Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
File: wPQvc_8rzEiFsSAL0C7n4p9gjis.mft (raw, json)
Hash identifier: NMEIlz+AuneG22Quv7IJkG4YAyDXBcFWMx9b+7rRIpY=
Subject key identifier: C2:A0:6A:71:3E:28:13:A5:1C:1F:56:85:18:29:9D:30:38:14:44:7B
Authority key identifier: C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
Certificate issuer: /CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Certificate serial: 019A533F5DE677D5AA212B9DD7D0804BF12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
Manifest number: 0188
Signing time: Wed 05 Nov 2025 09:00:52 +0000
Manifest this update: Wed 05 Nov 2025 09:00:52 +0000
Manifest next update: Thu 06 Nov 2025 09:00:52 +0000
Files and hashes: 1: DhYlOELQmejsuqE0q-lFm-NVMP0.roa (hash: mf0P0l64vNrzlnAnRIlTkqO53r1pyoZwPlURmjISdFU=)
2: S0h9COCL9yDPAz3dul4Z5VK_88Q.roa (hash: xAF8HzsYzOEotQ+1gvdFYGccAU/IelrIejunqeu7D98=)
3: wPQvc_8rzEiFsSAL0C7n4p9gjis.crl (hash: pI4Re3m+/DS2Y1JxL/IYKfyNYkXhd2gZ25Tef/5GS9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:5d:e6:77:d5:aa:21:2b:9d:d7:d0:80:4b:f1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Validity
Not Before: Nov 5 09:00:52 2025 GMT
Not After : Nov 6 09:00:52 2025 GMT
Subject: CN=c2a06a713e2813a51c1f568518299d303814447b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:45:ab:01:8c:81:cb:5c:0d:c9:91:d3:97:
8d:2a:e2:cb:5a:dd:6f:cc:95:62:5b:8d:d4:1d:be:
a2:a7:a9:36:69:d1:b9:c1:f4:df:56:31:55:1a:6a:
bc:6a:a8:ea:e0:4a:6b:d1:26:83:7e:81:95:87:6a:
d1:50:b0:30:d3:35:31:5e:38:1f:c6:66:59:09:09:
a7:8e:d7:81:3e:ff:d4:10:39:51:6b:5e:92:b0:23:
3e:6d:b9:b1:9a:b0:b8:7f:3a:07:8e:ff:08:0b:3b:
4e:5f:b9:03:a3:5a:57:7a:9b:54:1e:1b:d1:f3:28:
6e:8a:09:95:6b:0a:87:98:e1:db:3f:2c:8b:e8:0f:
a3:44:a9:68:b9:0f:30:f1:28:76:95:b8:09:9f:9d:
37:e1:28:3a:7a:74:f7:1f:ef:92:56:ab:9e:95:dc:
e4:be:34:03:be:8b:5e:7e:db:8c:d0:21:0e:ca:84:
8e:00:1e:5f:2f:67:bb:ff:4f:30:4c:8e:49:30:5c:
d8:8d:24:cb:ca:24:40:6d:c9:e9:58:d6:01:dd:ed:
e4:4f:62:87:ed:9f:04:bc:6a:d1:ee:91:fb:1f:c6:
db:ff:61:40:72:86:f5:a9:a0:e0:69:ed:79:68:ab:
24:70:67:57:87:85:d0:a9:ee:8c:76:ba:ee:3d:4c:
fc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A0:6A:71:3E:28:13:A5:1C:1F:56:85:18:29:9D:30:38:14:44:7B
X509v3 Authority Key Identifier:
keyid:C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:57:2d:30:af:8d:cb:63:83:0c:e7:ba:74:ab:24:91:b9:19:
c6:64:85:16:58:a2:e6:37:8b:87:11:55:91:3b:89:48:55:2b:
74:2f:0a:c6:26:bd:a8:f7:a2:fe:ac:a9:f5:8e:4a:a5:0a:9c:
37:81:3b:19:a0:ed:f3:eb:2f:70:77:66:80:55:0a:69:76:dd:
04:12:e0:6d:e7:77:83:a8:29:1c:b7:98:33:22:55:fe:32:67:
89:ce:a0:68:c9:13:cc:84:9d:87:22:9d:cf:b5:66:24:6e:4a:
58:c4:d1:39:e2:71:e0:93:28:96:1c:e8:05:b4:cd:c3:68:98:
c7:ed:da:36:4e:d4:b8:14:db:09:da:b2:d3:a3:97:a4:5f:7e:
34:09:33:c6:f4:98:af:29:5a:08:d7:96:62:c4:f7:1f:31:fa:
cb:1f:cc:59:dc:20:e0:ce:b7:f6:ba:d5:ea:6c:97:a5:b5:39:
36:5a:ef:af:c4:42:55:61:84:15:9d:fd:cf:e1:f4:b1:e5:64:
f9:de:c9:7c:3c:78:2e:c6:cd:2d:c1:ce:7c:a3:70:1f:87:f0:
96:69:6e:9d:cd:91:a7:19:48:4a:ec:9f:d3:6b:9c:11:7f:3f:
b4:78:f4:8d:f5:4b:a2:2d:de:1d:6d:20:ef:00:38:b1:a3:28:
43:37:f4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:20:42 2025 by rpki-client