Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
File: wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft (raw, json)
Hash identifier: E/dFTscY7dquc0Px1HASSH/gNAtnSbcwFwSRWmUlELI=
Subject key identifier: 07:3D:9B:1A:61:DA:F5:9A:75:65:9E:55:BE:6A:4E:50:B8:88:D0:A0
Authority key identifier: C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
Certificate issuer: /CN=c11f603de409a710fdae62cac1c55393a953b5b5
Certificate serial: 019A4F2B94620C20D8E04BA94343F2E09460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
Manifest number: 0402
Signing time: Tue 04 Nov 2025 14:00:47 +0000
Manifest this update: Tue 04 Nov 2025 14:00:47 +0000
Manifest next update: Wed 05 Nov 2025 14:00:47 +0000
Files and hashes: 1: UsAeeJKz5x5UM9R7HFO2Dgzi0jA.roa (hash: FFiDVfqG1v30MyW/O7JaJbrLiihT2L0idYJ853z7lV4=)
2: wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl (hash: yJCpzOjpEOHAwwXQ9O3c4k3Vu4XGJFBAQzoie2Q7EAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:94:62:0c:20:d8:e0:4b:a9:43:43:f2:e0:94:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11f603de409a710fdae62cac1c55393a953b5b5
Validity
Not Before: Nov 4 14:00:47 2025 GMT
Not After : Nov 5 14:00:47 2025 GMT
Subject: CN=073d9b1a61daf59a75659e55be6a4e50b888d0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:31:f1:e5:35:19:e1:55:74:f2:d2:18:99:
28:0d:ae:6a:c6:50:3d:3e:2c:af:c6:ba:34:ab:97:
0b:dd:96:11:e0:e2:e9:e9:37:da:46:ed:f1:21:51:
4d:91:4c:ab:80:12:40:17:71:14:20:f8:95:3a:2f:
26:d1:cd:3d:b2:b8:fc:47:54:b2:32:d4:c0:bc:14:
fd:00:85:3c:77:b1:42:aa:0a:ed:37:a9:09:71:a3:
52:18:89:8c:bc:96:7e:92:ec:f7:0f:e5:37:a8:9d:
a0:35:31:ca:a1:85:3b:6d:0c:11:88:d1:4c:30:ea:
90:eb:73:8f:d9:c7:e7:8c:e8:a8:a4:47:57:c2:59:
f2:e8:d2:04:58:ce:e3:97:6e:b5:8e:28:fa:93:ac:
07:28:fd:57:f6:f0:b9:0d:62:7b:55:c1:6e:58:8f:
4f:9a:64:6c:00:1a:97:6d:ec:a9:36:2a:cf:b7:9d:
3c:be:c1:88:e4:c1:de:6f:9a:18:15:ba:ce:0e:c7:
04:c8:a6:a6:6b:b7:34:c9:84:ab:a6:85:a1:75:eb:
1f:9d:93:f4:5a:60:e2:aa:2c:22:5e:ef:21:36:ae:
41:71:d6:b1:87:28:1a:e0:99:0a:54:74:3c:db:c9:
20:ea:57:15:c3:32:be:c4:c4:22:73:f8:1a:2f:d6:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3D:9B:1A:61:DA:F5:9A:75:65:9E:55:BE:6A:4E:50:B8:88:D0:A0
X509v3 Authority Key Identifier:
keyid:C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d1:74:d5:0f:94:78:6d:3f:b0:a4:85:9b:00:1f:05:de:4d:
cd:5b:cf:a0:9e:9a:ac:b8:8b:1b:69:67:9a:bf:e8:fc:9a:43:
1a:0e:6b:a6:b7:f2:ae:78:7e:32:40:6a:33:68:6b:e7:f8:7a:
26:75:3c:68:e1:9b:76:76:3f:1b:85:e1:d3:46:54:10:75:16:
d4:a4:0d:d8:28:17:17:e4:04:2e:92:c2:bf:df:6a:85:68:51:
f7:26:e6:a9:6d:c3:b2:87:d3:a4:d7:b1:bf:a5:61:86:db:c2:
d1:06:8f:3e:b0:92:3e:13:a9:57:f5:bc:21:d5:63:6a:1b:43:
cc:17:ca:52:1a:6c:26:bf:d8:fc:6b:98:e8:60:99:89:c4:45:
8c:6a:56:35:e7:e4:fd:bb:3c:17:be:b5:41:78:38:fc:f7:51:
1a:06:89:71:09:b3:c6:38:4f:8c:96:96:0f:97:7d:be:69:cb:
43:0d:19:88:12:0f:ea:e7:fe:ab:71:19:e4:be:33:2d:e9:3a:
05:55:f3:e8:a5:b2:fb:c3:d2:97:3e:c6:1b:82:d0:6f:ec:f9:
03:cb:4a:e1:64:67:12:42:02:38:51:20:68:e4:cc:9e:61:ea:
10:c9:08:5c:38:ad:39:b7:00:20:89:75:31:07:51:51:4b:22:
ec:4c:8d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:58 2025 by rpki-client