Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
File: w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json)
Hash identifier: PkAizRt7pKvFNKD9k+92hg1iqvKtyt4aqZ1nt5suvh8=
Subject key identifier: 89:72:FB:9C:3F:96:5A:6C:64:17:F1:26:5F:5D:D8:3C:76:B2:C9:93
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Certificate issuer: /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial: 019A5074D76D1FD285300AF37E08B2C8F3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
Manifest number: 0292
Signing time: Tue 04 Nov 2025 20:00:25 +0000
Manifest this update: Tue 04 Nov 2025 20:00:25 +0000
Manifest next update: Wed 05 Nov 2025 20:00:25 +0000
Files and hashes: 1: 2x7OqnJPBLrGZL2rttYvcbQz8Tw.roa (hash: WNGnFlqIRITx+enQw6qGHRhLudWi7SmIAW5VCe5iYGY=)
2: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: 2xf/VdFnJ68NlO8+ycnUIobncfAbV05gVj4MplapSfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:d7:6d:1f:d2:85:30:0a:f3:7e:08:b2:c8:f3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Validity
Not Before: Nov 4 20:00:25 2025 GMT
Not After : Nov 5 20:00:25 2025 GMT
Subject: CN=8972fb9c3f965a6c6417f1265f5dd83c76b2c993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:02:b8:8e:1b:a0:1b:60:bf:5a:81:02:5e:
7b:44:3e:3a:63:73:ea:82:2d:93:3f:e0:c8:b9:2b:
a9:82:64:85:c0:de:b2:22:2f:7b:71:3c:94:a0:4c:
23:5b:65:b2:dc:62:32:73:75:54:a4:3a:e7:aa:3f:
5b:63:7b:2d:39:8b:45:b1:41:b8:d4:c1:2b:92:61:
8f:15:80:c3:b9:84:9e:4a:e8:43:73:35:ed:48:f3:
00:50:c7:bb:5d:fd:2d:fb:25:78:cd:c5:56:68:05:
d4:4d:2f:f8:ee:59:0a:79:a9:ed:ef:43:86:07:41:
dd:09:9e:25:c8:3c:68:4f:ec:d0:7b:e5:c1:85:54:
43:0c:82:87:ad:2a:df:21:c4:a5:12:0f:58:aa:dd:
8a:3b:45:cb:9a:a7:f0:9f:cd:8f:d2:e0:8a:1b:f8:
7e:e2:b6:ae:d9:f9:b6:a7:97:a5:e8:c0:ee:a0:39:
c9:e4:ac:34:d8:f5:38:62:89:50:dd:39:69:d7:dc:
bc:1c:42:7c:87:ae:ec:35:92:0d:e3:d5:51:87:c8:
f0:47:d8:50:cc:08:fc:50:56:97:8c:35:e6:fa:b8:
d5:16:0b:47:aa:cb:e6:72:97:79:6c:73:4c:51:10:
53:66:fb:57:db:89:84:33:cf:4e:7a:38:55:e6:0a:
1e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:72:FB:9C:3F:96:5A:6C:64:17:F1:26:5F:5D:D8:3C:76:B2:C9:93
X509v3 Authority Key Identifier:
keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c7:2f:2a:2d:29:d8:73:bb:ed:52:d5:eb:52:38:f0:8b:7f:
74:37:38:54:cb:de:94:21:99:cd:fa:54:f8:14:d1:33:51:26:
10:6e:b0:8b:70:bd:3f:0a:23:68:75:65:c0:c6:e5:16:4d:ca:
1d:32:38:d8:7d:7e:96:fd:b4:f8:bb:54:d2:3e:45:90:f2:55:
18:71:52:cc:ca:c8:f0:bb:7f:f4:07:62:5a:26:1c:2b:47:a7:
d8:93:1f:40:f9:ae:f1:ec:62:61:e0:23:37:71:ba:1e:b9:91:
4a:20:a4:5c:84:80:ad:b3:14:29:cb:9c:7b:0e:0e:d3:5a:32:
e0:7e:a3:19:34:a9:60:74:4c:10:70:79:c5:c6:47:95:c2:94:
f1:23:80:cf:0c:4c:c7:72:9b:b8:fe:fc:67:28:a5:0d:2f:bd:
06:5e:77:a9:a9:47:6d:41:1a:6e:75:28:bb:0c:81:83:85:d4:
95:da:45:c5:11:16:ba:18:df:7c:46:ca:50:be:3c:ac:61:0d:
81:f1:c9:9a:91:f6:7e:a2:50:28:3d:cf:a0:2a:44:2d:5a:1b:
75:c3:85:47:a2:d3:d0:f0:f0:6f:2d:43:f4:46:ad:be:06:7a:
38:0c:61:f4:a4:05:27:a4:2c:bd:3d:77:ab:1a:93:f0:19:e4:
c2:13:83:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:02:36 2025 by rpki-client