Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
File: wrXTr9C3Lrc0wh7XgjKetufBzkE.mft (raw, json)
Hash identifier: c4JhzPGc8Uq0uozBkXujVsASrQRAAsd5rVe/deVlJQw=
Subject key identifier: 7D:09:30:EC:A6:CC:48:50:9C:A6:A3:EA:2F:23:84:57:38:9C:36:E9
Authority key identifier: C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
Certificate issuer: /CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Certificate serial: 019A72939DF774D790085A4EF97DF8BFC139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
Manifest number: 09EB
Signing time: Tue 11 Nov 2025 11:01:08 +0000
Manifest this update: Tue 11 Nov 2025 11:01:08 +0000
Manifest next update: Wed 12 Nov 2025 11:01:08 +0000
Files and hashes: 1: 24ln-8DkQtv-Hk-B6dzvfSqyjQY.roa (hash: SeW6VNZ/+9bUzjzq/OzL5WVkY+lRaswkW52Mz3zEsYI=)
2: wrXTr9C3Lrc0wh7XgjKetufBzkE.crl (hash: wMFO1eAdlG2piWmXAMxulETkuko1+v7jJjJZeAbZYqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:9d:f7:74:d7:90:08:5a:4e:f9:7d:f8:bf:c1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Validity
Not Before: Nov 11 11:01:08 2025 GMT
Not After : Nov 12 11:01:08 2025 GMT
Subject: CN=7d0930eca6cc48509ca6a3ea2f238457389c36e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:72:c5:bf:52:9f:aa:34:9c:74:19:7b:bb:
f8:43:2e:13:f5:6e:5d:85:9e:db:74:1a:06:ca:da:
75:94:c5:bf:a9:fc:61:5d:c6:01:de:e8:34:5b:5f:
5e:e4:a2:1d:13:0a:87:ff:f8:f2:9f:12:38:52:e3:
d9:9d:a7:ab:91:d4:84:17:f3:8e:85:e8:9b:b6:88:
12:f9:6e:10:84:af:51:e1:c4:7b:d2:ed:9e:4c:38:
c2:c5:48:59:89:90:f7:01:49:d7:82:84:e1:89:78:
d4:66:67:58:95:c5:da:93:fe:0e:4c:ef:b0:f7:da:
79:94:6f:b0:c5:ea:ee:9f:1c:6e:7f:55:0c:4c:24:
59:ff:16:a1:e0:3f:79:1e:67:2f:d4:99:92:0b:da:
6f:3c:44:22:af:8a:b3:8b:4f:3b:22:a3:fb:b2:ff:
84:a7:61:93:cf:57:da:53:2c:78:0c:92:a2:16:08:
f2:c0:a6:9d:c6:7b:9b:c3:c8:68:7e:a5:50:7e:3f:
4b:a6:f3:40:5f:df:b6:21:a2:49:30:cc:b3:3a:26:
3a:3e:cf:f3:1b:13:cd:c3:7d:ba:f2:0d:90:88:4c:
9a:03:f1:58:b4:d9:26:77:86:3a:14:fa:cb:a5:80:
4b:e4:82:16:9c:b4:1b:d4:16:71:dd:78:bc:18:00:
0a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:09:30:EC:A6:CC:48:50:9C:A6:A3:EA:2F:23:84:57:38:9C:36:E9
X509v3 Authority Key Identifier:
keyid:C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0e:c5:db:94:45:fb:15:25:d6:80:84:77:b1:0d:48:78:12:
cd:c9:7d:9d:58:9e:10:0a:a6:9b:b2:36:b6:53:d4:87:c0:fb:
44:9c:d2:e9:d4:e4:82:94:d6:11:f6:ba:0f:1b:5b:eb:5d:29:
44:8d:47:d0:76:17:45:fc:1b:c2:ea:ac:82:57:21:42:33:98:
d8:16:dc:bf:cb:c6:2b:f7:09:94:38:40:dc:57:9f:b5:92:2d:
d7:b9:79:d3:d1:c0:50:f3:af:49:a7:8e:cb:83:b2:2f:89:e0:
8c:e9:66:83:f6:c3:b6:e1:bf:76:8d:0a:7f:f1:61:bf:3e:49:
b8:dd:c1:94:79:78:60:64:5a:53:93:53:1c:5c:f1:3b:69:d0:
fc:f9:3e:09:df:97:c5:24:c7:26:a8:d1:51:7a:7d:12:3a:c1:
9a:df:96:2d:38:69:74:75:ab:e8:fe:c6:b1:5c:4d:5e:d6:61:
22:b4:a1:3b:6c:23:b6:29:f1:b8:1a:0f:f2:a0:17:36:51:c5:
80:d3:a8:d1:48:1b:89:70:62:38:76:da:60:5e:3b:51:ab:fd:
b3:7e:90:93:78:c6:03:16:31:f1:dc:40:fb:de:b2:05:e3:f2:
3b:54:1d:38:1f:c2:8a:2e:fa:59:87:e4:c5:23:a2:c7:60:29:
7a:0a:6a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:13:59 2025 by rpki-client