Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
File: wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft (raw, json)
Hash identifier: wsBvH1CmtxO7Zt4z4MM42vvqUuhLRJl0kZo+KvMHm/w=
Subject key identifier: 5E:A1:0E:F8:00:29:DA:59:BC:5A:47:50:E0:C0:67:A4:67:B0:26:AC
Authority key identifier: C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4
Certificate issuer: /CN=c1173f47ec1d92e7886ea2907ff927ee17cbf2f4
Certificate serial: 019A7293711FBE08FC7F851F57F39300743D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
Manifest number: 0440
Signing time: Tue 11 Nov 2025 11:00:56 +0000
Manifest this update: Tue 11 Nov 2025 11:00:56 +0000
Manifest next update: Wed 12 Nov 2025 11:00:56 +0000
Files and hashes: 1: 9cUx35pJdH2wM_3eSozbimAeHfU.roa (hash: 7YW1ZDiZMJTYn9KTvcJh6SoR/wbiN8bpaQ2O/a0WApI=)
2: wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl (hash: pxObsiL/wkXEpdDcxU3I+UU0jbomjQSHLpuCg6CFk4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:71:1f:be:08:fc:7f:85:1f:57:f3:93:00:74:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1173f47ec1d92e7886ea2907ff927ee17cbf2f4
Validity
Not Before: Nov 11 11:00:56 2025 GMT
Not After : Nov 12 11:00:56 2025 GMT
Subject: CN=5ea10ef80029da59bc5a4750e0c067a467b026ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:14:63:4f:76:64:5d:e9:c9:32:a7:16:b5:
b9:69:2c:ea:6e:e5:65:b9:5c:a0:7a:0d:ce:4d:ea:
2b:2f:25:2f:32:60:15:55:55:5c:a6:5b:06:cf:3e:
9e:b7:ad:a7:71:ef:53:9b:c6:fc:98:c3:86:e6:33:
05:d7:9c:d6:5b:25:e8:a6:a4:b7:82:99:7e:f3:6c:
c3:fb:69:60:9d:bd:68:3f:2b:45:c9:50:e1:5f:db:
80:83:46:f6:6e:25:ad:9b:b1:c1:b7:6c:f7:41:b9:
31:88:6f:08:e2:fd:25:c0:97:76:90:2b:93:d0:de:
d0:c0:ea:b6:13:6b:24:49:51:b1:3e:d5:5e:6d:bd:
52:22:e2:52:d0:77:fa:df:6e:45:2a:ce:2e:c2:4a:
68:83:ba:3f:95:0b:b1:6c:af:f4:d8:63:55:7c:eb:
a7:f4:f2:87:44:35:c7:b7:76:72:d3:cf:fc:e0:04:
93:ee:21:1a:c7:98:27:66:f8:9d:04:29:42:53:41:
ae:aa:cc:92:4d:7d:3a:98:ba:44:5b:b5:4f:8d:70:
9b:cf:20:fe:b1:55:71:35:21:7d:1b:43:c5:e9:79:
dc:a5:bf:75:b9:bb:82:18:e9:89:a5:f4:f2:a9:b0:
e6:dd:1c:1f:dd:f6:68:25:35:8e:04:3f:19:73:f2:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A1:0E:F8:00:29:DA:59:BC:5A:47:50:E0:C0:67:A4:67:B0:26:AC
X509v3 Authority Key Identifier:
keyid:C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b1:74:00:91:a3:67:78:1b:99:cb:dd:fa:7a:1a:3e:63:b2:
c9:96:48:df:04:78:c0:65:a8:a1:23:b4:14:7f:f1:3c:ff:36:
17:aa:3c:7a:c1:10:23:c2:1f:8a:cc:1a:ac:47:ca:53:99:20:
38:7e:3a:ef:76:64:dd:ce:36:09:86:51:cb:59:d3:c4:b7:75:
bc:d9:7b:30:c0:da:49:46:e6:ae:67:46:b2:8b:c8:66:aa:ec:
ab:88:97:51:9c:79:46:4d:52:21:3d:fa:ef:08:11:50:05:e5:
7b:59:fb:ef:f3:0a:9e:1b:ce:c8:6d:0c:1f:f3:79:ac:86:c8:
4e:32:8f:47:43:5f:e2:11:47:0a:28:c1:b1:13:e2:4f:30:57:
2f:c5:28:0d:03:af:6d:fb:1b:3a:f5:3f:6e:6c:f2:6a:ca:5b:
d1:90:8d:6c:e1:4d:47:f0:77:e6:79:9e:34:28:04:08:36:32:
09:42:67:02:45:c0:18:3f:c1:b9:cd:31:ce:1c:b4:c5:2e:96:
3d:e1:eb:43:5c:ed:e1:c9:34:ff:50:1a:bb:bc:ae:57:40:22:
3b:2a:92:56:2d:2b:85:a8:5f:5b:81:d9:de:eb:1d:3d:7c:46:
cf:24:47:4b:59:7f:c8:99:57:cc:5b:e2:fd:2f:5d:21:cf:7f:
d4:75:5c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:38 2025 by rpki-client