Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
File: wDleyIIdj4GJQTOSvYdte9eVwWw.mft (raw, json)
Hash identifier: x6ckFEFqUnWSU2CW7f2dIFXfirZWljpvmII566+pQ14=
Subject key identifier: 3A:A5:E4:07:14:A7:34:D8:09:EF:74:1D:99:1A:28:1B:52:75:29:80
Authority key identifier: C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C
Certificate issuer: /CN=c0395ec8821d8f8189413392bd876d7bd795c16c
Certificate serial: 019A51F5BBE3DCBE744353EAC97156F4F600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 03:00:49 +0000
Manifest this update: Wed 05 Nov 2025 03:00:49 +0000
Manifest next update: Thu 06 Nov 2025 03:00:49 +0000
Files and hashes: 1: P3YoBo67vazrugYfMD3lybaWtAo.roa (hash: /AdjcQW3/wvGSZ4+BEuR5TlveAfDafAH3hNdQ89CSF4=)
2: wDleyIIdj4GJQTOSvYdte9eVwWw.crl (hash: 072YTpF/KsJzxU1wjGtoe5wmC67v2srDrC9ck/ht9yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:bb:e3:dc:be:74:43:53:ea:c9:71:56:f4:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0395ec8821d8f8189413392bd876d7bd795c16c
Validity
Not Before: Nov 5 03:00:49 2025 GMT
Not After : Nov 6 03:00:49 2025 GMT
Subject: CN=3aa5e40714a734d809ef741d991a281b52752980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:ec:0f:76:8b:22:bf:52:1f:4e:5f:35:d2:
34:4c:4b:4b:a3:b6:b6:38:29:a0:4a:94:38:f7:fd:
7a:e9:f5:b5:aa:4b:75:6f:02:2b:22:dc:61:7d:79:
39:c7:d9:5b:db:79:b1:02:a7:2a:20:71:ff:bb:28:
34:6b:9b:7e:a5:01:58:0c:8c:e7:7f:66:be:4f:72:
e3:d6:ca:fc:e0:5d:79:12:2f:1a:4b:bb:65:96:97:
a5:25:13:87:f5:03:67:12:51:f6:6a:c8:b1:66:7a:
e2:6b:fa:0e:b5:41:de:ab:27:e9:62:2b:9d:8e:c4:
2b:58:4c:f8:1a:fa:98:36:a6:30:d5:ba:e1:bb:a9:
1b:36:bd:9a:ca:ba:0c:64:eb:dd:e0:2a:d1:b2:db:
02:f2:f4:04:e1:d9:9c:b1:4d:02:63:01:da:ff:c0:
bb:e3:c9:65:52:1b:de:07:34:96:f6:30:e6:78:eb:
cd:0a:84:16:fa:93:67:84:85:be:3d:3a:72:fa:cb:
ae:1a:f9:6f:98:7f:ed:8c:b0:a9:0c:26:c7:1b:52:
b9:77:ec:3c:02:ba:3d:a3:4e:29:d8:8a:57:34:ea:
61:1b:c6:bb:94:91:ae:13:2e:42:9b:6a:23:98:af:
f3:30:ef:c9:1f:ae:08:dd:81:bb:23:e3:a7:e2:98:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A5:E4:07:14:A7:34:D8:09:EF:74:1D:99:1A:28:1B:52:75:29:80
X509v3 Authority Key Identifier:
keyid:C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0f:e0:27:a2:04:d5:95:95:35:32:44:e3:13:7d:50:8d:68:
51:5c:b3:e0:60:3d:8f:2e:82:5c:72:9a:a3:81:a3:e4:f7:3e:
36:3f:3d:30:f0:d3:b4:22:e5:1d:46:fb:a2:9b:20:09:87:07:
f4:56:6b:28:71:c7:5e:37:2f:fa:65:16:24:64:2e:34:29:40:
b1:91:b8:67:3c:34:86:41:dd:cb:e4:9c:07:54:8d:bd:ab:2b:
78:83:fa:e9:90:12:39:6f:b6:37:9d:86:24:70:24:0d:1b:82:
16:f3:52:ff:92:37:e6:01:c7:a7:37:06:26:b5:39:de:50:32:
30:fe:10:36:95:0b:06:92:62:c1:09:aa:39:d5:f1:88:5a:3e:
48:c5:90:36:86:bd:0d:2b:9a:bb:26:0b:bc:b6:60:6c:24:f0:
69:89:08:36:94:84:ae:ea:fa:0b:e3:ba:7f:b4:dc:33:7f:99:
1d:34:dc:38:be:d0:85:e5:d8:f1:42:25:3f:96:46:86:d4:e7:
d8:8f:1b:4f:9c:03:74:4d:82:1f:e1:07:53:fb:1d:94:1c:ab:
df:ad:20:2c:a9:13:11:3c:dc:51:b3:3c:b6:f3:a6:9f:ac:82:
8c:89:fc:5d:26:a6:e4:53:17:ff:a3:d5:99:85:6b:4b:6c:b1:
ec:ef:09:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:51:28 2025 by rpki-client