Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
File: wVIzr0ulkRnW_xlNfNhmUISm7nc.mft (raw, json)
Hash identifier: tdr7IuIgnfw5N4t9KBemgxU1m7Fw7cLrjAs3fOgFITY=
Subject key identifier: 9D:B0:02:67:45:68:19:B9:C1:B3:05:2C:B5:B8:DE:21:50:13:13:7D
Authority key identifier: C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77
Certificate issuer: /CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
Certificate serial: 019A4DAAE2ADD615B197756B7F55F000E322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
Manifest number: 0D90
Signing time: Tue 04 Nov 2025 07:00:36 +0000
Manifest this update: Tue 04 Nov 2025 07:00:36 +0000
Manifest next update: Wed 05 Nov 2025 07:00:36 +0000
Files and hashes: 1: M-zl6ZmtNK_TSwrT44MkMmFWsWY.roa (hash: 4yxdkDwmfz59LnRbcG6OUavxv8vAR+8hlDkw2Ess8wU=)
2: wVIzr0ulkRnW_xlNfNhmUISm7nc.crl (hash: VHrfcAC/SEOhUiygTouSCn+uQgQLnYPjScGnrhPhqEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:e2:ad:d6:15:b1:97:75:6b:7f:55:f0:00:e3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
Validity
Not Before: Nov 4 07:00:36 2025 GMT
Not After : Nov 5 07:00:36 2025 GMT
Subject: CN=9db00267456819b9c1b3052cb5b8de215013137d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:97:7a:59:f3:23:1f:e7:16:37:0e:19:34:a1:
df:ca:0f:36:63:f7:4f:46:a6:5b:87:e2:d7:28:18:
ac:9d:45:97:50:16:da:0b:43:66:d6:14:32:1c:87:
1e:25:59:1d:58:70:1e:6f:e9:cb:75:37:f6:96:ff:
71:50:64:c6:a4:db:4f:50:3a:fa:a2:92:6a:44:97:
36:f0:58:c0:a9:fd:5e:ea:9b:8d:38:fd:ab:89:f2:
ef:45:6f:b2:66:0a:6c:16:ef:1c:cb:a6:16:bc:ab:
6b:15:d4:8a:24:02:dc:cd:8f:ce:d6:19:79:eb:c0:
e3:b4:61:5d:df:42:ba:46:34:c3:14:e3:9c:2a:77:
aa:44:49:50:42:c2:c9:5e:c9:30:df:d5:72:cf:a7:
c7:55:df:85:05:27:3c:05:07:ff:89:be:8d:36:9a:
97:99:c8:bd:e1:a5:76:7b:62:e5:75:cc:36:b0:93:
d7:f9:77:40:01:36:a8:b9:1c:a0:d1:e4:8b:16:74:
ca:17:0f:56:6d:6b:75:4a:23:d8:bc:4c:31:60:7c:
f8:9f:02:f5:b1:e8:89:f2:c2:bf:3c:3e:a4:ca:6d:
f3:20:a6:6e:b6:61:44:1a:23:11:97:95:1c:63:72:
ac:57:2a:49:a2:6e:d9:19:2c:76:dc:b1:dc:e9:00:
b6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B0:02:67:45:68:19:B9:C1:B3:05:2C:B5:B8:DE:21:50:13:13:7D
X509v3 Authority Key Identifier:
keyid:C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7e:fa:e7:de:de:ee:e9:76:47:50:86:d2:ab:3d:74:36:af:
dd:bf:65:1b:7d:6e:6e:33:9f:c0:08:f4:e0:3d:4a:ef:84:04:
95:1b:6d:ce:d4:23:d2:7e:a4:01:dd:72:fb:41:34:fd:33:7b:
2f:d7:05:dc:04:65:a6:e5:83:13:8b:c8:dd:03:4f:96:7e:ad:
c2:d4:2c:ce:93:69:04:4a:c8:7e:9a:52:df:43:87:81:1a:46:
e4:6e:10:65:2e:b6:ab:0b:3a:2f:c0:b8:f0:12:02:1c:17:ab:
05:89:f0:0c:41:41:f3:99:53:a7:be:dc:3e:d2:f1:7c:39:b0:
35:de:2b:8d:60:5d:8d:59:42:27:49:bc:68:d6:da:97:2f:f3:
55:87:3b:b4:46:14:04:5d:46:92:7a:bf:15:b9:54:b0:31:5b:
2a:70:60:00:d8:e9:65:d7:05:8e:43:fd:bb:03:9f:1b:ec:1c:
05:63:f1:eb:95:2f:3b:5e:ab:bf:5c:33:f8:38:6c:c0:85:7b:
be:ce:87:3b:b6:62:ba:df:ee:1c:e5:55:ee:43:75:c3:2b:9f:
3a:95:aa:77:63:b4:7e:90:b2:6e:67:8d:44:d4:1c:ab:40:1a:
8e:34:b1:dd:fb:48:b8:9d:94:2e:d1:bc:c0:a4:5a:ac:e7:3c:
7e:c3:30:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:58 2025 by rpki-client