Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
File: wUMgTpetea1qHwlA70GxbyB7SJ0.mft (raw, json)
Hash identifier: yBixvPMq3LXN/Mv0QEX8Y4+xWAi90ZblR9ZJXCIxDDI=
Subject key identifier: 5B:37:F2:18:86:BF:43:92:01:01:BF:FF:9B:12:2C:D6:22:E6:D2:B0
Authority key identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
Certificate issuer: /CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Certificate serial: 019A52D1424CEA48434C5F42B70A31660AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
Manifest number: 6F
Signing time: Wed 05 Nov 2025 07:00:36 +0000
Manifest this update: Wed 05 Nov 2025 07:00:36 +0000
Manifest next update: Thu 06 Nov 2025 07:00:36 +0000
Files and hashes: 1: We_eJU8uhiQBtd3wrWn-ZlbXQRc.roa (hash: 6QN0Fg3SAd13aQtCCegpoqGppEXLz5qo/Z2EDHmRRaY=)
2: psikfGn6FpQqhh0DSl5jsvwmwiU.roa (hash: cPs/n9SJJJcAsyUWs++t4L7KylflYtT7QnrTpSDlQIQ=)
3: wUMgTpetea1qHwlA70GxbyB7SJ0.crl (hash: VPegjAPY4Jw5NcCSzQUoBsi9nMoOcRbftPZ9jPVo5wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:42:4c:ea:48:43:4c:5f:42:b7:0a:31:66:0a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Validity
Not Before: Nov 5 07:00:36 2025 GMT
Not After : Nov 6 07:00:36 2025 GMT
Subject: CN=5b37f21886bf43920101bfff9b122cd622e6d2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9b:df:3b:8e:8a:fd:ac:d7:dc:0a:1e:dd:83:
58:d8:4f:2e:fe:a6:05:d5:01:8a:02:67:3a:c6:14:
21:1b:b4:71:2f:b3:48:69:fe:04:c2:23:a9:61:e1:
af:f8:97:09:89:e9:f6:80:ee:3f:8e:b9:2b:f3:da:
f9:b5:ee:e4:15:83:7f:4a:48:c6:99:46:42:4c:ba:
a7:8d:32:82:4b:91:1e:d8:0c:db:a0:54:57:ac:e8:
94:8d:15:31:dd:19:c0:98:07:26:26:c4:b9:86:08:
37:db:1f:22:5d:22:b5:22:25:8c:4f:25:63:18:e0:
07:2b:d2:3b:12:b3:b9:71:8a:58:64:7a:7c:22:ac:
9e:43:12:c7:7a:ac:58:0c:4b:fe:d7:ec:90:c6:db:
5d:63:f4:7a:81:81:99:63:2c:8c:44:1a:4d:0e:b0:
94:a5:52:c4:aa:9e:4f:c1:90:73:2a:3e:6f:1d:43:
5a:af:07:a7:c0:6d:a1:da:8e:67:e9:fb:47:58:9b:
6f:8e:fd:47:bf:a0:61:58:fb:ef:cd:05:e8:07:af:
6b:2c:66:24:e4:6d:88:87:32:c4:9a:3e:8a:5c:72:
6c:57:7f:4a:00:54:80:dc:4a:c0:3c:6d:f1:37:e2:
1b:b9:03:17:b9:89:bb:75:3a:fc:46:80:33:0d:01:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:37:F2:18:86:BF:43:92:01:01:BF:FF:9B:12:2C:D6:22:E6:D2:B0
X509v3 Authority Key Identifier:
keyid:C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c7:26:eb:5a:bd:35:38:ce:ae:18:57:12:19:de:a9:73:98:
a7:ca:5a:54:b7:ae:71:fb:d6:1b:3d:12:62:fc:9c:23:5f:23:
02:9c:9a:00:37:9e:83:64:7d:4c:7d:2f:7e:da:09:c2:5a:51:
e4:dc:a9:2f:91:2a:a4:f2:79:1e:d8:48:21:e0:38:41:c8:15:
4e:27:db:8c:58:c0:aa:92:39:f0:c1:6b:33:eb:7f:28:e5:d8:
2c:9c:87:95:41:a7:c5:c7:a4:0d:55:1b:3e:46:2a:dc:a8:33:
8d:0d:16:42:9c:ed:a1:83:34:41:9a:ad:c8:72:b5:cc:2b:3b:
ea:d7:26:cf:75:d7:ec:c8:ae:a9:d8:ce:3d:56:d2:ed:4c:c7:
52:09:69:32:8a:da:26:16:2f:10:43:46:4c:4d:7e:8f:8a:75:
55:15:49:2e:99:7e:8d:17:9c:71:c6:e9:41:e5:da:00:fd:a2:
41:6c:2f:8c:a7:ca:f6:93:11:57:79:55:d1:a0:20:b7:b0:8e:
14:41:dc:f7:55:3c:6b:73:5c:82:be:0f:0b:56:48:67:37:72:
c3:29:1d:7b:c9:12:63:b8:fd:15:bd:c6:56:fd:7c:3a:fc:e5:
54:d4:63:31:24:f6:eb:bd:2a:2f:ad:b7:d8:1c:a0:16:41:27:
de:a7:47:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:01:46 2025 by rpki-client