Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
File: Wc4cxXrNTYGB7TBThd7njbF14iE.mft (raw, json)
Hash identifier: YUmuukFq5KqwLf+VkJCVV1Qq0X6zR/UZHgyuIShb+JE=
Subject key identifier: 72:94:14:42:A5:F4:DB:C0:A8:52:ED:A4:A3:1F:2B:7F:1D:C9:80:DC
Authority key identifier: 59:CE:1C:C5:7A:CD:4D:81:81:ED:30:53:85:DE:E7:8D:B1:75:E2:21
Certificate issuer: /CN=59ce1cc57acd4d8181ed305385dee78db175e221
Certificate serial: 019A4F62D7E6A093A91B6E9EFD441BA34C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
Manifest number: 16EB
Signing time: Tue 04 Nov 2025 15:01:09 +0000
Manifest this update: Tue 04 Nov 2025 15:01:09 +0000
Manifest next update: Wed 05 Nov 2025 15:01:09 +0000
Files and hashes: 1: 20uDmGvfBsJesoT5BrUQFzxosjo.roa (hash: 0VZjOP9T4ID3wlDH0TbfHCtVho9BJQgblzpHlm0skyY=)
2: Wc4cxXrNTYGB7TBThd7njbF14iE.crl (hash: 51GtgkPvNPrdjjBxTdGn18lf0PK5pzK02auEiEt15vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:d7:e6:a0:93:a9:1b:6e:9e:fd:44:1b:a3:4c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59ce1cc57acd4d8181ed305385dee78db175e221
Validity
Not Before: Nov 4 15:01:09 2025 GMT
Not After : Nov 5 15:01:09 2025 GMT
Subject: CN=72941442a5f4dbc0a852eda4a31f2b7f1dc980dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:88:fd:21:c7:9f:56:98:08:fc:36:96:d5:45:
e7:bb:e7:b9:06:58:3b:94:56:f1:78:81:c4:fb:b5:
fc:b3:17:1c:5e:22:39:f6:ac:db:03:53:5e:2e:d7:
12:3a:9f:d2:81:60:10:7e:42:20:25:02:0f:2e:93:
b7:4b:15:f7:d2:30:3e:d3:f9:51:80:86:6b:ef:92:
71:aa:85:5b:ba:7a:1b:4d:36:ba:73:16:a4:6d:a6:
71:d6:9f:60:93:38:98:02:cf:3d:d4:00:29:8b:8b:
c7:aa:e4:28:4f:a0:80:12:96:6e:7e:7b:23:49:3a:
c7:b5:44:13:51:70:3a:3e:92:81:7d:14:7a:e6:c6:
2a:f9:0c:0c:26:de:e5:eb:07:38:d4:d8:4b:29:20:
e4:85:df:e2:4c:02:a3:b5:c3:b9:11:87:c4:d2:40:
3f:01:47:3d:8a:c2:c6:23:96:75:aa:8f:6a:4f:c4:
2c:12:fd:d0:24:34:4d:9d:d1:e2:10:03:4b:41:3c:
a5:24:b7:67:a6:d8:4b:77:a0:4c:d2:a7:20:e0:4a:
c0:ba:65:a0:73:1d:9b:05:d8:18:7b:b2:dc:a0:f4:
c4:84:26:d9:6e:4c:d9:07:82:6c:a1:50:44:ca:cb:
41:21:fb:b0:82:f8:1f:5d:34:b5:6e:a6:ad:00:1e:
3f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:94:14:42:A5:F4:DB:C0:A8:52:ED:A4:A3:1F:2B:7F:1D:C9:80:DC
X509v3 Authority Key Identifier:
keyid:59:CE:1C:C5:7A:CD:4D:81:81:ED:30:53:85:DE:E7:8D:B1:75:E2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c5:b1:b4:71:4d:53:85:d0:d0:22:5f:0f:cb:60:65:43:0f:
07:e5:dd:4c:5f:0b:01:4a:8d:aa:8d:ad:ef:c8:f9:b3:95:af:
08:4a:b2:f0:1b:29:11:f6:fa:33:7a:fd:ae:8b:31:44:de:85:
e0:7e:86:35:d7:22:bd:38:c8:4b:6d:8c:96:6b:48:80:98:79:
d9:81:fb:6c:4d:fe:7c:3e:f1:80:2e:e7:d8:d0:16:eb:fc:c0:
5a:8f:d6:f3:76:4b:07:e0:2a:87:93:c0:ea:b9:ca:34:02:b7:
00:53:4c:8a:48:e2:1b:ac:dc:31:48:b1:9c:1e:51:7a:7e:ae:
b7:a0:6d:92:29:a3:e8:41:02:f8:dd:72:39:cb:19:c6:ae:04:
b8:24:c7:0f:da:4d:4a:c3:1c:3c:f5:d2:ba:d7:08:88:16:ce:
23:43:eb:42:28:22:b5:c9:18:d3:3f:a7:42:ac:b5:93:ff:93:
74:15:a1:e5:da:b9:47:49:0c:94:22:ea:63:bc:17:07:3b:9d:
78:ba:82:1c:17:e3:83:c7:50:8f:c0:a7:14:a3:af:d9:f0:42:
c3:ab:9b:60:13:5f:ac:e8:52:e2:b6:4f:81:e1:eb:08:2a:5d:
5a:4c:f5:00:fc:4f:ad:07:93:d9:69:fa:41:90:24:51:63:02:
49:ca:ca:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:26 2025 by rpki-client