Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
File: wHDujcg3gIaWAYLjMJImcX6D5Ac.mft (raw, json)
Hash identifier: ffpUYzJYcpdX113H0sLFLEDZh2+YZX5s6kL47ZXQp0E=
Subject key identifier: BD:2D:92:C8:91:4E:D8:D7:40:D6:62:6B:24:BE:FF:11:E1:45:F3:EB
Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
Certificate issuer: /CN=c070ee8dc8378086960182e3309226717e83e407
Certificate serial: 019A2D7B045A0DC937D4F1E2A19D26F4DF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
Manifest number: 0A17
Signing time: Wed 29 Oct 2025 01:00:27 +0000
Manifest this update: Wed 29 Oct 2025 01:00:27 +0000
Manifest next update: Thu 30 Oct 2025 01:00:27 +0000
Files and hashes: 1: lMUiy0iCZc25BIvrjbAT5rY_gaE.roa (hash: os2q3M1axX4RL5z3SNixB1SYiEywK/95oeCFkIddddI=)
2: wHDujcg3gIaWAYLjMJImcX6D5Ac.crl (hash: h0Og7A9uOTvHY6hJXCom7vr55wrg4ftAg2Ea++13NZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:7b:04:5a:0d:c9:37:d4:f1:e2:a1:9d:26:f4:df:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c070ee8dc8378086960182e3309226717e83e407
Validity
Not Before: Oct 29 01:00:27 2025 GMT
Not After : Oct 30 01:00:27 2025 GMT
Subject: CN=bd2d92c8914ed8d740d6626b24beff11e145f3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:49:85:c3:25:59:fa:55:fa:3e:9a:93:88:4e:
f5:88:ec:57:b9:b5:d2:ff:38:32:ef:da:1e:a5:89:
62:d3:b4:3d:15:4b:79:29:16:dc:d5:78:e8:bb:22:
ee:37:cd:40:8d:7c:b4:bd:9f:a3:ad:95:e8:90:75:
cc:22:f8:e7:28:ac:08:66:86:08:36:b2:bd:8e:56:
f4:9c:b1:03:6d:ef:c9:f5:4f:71:58:98:1a:66:1c:
9d:59:d7:1c:96:81:80:f2:b0:97:70:1e:c8:56:8d:
70:29:c2:1e:dd:80:e1:c8:b0:15:6c:78:a8:38:23:
62:48:c0:97:1c:97:89:a0:34:0d:f9:8b:2c:b1:78:
1d:fa:b1:5e:a0:d3:0f:fb:1a:bb:fb:42:84:07:eb:
b5:c5:21:9f:12:5a:74:19:05:7e:f8:31:70:6c:b5:
2a:21:ae:55:98:02:ab:ca:3e:ce:6d:b5:1e:7a:37:
ae:1d:73:a9:c5:48:96:fa:09:15:2c:31:15:4f:3a:
4e:fb:ab:a1:03:ce:54:df:1b:c3:ef:55:e4:2b:81:
99:6e:05:36:ca:c2:b1:f4:6e:40:2f:a1:43:43:e8:
4f:13:0b:d1:b7:a8:6c:46:8e:20:0a:31:cf:08:4e:
9c:a0:2d:a9:54:b1:c6:38:11:bf:6a:34:9e:95:15:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2D:92:C8:91:4E:D8:D7:40:D6:62:6B:24:BE:FF:11:E1:45:F3:EB
X509v3 Authority Key Identifier:
keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:73:74:4e:c0:ce:3a:a8:b2:40:26:bd:2d:e3:48:df:d6:2b:
d0:18:8c:de:6c:2f:21:48:e9:e5:6e:e7:8a:ef:7a:fc:ce:4a:
6e:4d:c2:12:17:ca:fb:c8:cf:ac:7a:09:53:cc:d3:5c:54:11:
df:7b:aa:a1:ac:aa:4e:a4:3a:fd:f7:ea:77:ae:63:91:bd:d4:
40:0b:a8:e0:67:5c:d2:3d:18:73:20:40:eb:91:cb:cf:8a:eb:
c4:5b:cf:d0:f9:bc:a4:ce:3b:6d:93:38:66:f9:a9:a7:8b:56:
6b:7c:85:3a:af:d4:34:51:3d:92:40:60:f1:f8:cc:ee:64:98:
a6:3e:33:83:d5:fa:a4:ee:9f:12:a7:e7:f1:e5:db:2d:4a:2f:
af:19:14:0f:00:53:17:13:2d:22:c3:34:80:15:5a:21:a0:d7:
79:68:c1:82:fe:21:0d:66:b2:5d:b0:bf:72:a2:8d:3f:4d:24:
55:c6:a5:98:55:69:08:b0:e2:d5:4e:f8:97:91:9c:50:ab:13:
21:93:33:e8:7c:ff:d6:86:ec:47:95:78:41:fc:46:f9:1e:a6:
29:ca:44:ac:55:83:c5:ab:24:ba:6c:be:33:12:4d:d9:b3:c5:
48:20:c5:1f:ad:7b:61:ac:f9:c8:92:af:e5:7c:e0:14:2d:5c:
de:25:fa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:06:32 2025 by rpki-client