Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
File: wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft (raw, json)
Hash identifier: IOVGgWhcmuOsFiOs4Sa3E5Op0i/yyv4/fMqA2GcvYig=
Subject key identifier: 55:7A:C0:A4:F5:E6:3D:60:B4:28:47:48:89:9D:E2:CE:2B:A6:1E:4B
Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
Certificate issuer: /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Certificate serial: 019A0110AD5CA231C7F9874CEDAA6C57BBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
Manifest number: 0A07
Signing time: Mon 20 Oct 2025 10:01:01 +0000
Manifest this update: Mon 20 Oct 2025 10:01:01 +0000
Manifest next update: Tue 21 Oct 2025 10:01:01 +0000
Files and hashes: 1: 0YAlpXVId3LHx7bUr5xQcDkFv50.roa (hash: TFSQN0O8fIRBDFY4jZJFLp3OndkfiZIj1gXdcop7ZBU=)
2: wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl (hash: TSITOzlisy9Bfs5eE+NQfxbROh7u10cihw+yxNTU1ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:ad:5c:a2:31:c7:f9:87:4c:ed:aa:6c:57:bb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Validity
Not Before: Oct 20 10:01:01 2025 GMT
Not After : Oct 21 10:01:01 2025 GMT
Subject: CN=557ac0a4f5e63d60b4284748899de2ce2ba61e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:9e:9b:6a:ed:35:62:66:a0:e5:15:49:0b:
e2:5e:5c:03:05:e0:c1:65:47:75:52:49:74:1f:4a:
9b:65:27:5f:cd:b4:cc:16:bc:58:b1:db:bf:ed:7a:
7a:ea:a6:0d:5c:ae:cd:d3:d0:6d:85:64:72:7d:06:
2d:d4:2b:95:1b:ae:24:de:45:2a:12:64:20:40:d9:
b1:42:4a:9d:b5:f1:73:3b:c5:be:68:3e:c6:ab:9c:
f5:1b:e7:98:58:9e:b5:61:f6:d7:89:22:84:3a:57:
9f:7b:87:ab:2b:76:5c:6c:91:b5:96:37:d6:51:b5:
3a:84:bf:57:42:c0:84:3a:94:59:92:52:b1:db:bf:
7c:83:1a:4b:14:3c:f2:e4:2f:1b:f2:ff:85:3a:1c:
ce:3c:ca:b8:54:45:7e:bf:b7:6b:95:ca:92:4c:50:
dc:95:4d:95:2c:81:4a:62:ce:0e:b8:f4:79:b0:d0:
72:cb:44:3d:60:34:62:cb:6f:5b:27:ef:75:b2:3a:
5c:21:35:12:69:7f:37:a7:2c:c7:fe:69:a2:08:e5:
30:04:43:7d:0e:96:b8:7c:40:fa:22:8c:21:b6:d7:
c3:b4:8e:a8:84:15:2a:92:3c:b9:f2:d6:c1:77:76:
54:8f:e5:de:84:95:fa:33:fc:76:39:3e:0b:d8:dd:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7A:C0:A4:F5:E6:3D:60:B4:28:47:48:89:9D:E2:CE:2B:A6:1E:4B
X509v3 Authority Key Identifier:
keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:73:e4:5c:ac:f9:f8:68:ff:c9:1d:ce:f8:39:f5:45:31:a6:
df:98:1b:6b:76:e4:e4:65:b1:d6:01:81:36:07:b8:f0:c5:2e:
1b:57:f5:76:eb:06:39:d9:44:2a:82:19:dd:ad:94:5a:50:b4:
0e:ca:c0:ca:55:14:57:12:d5:6d:c1:dd:63:46:02:86:97:6a:
f7:6e:aa:03:db:3d:68:c4:99:38:46:a5:1b:ec:97:49:43:6b:
b3:0d:62:84:d3:65:85:a5:70:e2:2b:78:64:07:26:23:93:e3:
ac:33:2f:58:f1:95:74:17:ad:a7:06:8a:36:6d:38:4a:64:c9:
25:45:c5:d0:c4:5f:8f:0d:46:4f:b6:ee:18:56:e3:54:a7:b3:
49:12:e0:3c:77:a1:cd:27:61:3f:36:63:65:58:5e:0a:0b:af:
6d:7e:e9:16:1c:f5:40:11:24:5f:a5:35:22:0f:23:1f:58:90:
9b:67:96:91:25:d6:27:dd:95:a2:bc:0f:6b:9f:a9:fa:79:1d:
2d:63:ca:09:1a:44:cf:af:2a:79:5e:54:34:53:10:8c:b8:78:
7c:d6:3b:67:03:5e:3b:f9:5b:31:bb:4a:ac:ac:1a:e5:1b:75:
b6:32:65:22:9b:89:d8:08:21:54:70:19:e4:98:b5:16:be:c9:
e5:66:f0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:13 2025 by rpki-client