Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
File: wKatm4cwm9AHnPowXUhhP4fEcNg.mft (raw, json)
Hash identifier: gSIoMEE4wm+sQODWaGkgW7zFIIe5v85eCQodEnxwvZQ=
Subject key identifier: AE:55:8F:E4:EB:37:0C:DA:40:52:42:7E:A2:64:17:4E:F3:B2:2E:4C
Authority key identifier: C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8
Certificate issuer: /CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
Certificate serial: 019A4F98C9B2E33959F2F256A8E784A293CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 16:00:04 +0000
Manifest this update: Tue 04 Nov 2025 16:00:04 +0000
Manifest next update: Wed 05 Nov 2025 16:00:04 +0000
Files and hashes: 1: fpbdoc2TI64xJycuwiFh9Gomr6A.roa (hash: cljwIs+0uajrjK0gVgOImyvI4O/zMxkT1vLqnWwJwe0=)
2: wKatm4cwm9AHnPowXUhhP4fEcNg.crl (hash: 8CKKBZF3vWEobsSZ4SLsTpBskDl4QpcLCEAXSTurSdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:c9:b2:e3:39:59:f2:f2:56:a8:e7:84:a2:93:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
Validity
Not Before: Nov 4 16:00:04 2025 GMT
Not After : Nov 5 16:00:04 2025 GMT
Subject: CN=ae558fe4eb370cda4052427ea264174ef3b22e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:68:cd:60:3f:9f:94:77:71:44:0f:ff:3e:42:
af:24:7f:bb:0b:c5:fe:b3:1f:9b:12:ed:dc:24:49:
70:5c:01:4f:c8:62:6b:4d:1b:79:29:e7:49:cf:49:
d1:bf:80:30:b2:2e:23:c2:74:2f:25:f3:92:f7:3d:
d9:b6:dc:9d:5a:21:11:0c:78:c1:2e:7c:d0:53:b9:
4a:81:79:f4:dd:01:93:24:15:35:b3:ae:c4:c8:67:
3b:11:7a:66:67:38:56:0d:ad:77:f8:96:35:69:6e:
3c:18:aa:17:17:d0:6f:ea:e5:78:02:f9:ae:75:5a:
cb:87:a6:f8:90:cc:2c:4c:ad:61:7e:32:41:97:c0:
65:92:2a:d2:18:d3:da:ac:bc:f3:af:2d:e2:10:41:
1f:93:bc:50:f0:53:8d:f3:3a:10:1b:37:4d:1b:fe:
66:e8:9d:6e:8a:44:bd:82:12:97:9d:82:fe:65:03:
2d:52:43:6d:b6:83:7e:44:46:6d:58:a4:0b:f7:ef:
a0:7e:41:64:ba:dc:ad:48:99:70:16:06:67:c8:a8:
e5:84:58:64:2d:e8:39:71:06:ce:12:62:f8:9a:13:
aa:17:32:19:f7:54:f7:1d:09:38:ba:0e:40:35:26:
61:f8:d7:e8:3b:b1:dd:4e:b2:c4:d8:a2:7c:4d:b2:
d9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:55:8F:E4:EB:37:0C:DA:40:52:42:7E:A2:64:17:4E:F3:B2:2E:4C
X509v3 Authority Key Identifier:
keyid:C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7a:0f:05:84:8f:b4:28:4f:00:12:9f:0a:9c:ec:51:fe:08:
56:8b:b7:b3:11:7f:a0:45:11:16:fc:0b:10:9e:60:c5:54:ef:
7d:8a:e8:ae:e2:22:cf:03:e9:46:1c:23:0d:ab:e1:5e:f4:da:
bd:f7:66:e6:0d:e0:6f:4a:0a:36:fc:53:9b:87:73:74:cf:1a:
46:6a:b9:a5:ed:ff:03:34:98:9e:00:85:2d:c6:79:27:60:32:
aa:14:52:25:7e:72:75:d2:eb:33:d2:5d:41:61:f7:90:4e:13:
8b:6a:8d:b6:2e:74:96:f6:26:9a:c9:7d:5d:d9:54:1b:87:76:
b2:5c:6f:13:fe:14:4b:c4:2e:30:8a:b2:2a:12:19:da:0c:73:
cc:3f:cc:cb:c2:0f:18:4e:fd:95:22:11:ec:6a:1c:6b:a9:fb:
f9:f3:ce:cd:71:0d:f6:ef:4c:89:1d:4c:87:f7:2d:46:8e:e3:
68:41:1b:73:16:a5:f0:f7:3b:60:44:89:e2:ff:b3:43:36:d0:
56:ed:cf:d1:f3:89:27:07:b5:5f:db:1d:16:a2:e1:91:d2:f2:
88:63:3a:30:0f:a2:e7:ee:50:d2:3f:5c:59:74:35:a9:9e:48:
c2:a0:ba:be:05:cf:1a:dd:cf:8d:26:44:dc:45:b7:de:79:cf:
47:b5:4d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:30 2025 by rpki-client