Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
File: wBxQlI83N__gw7drJBzpBWKIhdU.mft (raw, json)
Hash identifier: 81Uts9cOOIpEk86PnWV9W6fVstjUGliKC+YaoYwudwk=
Subject key identifier: 97:78:EB:ED:5E:89:1A:AF:62:D0:06:58:C6:28:7D:A0:25:C5:74:56
Authority key identifier: C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5
Certificate issuer: /CN=c01c50948f3737ffe0c3b76b241ce905628885d5
Certificate serial: 019A725C3A730B63D0808BA381AB35B3D377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:00:38 +0000
Manifest this update: Tue 11 Nov 2025 10:00:38 +0000
Manifest next update: Wed 12 Nov 2025 10:00:38 +0000
Files and hashes: 1: XGDEPbtc7WSL9UqjAgvMfvuw4zE.roa (hash: kp+3RGyWysprTwe33mB6LBHrd9lT7FkQfMmhfRn83iM=)
2: wBxQlI83N__gw7drJBzpBWKIhdU.crl (hash: OR7N3C0oEdiS757v5Mdw/0W7yJ+GG3FQEa5d/YrCoqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:3a:73:0b:63:d0:80:8b:a3:81:ab:35:b3:d3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01c50948f3737ffe0c3b76b241ce905628885d5
Validity
Not Before: Nov 11 10:00:38 2025 GMT
Not After : Nov 12 10:00:38 2025 GMT
Subject: CN=9778ebed5e891aaf62d00658c6287da025c57456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:30:fb:7b:ce:e1:6d:ba:68:52:14:95:31:
13:d3:64:0a:a1:6f:d3:f5:84:57:2c:c9:6c:eb:50:
bb:eb:7c:82:5d:6d:40:d7:2f:61:de:46:8f:55:44:
b0:3c:d0:11:1f:ae:05:f4:bb:32:d5:29:c4:61:5c:
7e:4c:4d:ae:0e:24:91:0c:29:62:2c:85:48:19:92:
c1:5d:63:b0:3b:20:22:e4:38:dd:02:26:f6:1a:51:
bc:2c:eb:f5:26:ab:c9:af:4a:22:d8:b5:4a:0c:78:
ba:9c:65:83:4d:3d:88:d8:df:ed:b2:4a:48:b7:91:
b1:85:2c:06:d7:bb:d5:51:78:86:75:16:f4:96:25:
01:94:48:f5:d0:66:dd:a6:3e:5c:cb:1f:f2:cd:c5:
7e:d4:7e:cb:7d:c5:04:28:b0:86:62:6a:53:c2:ab:
2b:8a:ae:bb:25:b0:7a:48:de:31:d8:7b:e1:fa:04:
40:b5:52:e4:7a:c3:df:82:fe:a6:62:12:be:10:a3:
c3:9e:7c:e1:c2:1a:5e:45:ca:77:10:9a:3a:9b:0b:
b9:0f:44:da:26:a8:04:b9:39:d0:54:b0:9a:ac:5e:
1a:be:0e:a3:2b:19:a2:d1:47:8d:f1:4b:b6:38:7d:
6f:38:36:ce:d5:a1:94:35:f5:e1:14:7f:21:15:d0:
de:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:78:EB:ED:5E:89:1A:AF:62:D0:06:58:C6:28:7D:A0:25:C5:74:56
X509v3 Authority Key Identifier:
keyid:C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f6:da:a3:38:ee:40:6a:bc:9e:a8:95:05:ce:77:c6:77:b1:
31:62:6c:49:02:ce:d7:f5:5f:b3:92:ab:cd:95:41:f5:74:e5:
93:50:57:1a:a3:1e:c5:c2:d0:e9:a6:ce:dd:5b:ff:02:b0:40:
b8:cd:de:5b:a8:fb:9f:5a:a7:43:06:94:52:90:39:58:c0:03:
4e:4d:0d:43:dc:e8:de:66:91:74:9d:d2:bd:c1:24:96:c4:d6:
9f:4a:d8:41:9b:41:1e:b5:b9:14:09:9d:4b:d5:aa:6b:5d:b7:
ab:b6:c4:61:61:f6:87:78:18:2c:55:88:64:44:0e:26:77:89:
08:e8:0f:09:18:04:1f:d4:38:19:e0:28:e0:b4:1c:c2:32:44:
1b:7e:27:36:00:d1:96:d4:c5:84:81:01:1d:a9:80:30:69:d2:
d6:5d:7d:be:37:2d:fc:66:a8:fd:88:f4:36:cb:17:fa:de:8f:
cb:e2:08:53:e2:d5:f5:a8:74:79:79:1c:85:36:2e:8f:f2:74:
2a:c3:61:01:fe:df:3d:ac:2b:be:d8:11:c5:e9:02:6d:ee:ee:
a9:3f:ba:11:e1:9f:30:8a:f7:f8:0a:0b:46:02:f0:a4:54:8c:
4e:da:a2:eb:2b:08:50:04:15:b6:41:13:86:b6:d9:ca:dc:23:
b9:63:54:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:06 2025 by rpki-client