Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
File: wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft (raw, json)
Hash identifier: S+2Fx9dsFb6UX0OYjAO/k8o4bkaAJ7FhrJ/dARE4uZo=
Subject key identifier: 7F:3B:34:D6:8C:03:2A:A5:5E:B9:9A:84:A3:A7:E1:BE:9A:62:7F:04
Authority key identifier: C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
Certificate issuer: /CN=c2bf81ab950a18034630c25830749e650eb4e634
Certificate serial: 019A4DAA771D4B716918677E787657A737E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
Manifest number: 067B
Signing time: Tue 04 Nov 2025 07:00:08 +0000
Manifest this update: Tue 04 Nov 2025 07:00:08 +0000
Manifest next update: Wed 05 Nov 2025 07:00:08 +0000
Files and hashes: 1: nlp-yymaqYzgw12m1QvoCWjeZIw.roa (hash: Yssi7rDTBVMdou6reFU3+Vkw3D/c6F2oI+HGCYZH4Sw=)
2: wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl (hash: MGr4jvyP9ZFPcR/CLzeLrddQMMCCUBWjmvpYd+FDBHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:77:1d:4b:71:69:18:67:7e:78:76:57:a7:37:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2bf81ab950a18034630c25830749e650eb4e634
Validity
Not Before: Nov 4 07:00:08 2025 GMT
Not After : Nov 5 07:00:08 2025 GMT
Subject: CN=7f3b34d68c032aa55eb99a84a3a7e1be9a627f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:23:65:eb:2c:a9:a1:19:e6:d6:af:ee:e2:
5c:3e:c2:f2:34:bc:63:4b:eb:33:b5:cb:46:5b:e4:
b6:d2:52:44:02:60:af:74:c0:a1:07:63:5b:1e:fb:
26:59:2e:89:0d:8e:e0:3f:ad:41:35:a9:89:dd:f0:
fd:07:e3:d6:f8:6b:40:08:15:10:28:83:e8:28:b5:
2a:fb:ab:ce:7e:51:df:57:a7:e0:5a:05:df:a2:ae:
97:1b:ac:90:f3:7f:f8:0e:db:78:c1:e9:20:03:b0:
7f:f0:49:14:b3:27:e5:b8:53:08:02:c0:43:d6:4e:
0d:0b:d0:72:0a:29:44:ec:65:62:8b:b9:3e:c6:3e:
a6:85:5e:48:52:31:94:dd:8e:30:d9:3a:63:a7:4f:
9d:28:e1:7b:53:b7:31:f7:70:2c:6a:6a:5b:6e:ac:
ee:3c:0f:41:9c:00:0d:72:03:ad:bb:3a:ab:3c:1e:
0d:6b:ee:61:f5:d5:e6:23:c4:9e:19:3f:75:9d:8f:
14:73:21:c0:74:ae:49:54:39:21:86:71:c3:e9:8b:
3a:13:a3:e0:63:c6:b1:79:85:8d:e2:58:2c:a2:18:
1c:8c:b0:50:8d:e0:10:9d:f7:8d:56:69:63:5e:f7:
39:a8:b9:da:87:fe:02:ac:f2:19:43:d5:3a:ad:4e:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3B:34:D6:8C:03:2A:A5:5E:B9:9A:84:A3:A7:E1:BE:9A:62:7F:04
X509v3 Authority Key Identifier:
keyid:C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:1f:2d:55:5b:9b:2b:32:42:4a:88:82:4d:6f:c5:c5:bb:92:
50:5c:cb:a4:db:01:fb:79:f7:bf:bc:60:c2:f9:8e:84:8e:53:
ec:0a:80:73:17:9f:be:89:6e:7d:b1:d9:d2:a7:12:cb:74:b2:
7d:78:72:f8:52:65:f9:78:e1:b2:4d:46:9d:e5:9f:1b:14:1c:
17:3b:66:27:66:86:b2:5a:8b:c9:98:62:68:c7:b2:5e:e6:13:
4d:54:2e:96:eb:1b:56:60:1d:a1:c6:b8:13:99:b8:c2:4b:23:
b3:5b:9e:b1:5b:11:56:61:03:a0:1f:73:39:43:bd:8e:cf:1e:
8b:97:54:9b:7a:a7:76:d5:33:ea:84:76:8d:53:b0:c5:19:f6:
f5:83:8d:62:45:d8:a7:c8:83:2d:f8:8d:a9:4c:65:89:72:e8:
e7:5b:40:f3:1c:4b:8a:97:39:8d:60:63:a1:e7:a1:12:a7:d4:
e1:70:e3:ac:8d:de:1f:c2:29:3f:06:1a:d9:8e:db:d3:1e:9b:
ad:76:e8:1b:13:58:13:17:a2:ca:65:3f:bf:30:0c:ca:ed:c4:
ca:a6:43:a7:14:f2:9b:8c:6d:cb:36:e9:d7:fe:65:e4:8c:83:
15:f7:a1:e6:a7:aa:a3:43:42:83:b4:a6:77:ae:c1:2d:67:75:
7a:ba:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:42 2025 by rpki-client