Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
File: wXLnuWJS7qhzJjPTulGpsFWDp7M.mft (raw, json)
Hash identifier: O9LIIumL2kwuhXpfYK1dEhlEe7CA1y5w/X7Aep+wyyg=
Subject key identifier: AF:2E:E9:22:6E:3F:36:E2:CA:13:C3:C1:FE:D6:B3:FD:14:59:FC:E2
Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
Certificate issuer: /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Certificate serial: 019A52D154302BFA75E79D05EE4C8E5A4EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
Manifest number: 0DF1
Signing time: Wed 05 Nov 2025 07:00:41 +0000
Manifest this update: Wed 05 Nov 2025 07:00:41 +0000
Manifest next update: Thu 06 Nov 2025 07:00:41 +0000
Files and hashes: 1: W1KkGv3sjtsEadnyDnbZKiSJ0W4.roa (hash: Hwc+g3pqAXEzqdnTsf6BwWsSvsLJSB5kNUhL8qZNZ1g=)
2: wXLnuWJS7qhzJjPTulGpsFWDp7M.crl (hash: fxBeoVupua/01vi1Nti6+M1biazyTRCtqnwuSem2QTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:54:30:2b:fa:75:e7:9d:05:ee:4c:8e:5a:4e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Validity
Not Before: Nov 5 07:00:41 2025 GMT
Not After : Nov 6 07:00:41 2025 GMT
Subject: CN=af2ee9226e3f36e2ca13c3c1fed6b3fd1459fce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2e:70:dc:35:63:c7:d2:77:f3:68:23:ac:14:
c9:9a:67:5e:ea:5a:b2:fb:ca:a0:a6:4a:e8:e8:67:
68:7f:7d:04:93:ef:c2:55:2e:71:52:65:f6:3d:45:
2a:03:74:46:ab:34:f9:75:2d:d8:4b:1d:65:65:55:
09:e3:c9:15:e8:48:bb:23:c1:c6:15:e7:42:56:fc:
a5:18:ba:8d:b8:cb:c8:2e:fe:a1:db:68:82:6f:3b:
ce:6d:7d:cc:d0:d0:87:07:8c:8e:57:b3:59:71:c6:
05:8b:ee:d6:8a:e4:4e:14:dd:bb:93:8b:ae:6c:5b:
5e:27:e7:d4:47:c7:cc:b1:68:72:5c:84:4d:73:b1:
1c:17:58:d6:ce:2d:1d:90:1d:9a:e3:37:d6:a6:4d:
62:d4:f8:5f:ff:e5:ed:c1:91:80:38:65:0c:39:59:
91:93:02:7d:78:1e:9e:3a:c3:03:74:f3:ac:81:cd:
c2:89:fd:3c:f4:9b:80:92:f3:95:58:9d:04:83:bc:
f7:37:7a:45:ab:5f:d2:02:1e:d0:e9:c3:d7:5e:0a:
a1:13:e5:e1:00:46:5a:7c:f8:0e:34:81:2c:b9:a6:
55:67:96:6d:ad:c5:70:98:20:88:2a:f5:f7:d0:13:
11:cf:5a:0d:ce:02:8c:e7:6a:40:9d:e7:2e:e2:00:
cd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2E:E9:22:6E:3F:36:E2:CA:13:C3:C1:FE:D6:B3:FD:14:59:FC:E2
X509v3 Authority Key Identifier:
keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:04:0f:47:07:cd:d3:9a:98:0a:78:3e:75:1a:cc:8b:16:14:
9f:ed:a1:b3:f2:44:fc:0e:8e:68:7b:3b:0a:cd:58:58:07:60:
77:8e:4e:a3:a6:98:91:bf:9d:c5:3c:5d:33:f7:a0:6d:8b:bd:
da:29:4e:40:e5:0e:b0:1b:ff:62:4f:5d:5a:d1:d9:4d:51:00:
10:fe:84:6a:72:7e:7f:27:fd:d9:7c:8f:f2:d2:46:2d:3b:ca:
55:13:dc:70:01:12:cb:21:09:c8:6a:dd:6a:ea:7e:39:aa:df:
2c:23:e8:8a:61:47:dd:34:fa:f0:7e:09:15:25:f8:99:df:9e:
27:e9:4e:b4:47:15:ae:63:b3:de:58:33:ab:20:1b:3d:84:62:
a0:3a:23:a8:16:b0:f4:da:0c:6c:e7:9d:af:58:0f:64:1a:f2:
76:de:52:3c:aa:68:37:cd:3b:54:08:af:a1:cc:47:2a:52:7c:
23:af:c3:31:c5:20:40:8d:51:80:16:17:06:1d:6b:8d:49:c2:
de:63:8b:b4:65:3d:a5:a7:84:cc:9f:54:03:3d:f6:e9:cb:3e:
0d:3d:9b:93:64:99:46:b6:08:13:99:31:18:b8:c5:da:5e:e9:
fc:78:8a:ef:43:f8:c3:51:b9:73:70:5e:30:c8:6e:e7:77:69:
b2:ee:27:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:56:40 2025 by rpki-client