Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
File: wxgakj6aw8AF60xz7ceh6DJaWx4.mft (raw, json)
Hash identifier: zXl+HQkCLxwLZaO18M8lt5W2AJo/+AoiOwLeBVtuJQ4=
Subject key identifier: EC:D6:0A:51:21:2E:0B:AF:48:3F:86:8B:08:68:75:A6:75:53:36:DD
Authority key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E
Certificate issuer: /CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
Certificate serial: 019A4C97DBD611B5FE4F773CA1E412CEA1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
Manifest number: 0852
Signing time: Tue 04 Nov 2025 02:00:11 +0000
Manifest this update: Tue 04 Nov 2025 02:00:11 +0000
Manifest next update: Wed 05 Nov 2025 02:00:11 +0000
Files and hashes: 1: H6hSTGzUXYO8wuCS7_uXx0OkwsQ.roa (hash: C3R1uTE0vZQdguq3OxSn35ovF8rEDK/1GfpIlJlHImc=)
2: j6m8JD754OZd2zfkrzPKc7t_k4U.roa (hash: hUQqPswFb44tCsj8bdeOO4xSCpedzp6XZaAwqO/TYtU=)
3: oPzqlVtclIS1SF4yLt-sGEys0Rc.roa (hash: e1YYcOS89IG2X1r/k2fMS0Qlsda+NH4z6UJ1+i2AY+4=)
4: wxgakj6aw8AF60xz7ceh6DJaWx4.crl (hash: GY52TnRuGtMXl1iCWkqYJkzpUGQMAOCq+LZsCvZtfwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:db:d6:11:b5:fe:4f:77:3c:a1:e4:12:ce:a1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
Validity
Not Before: Nov 4 02:00:11 2025 GMT
Not After : Nov 5 02:00:11 2025 GMT
Subject: CN=ecd60a51212e0baf483f868b086875a6755336dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:a7:d5:22:2c:4c:e6:a8:05:00:b8:3d:5b:
a0:06:18:79:dc:f3:1b:f8:79:c6:46:27:e2:34:3c:
7a:df:6e:52:a0:dd:a4:34:80:60:ec:a0:ea:ed:41:
3e:8a:e3:e1:9c:46:cc:b4:de:5b:dc:8a:a9:97:56:
f1:29:d8:5f:da:85:1d:d9:45:23:56:90:f0:93:07:
3e:6b:6f:14:c8:e4:d5:85:01:d2:c6:b6:09:49:22:
2e:3d:11:29:75:b1:72:39:b8:f5:d8:20:a6:60:13:
56:dc:16:23:ed:51:d1:54:ee:17:a2:8c:7c:38:36:
7c:6c:ac:78:43:c5:d5:93:a7:5b:17:c9:00:b8:45:
bf:65:92:00:27:9d:0b:56:96:1f:f4:43:97:0e:a0:
8c:7d:99:3c:f2:b1:9a:a6:b8:2d:88:bd:a8:c5:7a:
2f:b6:97:1f:fc:36:25:1c:90:d2:2e:85:c2:2e:c0:
72:21:9c:00:cb:cf:47:82:4f:4c:d3:1a:f4:69:29:
2e:be:0a:36:d3:c8:54:45:16:8c:35:27:76:d3:2e:
73:2a:4f:d7:b4:8a:78:63:0a:49:fd:43:21:69:91:
ba:c9:98:88:f1:f0:f7:9c:bc:d3:85:e7:f1:8b:76:
8d:03:3e:fd:d5:43:68:d9:23:02:35:df:0c:89:31:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D6:0A:51:21:2E:0B:AF:48:3F:86:8B:08:68:75:A6:75:53:36:DD
X509v3 Authority Key Identifier:
keyid:C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:18:e8:da:be:59:43:1b:b0:a2:6a:be:44:4d:0f:8b:47:37:
80:14:dd:13:88:22:53:8c:39:d0:4b:56:70:71:be:e5:73:a6:
d4:48:34:16:2b:68:0c:da:7c:db:64:da:bc:a9:47:d3:76:03:
0a:35:07:89:49:62:56:65:60:19:cc:16:02:07:da:a8:c4:cc:
7e:7d:57:c0:0a:11:31:6a:31:0b:75:79:b4:1c:2f:6e:a8:f7:
2c:57:70:5c:f9:c7:53:ea:9d:64:42:90:e0:b4:24:f3:05:c3:
4d:16:89:b3:df:6c:a1:49:e7:70:93:97:ac:f5:82:de:20:d5:
8e:bc:0e:54:ef:16:aa:4b:0e:22:2d:a7:9e:9f:2c:df:b5:78:
86:e4:c0:b5:31:21:66:68:90:e4:9d:16:0e:02:d2:3b:54:d3:
5a:ae:40:89:11:7b:49:fa:77:c6:d1:dd:3f:ad:77:6c:7a:50:
50:65:ef:60:af:74:07:0e:4d:2b:23:79:de:50:6c:4f:22:5f:
b1:9e:52:08:6e:40:e4:66:e9:28:70:5a:8d:fb:51:31:dc:9c:
6f:a6:35:21:f0:70:84:16:1e:7c:00:97:e8:61:3e:79:3d:2e:
89:91:c9:87:57:56:49:e4:9d:4f:4a:77:81:12:5b:bb:25:f7:
17:36:dd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:49 2025 by rpki-client