Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
File: wtJUnY0AZ6NyMjzHbY7gECt02DM.mft (raw, json)
Hash identifier: Hs6KG1NoNGHCZs7LAlnhw52vrROZqWm2rYmfyaqISEo=
Subject key identifier: A7:3F:93:29:74:D5:BC:41:26:F0:1F:18:27:08:61:D8:38:B4:9A:35
Authority key identifier: C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
Certificate issuer: /CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Certificate serial: 019A71135532CF5CA6680D5B1FBFAD2B78F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:01:23 +0000
Manifest this update: Tue 11 Nov 2025 04:01:23 +0000
Manifest next update: Wed 12 Nov 2025 04:01:23 +0000
Files and hashes: 1: 1XPduftMWiA3mhDReUc68s4JF-M.roa (hash: BCW8W7hox85l+EvIIJN43p7alSsxdX+eLTmQrODF5v4=)
2: wtJUnY0AZ6NyMjzHbY7gECt02DM.crl (hash: qUNkyGSZ+rQwznMeAeKi1mpbjcSFtQEGkXaZIn4vmAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:55:32:cf:5c:a6:68:0d:5b:1f:bf:ad:2b:78:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Validity
Not Before: Nov 11 04:01:23 2025 GMT
Not After : Nov 12 04:01:23 2025 GMT
Subject: CN=a73f932974d5bc4126f01f18270861d838b49a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:22:04:b9:71:4b:62:31:99:4d:58:e3:ed:af:
9b:3e:d8:bc:ac:14:57:70:5c:3b:ba:7a:cd:5d:f8:
b7:44:48:a9:bf:f5:4f:3c:fd:0d:02:e7:82:00:3b:
b6:b1:31:d9:b0:a3:ff:af:20:7c:94:be:a9:ce:76:
4d:c2:5b:ba:3c:05:6e:83:ea:48:3b:92:6f:4d:61:
ab:a1:64:52:34:45:3e:67:16:8d:b6:77:7d:bd:f0:
5f:d4:49:a8:b8:2a:7b:05:7c:eb:3d:d4:2e:8f:b8:
41:35:cc:41:26:e8:17:8b:2e:64:6f:0d:ab:b7:6a:
9a:e1:af:e4:7f:20:45:7d:a1:c6:2d:9b:f7:b0:98:
d3:ef:6c:e1:74:74:cb:b7:56:b9:52:a2:20:2d:fa:
ca:77:74:c6:d0:e5:5b:99:8f:0f:1d:61:26:4c:48:
0f:86:45:2b:cb:fe:08:19:24:29:bd:67:ba:aa:0e:
d7:25:e8:79:b4:c7:70:5b:db:84:98:ff:5e:1c:57:
78:1d:73:c9:4f:bd:47:96:5f:c5:8c:9c:af:d3:af:
6a:24:96:38:a1:16:eb:e7:6a:0f:78:1a:22:f9:4b:
07:85:a0:0c:fd:f6:c3:3b:a3:0f:0f:98:2e:95:92:
94:42:33:c2:a9:c3:82:b6:af:48:7d:ee:97:d1:c8:
b2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3F:93:29:74:D5:BC:41:26:F0:1F:18:27:08:61:D8:38:B4:9A:35
X509v3 Authority Key Identifier:
keyid:C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:80:06:92:8b:ec:58:d5:7d:e2:66:ae:92:9d:ae:38:68:f8:
8e:a7:66:5d:fc:fd:77:fa:88:87:88:71:9e:92:b2:47:24:58:
17:1e:e1:97:f6:4f:68:4b:9c:92:4f:5b:76:b1:ac:00:f5:49:
09:a4:ec:b7:6b:3b:3d:17:a9:cc:89:85:a7:c7:b9:80:7b:82:
ea:2a:29:b8:29:77:1a:77:39:6a:f7:c6:e9:80:66:d6:0f:b5:
8f:e3:7d:0c:61:34:51:ac:fa:a4:e4:f6:4e:8b:2a:36:3e:88:
bd:5a:81:50:32:00:91:bd:9b:c9:22:3d:2d:aa:48:2f:4d:1f:
37:2b:dc:3d:de:e1:28:10:12:1c:60:99:89:ae:7a:35:4b:85:
e9:0d:2f:ce:d6:7f:3f:b3:8c:5c:8c:c2:0c:66:dd:08:97:c8:
bd:e4:9b:0c:17:7c:5b:2e:ff:1f:71:03:1d:bb:10:53:a4:e0:
ea:e5:85:83:81:59:4f:ae:49:2d:5f:0b:b2:b9:78:59:e3:26:
f9:b7:9e:da:1e:c1:2f:c3:3b:0a:f3:dd:ca:35:21:ac:f5:ba:
f0:ce:4b:58:72:39:ec:74:21:e3:d3:13:f3:56:a1:9b:2d:bc:
da:87:25:dd:04:ea:93:a7:4a:ef:4e:c4:ed:6f:01:63:69:42:
29:87:63:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:39 2025 by rpki-client