Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
File: wDJJW4nc6BsMf4ht38NgS94G2KY.mft (raw, json)
Hash identifier: QvveA5R6cIQNXUgT4zLsMaVSn+Oxi/jMqHhvgE/7WIs=
Subject key identifier: 78:90:54:0A:82:9E:92:1A:D1:6E:B1:8A:5E:E4:25:16:6B:64:77:A7
Authority key identifier: C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6
Certificate issuer: /CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
Certificate serial: 019A4EF5F1DD78D105E66E19155F82F87087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:02:12 +0000
Manifest this update: Tue 04 Nov 2025 13:02:12 +0000
Manifest next update: Wed 05 Nov 2025 13:02:12 +0000
Files and hashes: 1: mHKZZdX4P1dK57yB0hCJdDCS-A8.roa (hash: sgKlWaet9A3w8v934Vjaqn1vJ0nwSp4V/6BEjtLuqMM=)
2: wDJJW4nc6BsMf4ht38NgS94G2KY.crl (hash: q3wotIfivIKe/ioM2P7nFRVKXJO4crzjCOR53hdl+60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:f1:dd:78:d1:05:e6:6e:19:15:5f:82:f8:70:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
Validity
Not Before: Nov 4 13:02:12 2025 GMT
Not After : Nov 5 13:02:12 2025 GMT
Subject: CN=7890540a829e921ad16eb18a5ee425166b6477a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ec:04:e9:1a:3a:b9:94:b7:54:9d:97:5b:36:
3f:38:13:eb:b3:ad:8d:7b:b5:c6:b4:cc:71:76:e8:
4f:bd:3a:74:fb:f4:4b:27:10:2e:c9:b2:84:19:f9:
26:96:b9:26:b0:91:02:af:2b:96:a9:59:4b:1d:f1:
b3:21:63:59:c0:4c:38:58:3e:a8:50:9e:a1:7c:23:
04:6e:78:14:f4:24:dc:30:54:d5:79:55:55:36:ac:
51:05:02:b9:85:d5:96:08:22:8d:2f:7d:da:1d:f1:
0b:b0:6b:f6:e3:dc:73:95:f2:3d:f6:ea:0b:87:6d:
f8:68:77:49:31:9b:01:e4:1c:d5:d8:3e:9f:a3:e8:
5e:b2:90:ec:f5:14:4f:e1:53:2e:ce:da:4b:81:2d:
89:f4:c5:25:cb:27:57:6d:ef:60:ec:f4:42:c5:d0:
73:91:37:b6:e2:49:c2:c0:13:62:85:f3:a0:ae:50:
de:ed:fc:96:0f:47:25:a5:40:1c:64:6d:01:8f:57:
51:f3:33:f7:2b:fa:2b:de:51:c2:a9:10:dd:bd:34:
e5:d8:9d:fd:f5:8f:71:a1:d0:a0:e3:13:e9:5d:c4:
58:3d:58:37:43:ae:ed:2d:b3:8e:3d:bc:60:a6:3c:
c7:c1:c3:bd:f2:0a:db:05:8b:e3:99:ee:eb:70:6c:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:90:54:0A:82:9E:92:1A:D1:6E:B1:8A:5E:E4:25:16:6B:64:77:A7
X509v3 Authority Key Identifier:
keyid:C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:05:14:81:7c:6c:93:ad:5d:f0:2e:bb:8f:06:fc:25:55:f6:
cc:c7:c1:7e:bc:de:f6:27:55:9c:9e:1a:f1:bd:17:25:18:5b:
cd:bd:ca:8d:98:c7:2e:da:b8:6e:cd:dd:42:a0:2d:25:f6:4a:
d7:d2:2c:a2:48:b7:63:7f:a6:74:30:b8:78:89:a0:05:a5:5c:
a9:19:15:e9:ad:6e:73:9d:e4:48:5d:51:f1:83:fd:c0:7e:93:
77:19:08:b0:0f:08:da:fb:8a:12:ef:cb:f7:19:f2:fc:45:c7:
02:ec:2b:da:21:63:93:ba:b2:f3:da:e3:15:de:af:16:75:85:
98:8d:44:5b:26:2f:b4:21:36:e4:5d:23:71:0b:ad:66:e9:93:
64:75:f2:f8:8d:7b:22:0c:82:d7:03:9d:74:65:a6:90:01:11:
ab:c6:18:db:2b:7f:f9:20:0b:c6:1f:e4:8c:81:a0:6d:68:0c:
99:b3:f0:f1:b8:81:d8:35:77:00:97:0e:88:43:a6:b4:51:b6:
f5:70:16:50:b9:c9:8f:1c:e0:2e:da:55:64:b4:b3:4a:a1:c2:
00:b5:06:4b:de:3d:fd:72:0b:16:e2:4e:7d:83:3c:4c:86:b2:
72:58:3f:31:8e:18:9f:45:75:da:be:8c:46:67:94:9c:fa:bb:
9a:84:7d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:48 2025 by rpki-client