:1b:7a:42:
25:58:c7:84:77:ed:c2:9f:ae:5f:5b:28:37:fb:2e:
39:d3:7b:c5:5b:dc:55:05:f7:fc:f9:1b:d2:45:d1:
9e:47:e1:3f:18:22:47:91:0e:8c:9a:05:aa:e4:a9:
8d:ad:b7:d8:2b:32:19:cb:da:9e:4b:1b:f4:8c:23:
c8:74:39:f0:a6:73:d1:cd:92:bd:d9:ac:7d:bb:55:
f6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BD:91:37:2E:D9:34:27:F4:36:AB:06:3C:A9:2B:1A:1A:1C:0A:34
X509v3 Authority Key Identifier:
keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a5:62:82:96:31:6c:a6:ce:19:d0:d6:cb:71:bd:e3:6d:80:
ce:51:a5:15:87:54:a2:26:15:d6:ec:9c:cc:94:25:d3:e2:e6:
03:4b:47:2c:6f:36:ed:33:05:93:91:bd:05:70:00:7d:bf:47:
0e:5a:26:c0:a5:43:61:77:fd:ef:e6:2c:b2:ec:a7:d4:ec:0c:
ae:be:d8:49:f4:0a:76:0f:42:87:b3:1d:aa:3c:43:9d:50:a7:
4d:3a:b1:0b:c0:a2:60:ea:13:33:bb:b1:16:35:d1:7c:8e:a2:
c4:e4:d6:db:86:49:8b:3f:02:0c:59:e4:8e:f5:42:85:40:37:
41:c9:75:44:25:8c:95:bf:4b:ec:c6:2e:36:50:83:bb:9b:c8:
bf:ef:0d:15:91:b3:18:94:f2:ac:3d:5b:6b:0f:fb:b0:1c:0c:
bf:50:f3:63:4c:10:68:4e:5c:cf:48:6c:a8:83:da:78:48:53:
4e:96:a1:56:da:ea:28:28:be:d9:8c:a4:d6:8e:c9:86:82:65:
30:61:8b:16:a0:48:fe:ef:9d:12:20:29:78:b2:0c:7f:95:3b:
ae:0c:02:97:14:e0:7f:b3:ee:e5:67:52:56:00:44:3e:d0:c4:
f2:4e:03:5c:98:f4:aa:64:c0:66:ef:87:34:61:bd:e8:9b:a3:
f6:0f:32:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:40 2025 by rpki-client