Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
File: wIneL0L89EpNqraoJMEgq7i3Fl0.mft (raw, json)
Hash identifier: 0Xbobs2vzw9hLjxQn1S7tGx88nnGF31umNH4/pBc+VM=
Subject key identifier: 54:C1:42:A0:96:C6:2F:22:2B:FA:1E:77:9E:02:9C:40:4C:06:E7:3D
Authority key identifier: C0:89:DE:2F:42:FC:F4:4A:4D:AA:B6:A8:24:C1:20:AB:B8:B7:16:5D
Certificate issuer: /CN=c089de2f42fcf44a4daab6a824c120abb8b7165d
Certificate serial: 019A72933E4E1CADED05EF37468F26E2D318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
Manifest number: CE
Signing time: Tue 11 Nov 2025 11:00:43 +0000
Manifest this update: Tue 11 Nov 2025 11:00:43 +0000
Manifest next update: Wed 12 Nov 2025 11:00:43 +0000
Files and hashes: 1: H2BNPmlBfhtAsDApleTz64AWPsM.roa (hash: guAQsXA/mb8umz46ROZO5L8VAidQfknhPYv2sReEc38=)
2: trrjLXp7ppNA4f7ZBtou6UVNH0c.roa (hash: JoQ3eQtKyL6eTj4ubcRQEeezZNpu32gkn8SEO4tRm78=)
3: wIneL0L89EpNqraoJMEgq7i3Fl0.crl (hash: 0h5x2YzdBFqcJSm9Oly00jssvkwjm1Dfa+cmJH/rAYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:3e:4e:1c:ad:ed:05:ef:37:46:8f:26:e2:d3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089de2f42fcf44a4daab6a824c120abb8b7165d
Validity
Not Before: Nov 11 11:00:43 2025 GMT
Not After : Nov 12 11:00:43 2025 GMT
Subject: CN=54c142a096c62f222bfa1e779e029c404c06e73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:51:fd:1b:27:a9:7f:42:fc:f2:dc:05:3c:
84:a7:19:98:20:bc:6b:51:8a:47:4b:4f:79:bf:57:
0a:f1:5c:63:a3:46:ca:5b:35:d4:35:44:26:0d:c9:
c4:89:5a:a5:e5:16:7b:7f:e1:18:34:1a:3e:ef:39:
61:52:8f:0f:1a:90:74:a4:73:64:06:d3:e1:ab:d6:
93:cb:f2:0a:51:89:cf:b0:46:97:a7:45:d2:e3:90:
b0:a9:56:86:ef:33:ba:04:67:5b:b2:e4:11:65:73:
b3:ce:06:eb:cb:74:7d:77:6e:d0:a3:65:09:05:72:
53:05:a3:12:76:01:d9:fb:65:1d:20:71:60:12:df:
7e:c0:eb:ed:94:76:b4:20:46:68:2d:10:c5:78:37:
60:18:da:ef:61:bd:7c:ab:89:cd:93:fc:42:1e:ca:
8c:f8:f2:25:cb:e3:42:8b:f0:cb:3c:9a:fe:78:05:
fa:c4:a9:ac:f2:7d:80:4a:62:26:a8:fe:4b:e1:49:
7a:06:89:bb:4d:a2:73:b8:67:b9:5e:39:52:72:fc:
e1:bf:e1:2f:31:b6:38:eb:ad:c6:1d:3b:35:b0:04:
33:62:6d:00:0e:3f:32:9b:4a:24:af:1b:b8:b4:b2:
d0:2e:96:26:a6:01:68:67:c7:2e:93:ef:81:56:69:
1f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C1:42:A0:96:C6:2F:22:2B:FA:1E:77:9E:02:9C:40:4C:06:E7:3D
X509v3 Authority Key Identifier:
keyid:C0:89:DE:2F:42:FC:F4:4A:4D:AA:B6:A8:24:C1:20:AB:B8:B7:16:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c2:7d:9d:92:df:fd:86:51:ec:ce:be:55:14:02:9c:d3:b5:
2e:6e:6c:93:e7:14:9e:5b:02:c8:1a:ce:32:c6:82:b0:68:de:
6f:69:d8:8f:74:75:52:ff:50:e0:a7:2a:a4:78:bc:07:9e:10:
86:f8:c7:1d:3f:1e:70:62:96:30:86:5d:11:11:cb:1a:d3:3f:
2a:0a:a3:22:8d:d6:35:d0:e8:a8:79:3b:f3:5b:16:52:b1:93:
a0:74:4a:e9:a8:18:d2:90:5d:44:75:93:4a:5c:a8:e6:36:52:
8f:b0:48:74:87:b5:60:39:72:44:85:0d:ef:39:67:da:1b:0d:
01:6f:c7:3f:75:d4:50:34:f1:e3:29:15:6d:a8:0c:c7:22:2f:
14:ea:0c:3e:33:4d:17:0b:66:33:d4:f9:4b:c3:aa:c7:74:93:
15:6e:98:7f:49:55:cf:21:79:4b:d2:36:29:e8:50:a7:59:a2:
2c:e6:54:d4:10:66:1d:12:83:ea:75:8c:d1:07:72:d4:0f:69:
37:a6:28:2f:34:f5:c1:53:20:d5:4d:cd:a5:1b:1e:40:93:34:
20:3f:22:59:d8:c3:1b:8a:74:b9:bc:b0:82:c1:a5:dc:de:86:
8b:be:ea:3e:99:29:a6:4f:5d:08:19:f3:2b:41:b8:64:59:c9:
b4:42:04:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:08 2025 by rpki-client