Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
File: wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft (raw, json)
Hash identifier: D5sIArCHqoGp94BkRInmi0SGMTBgEqkxvskZAOlNn4s=
Subject key identifier: 6E:29:8B:10:88:B7:CA:5A:39:60:20:A6:C1:03:85:11:37:AA:E2:C9
Authority key identifier: C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4
Certificate issuer: /CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4
Certificate serial: 019A52D254CAA4683210F76D9A91E59FABDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
Manifest number: 1335
Signing time: Wed 05 Nov 2025 07:01:47 +0000
Manifest this update: Wed 05 Nov 2025 07:01:47 +0000
Manifest next update: Thu 06 Nov 2025 07:01:47 +0000
Files and hashes: 1: 2tiVBKWJb3sKibII0w4_JEP8cX8.roa (hash: yXLW83i0e/6bCMs04Sj4WwVKDgNnsbMkg4zpZba2Js0=)
2: wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl (hash: DHN5uymuSh0BdvGbRwRcofofGIcZBdxlcZLgbsM9P+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:54:ca:a4:68:32:10:f7:6d:9a:91:e5:9f:ab:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4
Validity
Not Before: Nov 5 07:01:47 2025 GMT
Not After : Nov 6 07:01:47 2025 GMT
Subject: CN=6e298b1088b7ca5a396020a6c103851137aae2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:f8:bc:bc:c8:2d:24:af:00:b7:ea:48:ff:
d7:ea:c2:30:46:12:23:c9:35:98:00:8c:55:10:ac:
9a:51:c1:13:66:46:81:a7:8c:44:cf:04:e4:82:bf:
b5:2b:c2:24:ef:60:f6:99:cf:14:6a:2f:7f:a7:3c:
e1:d8:70:62:d4:b0:61:db:cd:0b:33:a5:c4:1e:f3:
1c:11:b1:e4:ce:f2:ac:56:4e:ad:95:b9:9f:cc:80:
6d:5b:a4:4a:9d:ca:30:c6:2b:75:c9:55:f9:4a:14:
af:fc:71:4b:db:d0:1a:e7:e6:06:10:17:ad:3a:be:
97:e4:eb:bd:0c:48:a9:6e:94:47:d1:ea:ca:e5:93:
c6:8b:96:06:41:a3:93:48:f0:6d:ab:93:6a:4e:cb:
ee:61:03:be:0d:b9:ce:30:fa:31:63:50:98:5c:f2:
8f:f4:e2:ad:72:78:16:b5:51:bf:c9:54:f9:b3:d1:
cf:2c:08:be:80:30:1c:c1:5e:b6:72:8e:3f:a8:5b:
b3:60:45:2e:dc:b1:94:a3:d3:32:62:81:d5:8e:54:
4d:f4:7e:a8:91:43:fa:0b:76:b0:cf:28:3e:95:a5:
ff:5f:8e:55:c0:9e:5c:2e:9a:1d:05:b3:e7:27:69:
0e:88:59:50:07:18:a3:1e:de:8a:f2:8e:81:07:f4:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:29:8B:10:88:B7:CA:5A:39:60:20:A6:C1:03:85:11:37:AA:E2:C9
X509v3 Authority Key Identifier:
keyid:C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8f:2b:79:ab:3d:e4:cf:f4:00:ca:ee:58:dc:5b:ca:00:92:
c9:26:80:be:7e:59:27:fc:54:7b:94:29:ae:52:f1:94:99:3e:
0d:5b:b7:b0:1d:68:d2:35:8a:1c:ee:ac:da:03:4f:30:71:84:
7c:78:27:00:78:8f:6f:37:d0:74:3b:74:0f:4d:57:8d:c9:67:
88:a3:81:01:80:33:87:03:75:bb:b7:62:f3:b6:6e:49:6f:54:
2e:6e:44:39:6b:32:8e:be:30:dd:46:00:11:7d:45:ac:a3:23:
7e:63:d7:ec:92:6e:0b:71:a9:b7:fb:86:9f:aa:e6:bc:8c:cb:
44:e0:08:8b:b3:4b:ac:d4:c0:3d:2a:b0:59:26:68:61:78:88:
51:5b:86:7e:ec:42:33:34:02:de:61:32:7f:e2:91:4e:2f:e0:
64:02:3b:89:57:74:f9:2c:94:9e:f3:06:45:56:80:16:f8:e3:
6e:95:db:65:84:63:db:b2:a4:19:d2:0d:0b:01:02:38:7e:c4:
44:fe:6d:4b:dd:30:d8:4c:30:61:2a:bd:d0:5b:d6:96:50:37:
ea:2b:96:a4:32:4e:77:72:9a:c9:6c:a8:b4:72:88:05:be:db:
8b:41:b9:e9:46:57:60:d6:19:84:fa:2d:94:e3:1a:b9:8c:ae:
de:1f:1f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:36:05 2025 by rpki-client