Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
File: ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft (raw, json)
Hash identifier: tnkf9epJrRpc46tqdr8t8gh7/oRDF4bN5OlJDex/RXs=
Subject key identifier: 95:58:D2:A2:DF:3B:6B:48:E5:29:F7:C3:9C:EF:AE:56:05:75:2C:62
Authority key identifier: C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B
Certificate issuer: /CN=c30d03e64676e720a4ff55179e196fec6591886b
Certificate serial: 019A71133D1FE50FFEFE5520C3E46B9DA553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
Manifest number: 0587
Signing time: Tue 11 Nov 2025 04:01:17 +0000
Manifest this update: Tue 11 Nov 2025 04:01:17 +0000
Manifest next update: Wed 12 Nov 2025 04:01:17 +0000
Files and hashes: 1: O_SKclTWbwMrHuJ-wu_A_gUlj98.roa (hash: wqqIe428dBMOphAjwqG0MbbSQPuyl8AVjDeCz3ynOtk=)
2: ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl (hash: vvqATFQklRBuX2ft2VQM5736SUqx8OVW4NwUl1btpxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:3d:1f:e5:0f:fe:fe:55:20:c3:e4:6b:9d:a5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30d03e64676e720a4ff55179e196fec6591886b
Validity
Not Before: Nov 11 04:01:17 2025 GMT
Not After : Nov 12 04:01:17 2025 GMT
Subject: CN=9558d2a2df3b6b48e529f7c39cefae5605752c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:c2:4a:c4:6c:6e:16:2b:4d:1b:d4:0d:8e:
d8:9e:b2:57:de:06:80:ba:30:a8:66:e4:53:77:3b:
fa:3e:93:9f:12:f4:46:d5:a9:5f:27:d7:c8:8a:88:
a1:03:d5:1c:71:f9:ee:bd:c7:b9:88:1b:6f:12:3c:
3f:be:69:74:61:8a:52:18:36:01:00:30:fb:7f:24:
32:db:6e:3a:4e:d4:ce:9a:0b:e9:44:1b:6b:26:33:
4a:ff:9c:88:76:da:1a:27:2d:0d:ec:f6:78:4b:76:
1d:bd:72:1d:a7:08:f8:ce:ad:7d:44:2d:83:60:34:
62:4c:5f:a6:e0:49:34:af:16:6b:04:97:66:a5:82:
49:47:b8:b4:13:97:72:d7:7a:7c:dc:70:d4:31:b4:
09:dc:76:1c:4f:2a:f4:11:a3:37:99:8c:d2:75:58:
6a:6c:56:42:00:8b:27:32:01:e0:63:e0:2e:08:fa:
9d:22:6f:c8:aa:f9:1a:c3:b4:1e:72:bf:3b:d2:26:
a8:ae:9c:e8:ca:7b:fc:69:59:21:02:94:69:06:6a:
d4:31:c3:24:bb:e6:8c:d7:3a:0b:89:fb:2f:57:8b:
44:8b:62:3c:3d:f0:79:b1:e7:d2:8d:d0:0b:68:b5:
8a:b6:45:d4:30:5a:25:ca:d5:19:49:0e:84:e6:ad:
1c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:58:D2:A2:DF:3B:6B:48:E5:29:F7:C3:9C:EF:AE:56:05:75:2C:62
X509v3 Authority Key Identifier:
keyid:C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:93:22:03:e3:2a:f2:0a:e8:05:3b:80:cf:29:d9:d4:dd:ff:
87:5e:32:82:49:e0:cd:32:27:3d:0a:fb:45:d5:5d:39:81:f7:
93:ed:5e:f8:79:42:42:0e:bd:7c:ff:21:db:d9:70:87:a1:17:
c7:ca:70:76:f5:12:90:85:21:4f:30:9a:07:76:50:35:60:82:
e1:71:9e:42:e8:56:29:aa:03:a8:47:ff:a2:2a:ae:f6:2e:21:
5f:84:a8:27:e8:1c:be:f7:38:8f:bf:4d:fc:7d:39:25:bc:c1:
a9:74:e0:a8:01:60:5e:8b:61:ac:60:93:c8:7e:20:44:28:b0:
14:64:d6:7e:94:86:ee:de:db:51:67:b5:d0:7b:5d:d2:37:21:
ff:42:d4:18:6f:60:73:09:df:cd:0c:7a:bb:60:38:2f:5c:1a:
4d:23:d1:96:35:89:11:7e:18:24:74:cf:ef:f6:32:e5:c8:94:
a8:72:f1:78:22:ff:e7:d3:80:c9:c8:f5:3c:98:65:3d:c8:ee:
8d:bc:09:34:97:a6:03:ae:e8:40:bf:c9:0d:be:3d:9b:eb:69:
4d:9b:c0:71:38:99:05:c8:53:25:f6:fa:79:8f:4b:4c:c4:63:
6c:4f:2e:1c:eb:94:78:7c:28:91:93:02:9e:80:ac:fc:20:45:
b9:16:1d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:25 2025 by rpki-client