Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File: wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier: 6tAN14rvBM9iSsHV56dvVmV8TvxcxvlSvTpe+s0NR5U=
Subject key identifier: BF:65:D7:76:CD:68:82:ED:C0:7B:4C:40:12:7C:3F:6D:33:CA:F3:23
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 019A4F6265AAFBCD38FD0E91AE092EC77063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number: 0936
Signing time: Tue 04 Nov 2025 15:00:39 +0000
Manifest this update: Tue 04 Nov 2025 15:00:39 +0000
Manifest next update: Wed 05 Nov 2025 15:00:39 +0000
Files and hashes: 1: 1-XP7SSYynpJIZg4ibI0Wpm_d7y4.roa (hash: LOYh8aPG/hc+f2Wb/Cw6QofBs2xxLo7hf2Lj5w8CzgE=)
2: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: KsOxSUpxp7SScJ0H5jq0ctSy0N7Je0si+dHAE4kd6/A=)
3: wtdVCL_vW5DHi-a_XtUsZ9JKKCw.roa (hash: JT8633z6qqiHZIgSN23W3yJc2J/8lJJEZ1oYIJiRcWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:65:aa:fb:cd:38:fd:0e:91:ae:09:2e:c7:70:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Nov 4 15:00:39 2025 GMT
Not After : Nov 5 15:00:39 2025 GMT
Subject: CN=bf65d776cd6882edc07b4c40127c3f6d33caf323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:b9:de:96:7c:74:ba:26:6d:65:38:59:24:
c5:80:90:c6:e4:cf:42:dc:75:0c:d9:93:3e:f9:be:
36:dd:c5:28:e2:01:36:15:f3:c5:6d:90:d9:1c:28:
8d:4a:34:6c:bd:4f:ad:95:b3:32:5e:f5:c9:84:fd:
4f:2b:7d:66:2c:ff:6c:0d:4b:1a:82:3e:32:eb:6a:
be:3d:47:c9:48:d4:55:7f:02:14:75:77:21:ad:0e:
c5:24:2a:4f:ac:ba:ca:d8:d7:b8:2d:5d:56:bc:cb:
21:33:d5:58:0f:9c:70:a0:a2:a6:8e:12:c4:ae:d7:
6e:90:f5:3f:6d:f0:40:d4:88:76:cb:91:dc:a4:bf:
de:fc:dd:25:57:4d:c7:58:11:1d:1e:04:63:55:23:
d5:34:a5:e5:00:32:e1:ca:4a:3d:75:02:ec:4b:7f:
5c:84:0e:e2:b4:a5:59:3c:43:62:47:e6:0c:64:e0:
6f:74:d5:3a:fb:6b:22:a5:47:ec:bb:10:d2:77:0d:
c5:f3:23:ac:85:af:98:a8:07:2f:f3:46:57:83:e2:
ab:cf:bd:b1:e5:57:5d:e9:91:d1:d2:ec:52:19:70:
b0:d1:e8:96:7a:f7:84:d7:45:c5:62:23:f2:c6:eb:
6e:60:d9:84:74:9b:2e:09:eb:50:35:09:3e:cf:79:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:65:D7:76:CD:68:82:ED:C0:7B:4C:40:12:7C:3F:6D:33:CA:F3:23
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a5:61:fb:7f:03:ab:ff:50:bd:a6:e6:06:df:16:05:4b:21:
4f:f6:03:29:19:f9:54:2e:91:3d:f1:14:29:3e:fd:f3:94:46:
46:8a:72:0e:f6:38:f5:9d:e3:65:fc:44:d9:06:be:23:b0:72:
54:00:60:ae:f0:f3:7e:ea:c6:3f:f9:51:9f:11:f3:0d:aa:37:
6a:68:f7:76:2b:41:15:7b:09:ce:c6:21:ee:4d:60:89:1e:df:
82:a3:43:34:f9:62:59:88:64:f0:cd:b4:47:65:a3:a2:37:0c:
ff:b0:93:a1:29:31:73:8b:5f:50:72:6e:e5:55:a4:bc:ef:14:
55:6d:e5:d3:fa:44:60:3e:3c:6a:54:74:a6:71:f6:eb:7e:7c:
be:44:2b:bd:23:15:28:51:0c:61:cd:51:d2:b3:7b:d6:a6:c4:
99:4e:61:fb:46:bf:52:e1:0a:9d:24:3b:01:27:26:54:6e:d3:
c5:f4:17:85:aa:0a:57:1d:7f:81:92:0e:33:80:6a:70:c2:7c:
d3:66:ce:cd:25:b5:6a:58:49:dc:b0:b8:71:35:f8:e4:6f:30:
78:08:70:54:72:c8:99:eb:0b:13:ba:b8:90:7d:ab:53:29:fd:
49:33:c6:2e:18:d1:f6:19:30:11:cc:6d:61:1a:5e:f7:c6:35:
6f:5a:32:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:09:59 2025 by rpki-client