Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier: QPaJgQ25K3bn17rVO60jIxMCoyl/wiszZRP4TcfbMYw=
Subject key identifier: 39:3C:27:1F:CB:E4:51:99:3A:0F:41:08:F2:2B:23:84:54:94:61:FC
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 019A522CDF26A346B2DCFC56CFAEBC2BDC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number: 0949
Signing time: Wed 05 Nov 2025 04:01:03 +0000
Manifest this update: Wed 05 Nov 2025 04:01:03 +0000
Manifest next update: Thu 06 Nov 2025 04:01:03 +0000
Files and hashes: 1: oXdvfaAw2HX5k9hgoYRskK2gnZ0.roa (hash: RsMteruai2QKgImCyNPBir6yRcbFaU5c9mP5yO+ruyE=)
2: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: VjLYfDwf/ghTX9ivKn00zKSrShStnCDnvqa89OZTt9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:df:26:a3:46:b2:dc:fc:56:cf:ae:bc:2b:dc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Nov 5 04:01:03 2025 GMT
Not After : Nov 6 04:01:03 2025 GMT
Subject: CN=393c271fcbe451993a0f4108f22b2384549461fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:b5:7f:4b:d7:51:cf:24:14:54:a6:9e:f8:
54:9a:12:86:1c:fd:be:23:93:32:cd:8d:c9:56:f5:
6a:fa:13:87:1f:3d:e5:c4:fd:12:0c:70:d4:54:57:
58:e0:88:82:09:e4:f9:a2:c8:f8:20:33:35:58:bf:
62:9b:30:43:8d:eb:0e:a7:be:cd:a6:df:65:bf:00:
5b:eb:11:f8:7d:52:4f:c1:e1:74:e5:28:d7:80:7c:
70:0d:d5:dd:c1:4a:24:6a:25:f8:8a:f0:bb:f6:42:
8b:c7:ee:ba:3d:74:f9:b9:6b:00:2f:c8:87:ee:30:
b1:98:82:19:65:06:c1:a6:c3:a6:74:54:62:33:11:
c3:b1:fa:71:2b:fb:4e:50:1c:3b:4b:1f:9f:78:24:
62:64:65:79:d3:40:81:80:fb:c8:60:c0:99:43:41:
7f:3c:cb:15:ad:d7:fd:d7:55:1e:06:b2:ad:55:12:
b2:f3:26:91:d5:d7:89:67:27:c9:f4:d7:94:13:c0:
c0:ef:25:68:77:57:c8:e2:de:30:e1:5b:b9:86:4d:
e8:5c:05:39:4a:dc:f9:8b:76:5c:e1:5f:28:a0:02:
e0:09:b8:ef:23:05:17:9f:f4:f8:9d:2c:74:8a:cd:
dd:0d:cd:cd:e3:a1:56:c2:55:a9:e3:61:19:b1:24:
96:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3C:27:1F:CB:E4:51:99:3A:0F:41:08:F2:2B:23:84:54:94:61:FC
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9a:1a:d3:d1:84:4c:e0:58:8f:b7:7a:24:dd:41:93:88:99:
91:11:66:d0:84:79:54:c1:f6:31:2f:7d:28:ca:21:a2:bf:43:
88:a3:52:09:8c:3a:28:44:ff:56:63:f2:2f:11:c8:48:1d:a3:
68:53:7c:95:1f:35:07:65:93:d8:8f:4a:39:40:85:7c:7c:35:
01:63:de:36:8f:92:51:db:57:63:7e:bc:d2:2b:20:d0:7e:74:
c4:72:3d:a4:6e:1a:95:bc:ba:61:ee:98:ca:32:ce:bf:ec:3a:
fe:22:97:92:a8:8f:86:68:98:2d:91:ca:9b:56:79:01:eb:a2:
56:9e:63:71:6e:60:ec:af:c3:8f:ee:93:6c:ac:28:18:c3:52:
f9:ae:fd:e4:48:49:9d:76:14:28:25:0b:11:a0:f3:72:39:c8:
88:b9:c1:26:7e:4f:33:78:08:ee:59:35:42:65:d0:91:dd:2e:
7c:73:c7:84:49:6d:a0:f0:7f:be:a4:20:fc:ef:19:16:cf:ba:
7b:7d:90:c9:5f:ce:36:ea:fa:c5:be:f8:e4:fe:40:d0:5d:67:
0a:b3:1a:96:db:10:95:7c:f9:bd:d1:21:e0:6c:bc:3d:ab:ec:
31:af:5a:fd:dc:8c:4c:fc:d6:88:6c:bb:29:cf:7d:bd:48:f0:
e5:61:bb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:03:45 2025 by rpki-client