Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
File: wv0sdK1vri3dD26cOf3oMYk65vk.mft (raw, json)
Hash identifier: 4HMCV5JzEuW6C5IR0LY16BaF4zlXw5FkLeJPVOjKnt4=
Subject key identifier: EA:0D:4C:20:8C:12:C1:CC:D3:88:7B:47:40:81:16:9A:1F:4A:89:BB
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Certificate issuer: /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial: 019A4F2B4E8E0BC21664EE20B82FD3E118C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
Manifest number: 0D11
Signing time: Tue 04 Nov 2025 14:00:29 +0000
Manifest this update: Tue 04 Nov 2025 14:00:29 +0000
Manifest next update: Wed 05 Nov 2025 14:00:29 +0000
Files and hashes: 1: g0tJ6HAhOEXfRw9hpwjv9qGtrPM.roa (hash: zh4s24WsuFFY5gPWDTRufukEWHpAkIbH1s15tmhjBvk=)
2: vJU7TYTNdrKazsGkyXHeqona0Pg.roa (hash: iL9E8+h90/3EbQ79KJw98Dj0cUBdo61gLVaVCxN/WHk=)
3: wv0sdK1vri3dD26cOf3oMYk65vk.crl (hash: KteF1filEHEJlsatfuTUw522QZVeBb5TTeLEvkoX6m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:4e:8e:0b:c2:16:64:ee:20:b8:2f:d3:e1:18:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Validity
Not Before: Nov 4 14:00:29 2025 GMT
Not After : Nov 5 14:00:29 2025 GMT
Subject: CN=ea0d4c208c12c1ccd3887b474081169a1f4a89bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ce:ab:ed:ff:96:1b:66:af:7b:2c:f5:d4:20:
da:65:23:51:40:f4:cc:0c:83:ce:46:c6:0a:4d:f0:
14:0c:9d:c1:16:a0:0b:8d:1f:bb:d3:e0:c5:4f:3e:
1a:95:45:04:fd:55:e0:e1:08:1f:e2:0e:83:45:1c:
8f:b4:bf:1f:ce:75:81:48:0a:c0:57:1a:f0:30:73:
ac:e1:12:06:e1:56:f4:4c:96:9f:5f:fa:af:76:c8:
4f:a9:12:ac:fc:44:68:f7:89:05:6e:bb:c0:b1:93:
29:e0:ec:9e:36:94:4c:24:29:2a:db:db:3b:4e:e3:
c9:ee:e1:60:b6:86:06:60:9e:83:64:75:56:a9:95:
70:91:18:29:f2:f4:d1:b7:0f:e0:d8:f5:77:c6:7c:
36:2a:00:60:fc:5d:f1:f0:ce:03:bb:1f:80:25:4a:
13:3e:65:d5:dc:a9:f7:58:06:3b:ed:2d:5d:87:78:
0d:99:37:57:d4:d6:0c:78:ea:a0:9e:0b:7e:b4:c1:
dd:e0:9f:85:b7:09:c5:cf:70:cb:a0:b9:59:26:05:
a8:76:1c:be:5c:c2:bb:51:93:19:0e:0e:8e:c4:51:
de:21:0b:4f:2c:64:9f:f2:14:dd:4b:c1:2a:e3:e7:
2d:38:4a:5a:42:c3:f5:d3:48:d6:4b:09:df:b9:31:
f4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0D:4C:20:8C:12:C1:CC:D3:88:7B:47:40:81:16:9A:1F:4A:89:BB
X509v3 Authority Key Identifier:
keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:74:a6:42:d5:c6:7e:6c:5d:bf:a1:fc:33:e4:7d:22:dd:84:
b6:e5:b6:75:89:71:83:ad:3b:0a:02:20:a4:a0:a6:f6:ae:75:
81:b0:8a:26:c5:ec:fa:33:2e:b9:c5:9d:f8:df:d1:43:b8:8e:
b3:10:95:ed:fe:b1:2f:f3:50:19:39:c6:32:78:45:6a:14:4d:
0f:f7:ed:c3:16:c5:97:a2:83:ee:e5:bf:c1:a5:9a:3b:fa:fb:
3e:19:b6:9c:2e:b2:2b:86:8f:b3:11:17:26:1c:08:80:80:03:
65:97:b7:6e:65:60:ea:da:78:34:e7:e8:08:cd:b8:66:73:54:
9b:09:aa:36:42:f7:ca:55:4a:8e:ff:2c:11:1b:b5:36:64:52:
fc:58:e5:19:7e:8b:5c:d2:6c:fe:66:53:7b:b1:20:11:7b:e9:
f7:58:56:9d:a6:02:a5:8d:6c:8c:c5:d1:41:a3:13:d6:8f:2f:
05:9b:b3:61:1b:f5:df:5a:09:09:8f:7c:be:15:89:73:e7:90:
2b:c0:4c:ac:06:14:a5:95:da:7f:23:0f:56:d9:78:71:5c:a1:
c7:1a:1b:b5:47:0d:1f:6b:28:c6:4d:69:87:44:8b:b6:45:82:
42:22:70:22:ce:86:b7:29:d4:d3:b3:d9:1c:61:56:fc:f0:a3:
56:29:97:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:00 2025 by rpki-client