Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
File: wjZC0as50wnsXzPk6IFK3DWEgl8.mft (raw, json)
Hash identifier: XivnHjRMPyvwODGu8efPFKhsni0Ft+ZkQ6rSaeH+dCY=
Subject key identifier: CC:C3:1A:58:54:8A:58:B5:81:25:FA:46:5A:E9:59:55:CA:5C:EC:3C
Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
Certificate issuer: /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Certificate serial: 019A4D73CB48B413279DC4B5E16647530E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
Manifest number: 0BBE
Signing time: Tue 04 Nov 2025 06:00:25 +0000
Manifest this update: Tue 04 Nov 2025 06:00:25 +0000
Manifest next update: Wed 05 Nov 2025 06:00:25 +0000
Files and hashes: 1: XIE6pSr5Se_ddJ-sbF0LHvUWRNo.roa (hash: ksy2bMoShyEx+Z2LrrV0ovXdXkbwK/G4ElQgVhhEd+k=)
2: wjZC0as50wnsXzPk6IFK3DWEgl8.crl (hash: N/giHGrpB6mAYq2ZDNGZQZLuA5JGmwte+pZJrjuopK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:cb:48:b4:13:27:9d:c4:b5:e1:66:47:53:0e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Validity
Not Before: Nov 4 06:00:25 2025 GMT
Not After : Nov 5 06:00:25 2025 GMT
Subject: CN=ccc31a58548a58b58125fa465ae95955ca5cec3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:29:a2:56:34:ad:00:71:e4:43:44:19:aa:
2b:0e:16:a6:14:dd:ce:18:48:5e:7c:22:9c:8e:ef:
6e:d5:c4:ce:f3:d3:78:9e:55:c1:3b:d9:30:5a:9e:
4e:2c:f4:68:54:12:11:51:06:e7:e9:97:58:eb:20:
1f:e5:19:24:ff:30:a6:bf:dc:50:7f:6d:e2:0f:c0:
67:b6:d9:87:dc:e4:cd:2c:71:b1:e1:cd:6e:31:58:
c3:07:ca:0f:15:20:ff:1d:a7:b0:78:e4:6c:f5:57:
3f:6e:39:b6:1e:9f:d0:38:83:f8:b3:d5:ca:5e:3f:
fb:dc:82:b2:9b:75:dc:96:3a:81:59:bb:b5:06:82:
bd:59:e2:58:ed:3b:50:47:a3:5e:1d:ea:17:ac:89:
ce:ad:6d:a3:73:18:57:7d:19:76:86:6c:05:85:65:
52:4f:e9:4f:6a:11:1e:6b:37:bb:e4:54:cc:3f:2d:
22:57:b7:73:9b:84:e8:e1:f4:ee:e6:3b:25:71:83:
c7:56:02:f6:92:e1:1d:f3:37:74:84:32:68:ad:a9:
66:69:e1:f6:8b:fc:ae:68:69:c4:3a:26:c0:32:e5:
9a:15:20:4e:d7:1c:e8:e5:35:15:3a:09:68:9d:ad:
26:13:9b:c9:f5:27:93:12:03:7f:e0:68:05:ca:23:
22:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C3:1A:58:54:8A:58:B5:81:25:FA:46:5A:E9:59:55:CA:5C:EC:3C
X509v3 Authority Key Identifier:
keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:80:9e:37:cc:03:d7:2a:d7:e0:35:f7:60:1b:51:c2:f8:0d:
d2:a7:89:f6:f8:f0:d3:11:fb:52:1b:e3:1e:86:4c:eb:3c:ff:
7f:af:aa:3a:bc:f4:76:e4:80:04:45:e5:2e:65:98:cd:10:62:
71:4e:db:56:17:cd:15:c5:d2:67:09:33:9f:51:2c:76:b0:80:
5b:4c:92:8d:08:ac:62:e6:30:a8:1e:4d:33:b7:30:a9:51:0d:
ce:0a:38:bb:53:87:b5:38:45:9b:e4:66:cc:38:73:2f:fc:30:
ea:03:32:f1:49:1e:5b:63:fe:ee:8b:7a:71:c0:9a:f0:69:10:
dd:07:11:16:de:44:4d:6b:9c:b1:58:43:e8:a6:81:21:17:cc:
19:60:b6:df:6a:e7:e5:5f:51:d6:c6:2c:08:df:ae:6f:bb:2a:
b6:9d:95:a8:bf:65:4d:b6:67:83:e6:d5:6f:19:e4:e9:0d:3c:
ab:74:76:28:4d:1f:da:88:4d:3b:a6:9a:c4:95:ac:a2:0b:de:
0e:c8:2b:97:e2:e5:1b:29:ed:af:82:2b:ed:a2:3e:2b:37:c2:
29:e4:8a:b3:95:5c:96:2b:a7:d0:22:c6:d7:6c:94:80:58:f2:
de:a6:5c:91:a6:a9:a5:10:bb:27:53:ed:6c:d0:8b:33:86:94:
57:61:f4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:02:43 2025 by rpki-client