Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: OMJVL2qJDWoovio0zz+KqJ4VhbOYW7XWFEag1lWMbD4=
Subject key identifier: 30:8A:D7:A8:B5:AB:B6:AF:5F:22:61:FF:CE:B0:7C:D2:19:0E:FE:CD
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 019A4D745330F712B90EDDBB9D52FE01B361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 06:01:00 +0000
Manifest this update: Tue 04 Nov 2025 06:01:00 +0000
Manifest next update: Wed 05 Nov 2025 06:01:00 +0000
Files and hashes: 1: Xcqq0m0T1yRbHOKg5cEHJjsB7MI.roa (hash: oC9S1bEkPnnQvPMvmcVeOLv10F6tSd5dc+2qe4J3PwQ=)
2: bCoGHAtTSxDtX1oYqNKnhpGYY0Q.roa (hash: eFHrLDgLSqCz0ldYK/DeOjHpdOvOetjhzRdvuzqcBXw=)
3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: URzkcFmBP2jqw3FzgAHty3FS9bJNyqqn+dwl/c4sFk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:53:30:f7:12:b9:0e:dd:bb:9d:52:fe:01:b3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Nov 4 06:01:00 2025 GMT
Not After : Nov 5 06:01:00 2025 GMT
Subject: CN=308ad7a8b5abb6af5f2261ffceb07cd2190efecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:68:65:3f:57:3b:70:96:d9:aa:cb:14:71:
a0:ee:7f:2e:1c:26:04:76:c4:ae:25:4b:ec:01:63:
33:23:01:22:df:12:8c:fb:f2:2f:28:e5:6b:2e:c0:
43:69:8a:0c:bc:70:e0:cd:dd:92:de:04:21:45:0b:
eb:86:35:92:2f:09:0f:2b:68:77:3d:ed:c1:3f:1c:
26:17:70:1a:16:cf:98:99:9c:b8:65:da:5e:2e:7d:
7d:ab:5a:19:7b:8c:8f:6b:83:72:fb:28:09:2c:14:
7d:76:47:b2:a3:9b:17:10:fd:96:d5:8a:76:55:7c:
5b:02:3f:b0:18:52:e5:fd:0d:c2:36:f4:bc:80:b6:
b2:53:cf:e4:64:7b:c7:91:b1:cf:a5:16:3b:8d:d9:
20:c1:c9:7b:fd:cb:33:af:f2:ff:16:2c:c6:58:c0:
5b:ef:0c:07:01:88:8b:9b:70:e9:bc:df:13:c6:b8:
67:1f:bc:2f:72:1f:b4:a7:ac:7f:21:ad:82:37:ef:
34:cf:aa:07:9a:7a:2f:5a:52:d4:c8:e4:e1:da:76:
94:13:df:bb:b3:7c:49:57:fc:9a:79:56:d7:61:13:
13:74:d2:ca:68:e3:d7:a0:24:39:7f:9f:1d:df:dd:
aa:35:41:b5:bf:a5:ae:ad:ab:23:d0:3b:79:27:30:
19:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8A:D7:A8:B5:AB:B6:AF:5F:22:61:FF:CE:B0:7C:D2:19:0E:FE:CD
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:64:a7:ce:a6:62:4e:99:9e:ec:22:d1:72:49:af:d6:86:0b:
50:bd:3a:dd:0e:82:be:2e:84:d8:b5:47:56:80:4d:e9:7c:c4:
72:41:48:85:3c:fc:2a:54:a4:2e:ff:87:bd:72:25:a5:3a:79:
85:c2:c6:d4:84:19:73:c0:02:6b:6c:e4:c3:90:af:2b:fd:6a:
9f:13:ad:44:86:46:80:6a:b0:c6:21:1b:bc:7a:b9:82:0f:68:
75:b2:77:70:5b:94:46:ff:1b:3d:e6:73:1f:35:4c:36:f5:57:
a1:f4:74:86:98:6b:ad:e9:46:b5:10:90:0e:ee:97:4a:8e:ea:
5b:af:e4:a9:c7:74:af:9e:63:59:28:c0:52:c8:0b:97:35:c0:
d7:9c:e0:a1:89:4e:9a:9f:51:e1:12:d9:1c:6c:2e:c4:6b:46:
68:21:92:09:8c:cd:e0:e7:da:e4:1e:f2:62:65:47:ff:e5:44:
bc:7d:17:23:c4:de:3b:91:33:95:ae:27:97:f7:91:d8:17:1e:
4e:ad:5f:17:67:04:7e:25:9b:79:eb:58:7a:ce:3f:01:0d:da:
a4:32:4e:d6:d7:b0:ff:86:0a:83:42:40:6f:8e:a2:3e:f0:a1:
b4:7c:06:41:28:f9:b3:c6:e6:ad:aa:0d:fc:f5:eb:e1:ab:b9:
25:60:f0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:32 2025 by rpki-client