Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
File: wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft (raw, json)
Hash identifier: WmY/UG7lw7Xk/O1ipmbVe+OwBJzd4IpvXGUJ04lneZ0=
Subject key identifier: 92:A5:65:EB:F7:F6:19:00:11:29:81:57:47:4F:C6:9A:E5:15:28:95
Authority key identifier: C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09
Certificate issuer: /CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
Certificate serial: 019A71B8A612601DD0D220C4CE3B96D01A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
Manifest number: 0386
Signing time: Tue 11 Nov 2025 07:01:57 +0000
Manifest this update: Tue 11 Nov 2025 07:01:57 +0000
Manifest next update: Wed 12 Nov 2025 07:01:57 +0000
Files and hashes: 1: neX2MoGsrH8B_YW8P6u0bRQHpTA.roa (hash: R0pBtoL7OVYDCk4RiVwa4ZDNGgYBxm8WfoJ2QgcKQh0=)
2: wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl (hash: t9KWGWMqe3WHPvRIQBeXIFizMHQFiATFM5HVOEkkGR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a6:12:60:1d:d0:d2:20:c4:ce:3b:96:d0:1a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
Validity
Not Before: Nov 11 07:01:57 2025 GMT
Not After : Nov 12 07:01:57 2025 GMT
Subject: CN=92a565ebf7f6190011298157474fc69ae5152895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ba:1c:e5:70:5b:e3:7f:49:41:0f:4e:46:75:
7b:32:94:fe:5e:35:cd:40:61:1e:cd:4f:c6:a0:62:
fb:1e:99:ac:5f:84:2b:15:a8:aa:a2:e4:98:1f:24:
6c:25:ea:5a:d4:98:b9:b3:d1:51:f4:7c:1b:7e:ed:
e1:47:a4:78:fc:15:e3:5f:aa:d4:3a:ad:69:f9:1f:
83:58:8a:ad:6c:48:00:0f:63:83:20:5d:66:69:f8:
2a:f7:53:65:12:9e:2e:c5:e2:87:4a:b2:1f:ef:26:
96:a9:76:ae:a2:1f:be:a6:a0:56:3f:6f:7d:e8:25:
14:76:31:a5:f6:36:e7:f7:c9:fd:dd:d2:cf:53:25:
4c:1f:ca:7e:78:2c:16:8b:3d:ee:93:06:ca:7c:ec:
d2:58:37:1a:c1:79:2c:44:4b:21:3f:6f:58:18:7a:
7d:23:5a:c8:42:65:7c:88:31:76:ab:2b:72:ca:9e:
3e:b2:41:61:61:7f:fa:59:bb:67:42:e4:c9:72:b4:
dc:5a:af:11:35:31:ba:0f:97:3e:e8:ba:74:c4:8e:
d2:df:64:8f:94:a5:da:af:74:59:b3:df:d7:8d:26:
22:fd:27:78:6b:6f:f4:97:c3:18:1f:15:5d:82:9c:
10:3f:3d:52:e5:6d:93:fb:fd:f4:06:2e:97:f3:0a:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A5:65:EB:F7:F6:19:00:11:29:81:57:47:4F:C6:9A:E5:15:28:95
X509v3 Authority Key Identifier:
keyid:C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:43:82:9e:67:82:00:bf:9b:fa:c6:ee:dd:28:ee:fd:98:f8:
9e:f2:a1:b4:0b:61:08:29:56:ff:a8:90:2d:6a:54:be:0c:ec:
4f:a1:79:68:cb:85:f9:0a:23:aa:26:e1:63:05:7f:0d:67:c4:
34:64:9b:cb:76:da:24:81:dc:62:c9:f6:e5:15:98:6f:6b:04:
f6:d7:be:68:21:a7:de:f0:3e:86:86:33:57:b4:65:80:9a:ec:
ba:d1:8b:0c:f8:8f:d5:f3:a6:50:60:77:2a:4d:07:35:1d:39:
21:8f:f0:37:24:b9:b0:b4:1f:52:c5:98:e6:52:3b:9f:e1:2a:
77:05:5b:9e:0a:05:a8:63:76:3d:1f:32:fe:0c:41:ea:c8:70:
34:16:c3:68:37:bf:28:89:74:e8:40:d8:ee:7f:63:02:b7:8d:
83:9b:c2:17:24:9a:6b:a5:2e:06:03:c9:2a:b3:37:e9:f1:91:
87:30:17:4c:ff:91:ac:7b:b6:4b:8f:4f:ee:5a:a4:60:2f:a3:
37:de:48:30:00:e9:d1:2c:45:80:c7:fc:0e:77:f6:08:20:37:
74:f2:3e:89:19:e1:c6:ab:c1:3f:38:86:c1:02:68:af:b3:5b:
e0:1e:cb:2e:f2:2c:74:a2:83:22:1c:f4:31:64:a6:97:a8:d9:
39:d6:cc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:21 2025 by rpki-client