Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
File: wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft (raw, json)
Hash identifier: vjcSYqWu7tzWsdtAZJO5ygad+2nU2vL0xoJGR/BLJz4=
Subject key identifier: BC:4F:AD:A8:D7:8E:B1:18:3B:61:23:BA:7E:74:83:A7:8F:5B:EF:E3
Authority key identifier: C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36
Certificate issuer: /CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
Certificate serial: 019A4DAB25942AAD8EB45DD7A8CD2E72A9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 07:00:53 +0000
Manifest this update: Tue 04 Nov 2025 07:00:53 +0000
Manifest next update: Wed 05 Nov 2025 07:00:53 +0000
Files and hashes: 1: hFaskM76WmkGz-mPiPTUpMiqZxk.roa (hash: luq1omNBXihu/qimESEN6qhU6P0bWFQ94OAUTpScUXc=)
2: wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl (hash: /DdPhAW09+S2R69S8bIlQ0LA+gNH5bmvaC7Vw8FJIfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:25:94:2a:ad:8e:b4:5d:d7:a8:cd:2e:72:a9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
Validity
Not Before: Nov 4 07:00:53 2025 GMT
Not After : Nov 5 07:00:53 2025 GMT
Subject: CN=bc4fada8d78eb1183b6123ba7e7483a78f5befe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:73:e4:91:3f:92:ec:c3:dd:d7:ac:fd:c3:fb:
c4:58:4a:70:ac:4f:3b:3c:bf:7c:29:ea:94:7e:f8:
81:f3:4b:69:03:c9:e9:61:38:2c:36:8e:ce:70:8a:
8b:8d:8a:01:43:e8:ed:5a:60:ce:98:59:90:53:a7:
65:02:ac:4e:78:ae:91:0c:a4:7d:f8:e3:9f:2c:94:
b4:32:74:18:20:db:61:60:ba:39:f2:ca:9e:7c:9c:
14:2b:4f:c3:5b:ee:8c:03:4b:f5:05:9d:4f:1f:b7:
9a:b6:e3:13:73:7b:4e:df:25:87:ce:f8:07:0e:f9:
bf:f1:5b:93:3f:7b:15:93:ea:7d:a8:51:68:48:95:
61:ec:79:09:0a:de:e2:9e:94:b2:d2:8e:44:56:6b:
bb:54:22:49:c9:d2:7b:26:92:68:a6:80:7b:d5:1c:
bd:73:74:c1:3a:94:34:b9:9a:79:6d:c7:3c:cb:34:
92:2a:cd:fa:b1:75:cc:3b:c1:57:85:9a:ed:ca:6f:
2c:df:99:08:e8:bc:49:a9:f3:d3:36:25:a0:7a:93:
33:74:09:50:d7:6f:a3:db:f5:69:95:e9:fe:9e:ad:
32:f9:78:4e:54:1d:26:54:40:c5:1d:56:c2:f3:43:
2e:dc:6a:5f:06:cf:fb:0a:5c:08:d0:ed:29:e2:3a:
19:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4F:AD:A8:D7:8E:B1:18:3B:61:23:BA:7E:74:83:A7:8F:5B:EF:E3
X509v3 Authority Key Identifier:
keyid:C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b3:3c:ee:7c:16:db:af:94:9b:f5:0b:b0:11:34:61:c7:5c:
7a:b8:9d:ff:6c:db:3b:4a:72:83:52:80:13:92:0b:9f:0b:4d:
6d:86:fe:69:2d:28:e7:79:86:4b:f8:fa:51:9b:df:02:a9:07:
4f:cd:40:b0:51:f2:00:e7:e9:58:4b:12:70:d3:dc:dc:e5:66:
4e:44:6e:f0:5f:71:0c:89:bf:45:17:69:27:93:34:de:06:6d:
e2:f7:6e:22:a7:65:6b:2e:39:ff:fb:16:50:e8:5f:05:e4:00:
5b:dc:d3:68:b3:bd:5b:c6:3f:df:59:85:21:9a:47:06:e5:42:
02:73:28:1b:db:44:3b:86:d1:1f:a1:c7:d3:cd:91:0a:72:d9:
ed:22:5c:c5:9c:16:24:ed:02:cb:de:6b:dd:aa:16:45:9b:88:
06:82:3a:26:29:65:4a:52:4e:3d:e1:52:4d:3c:b4:75:60:0a:
ee:d5:91:d5:98:e7:c0:30:31:c3:a9:99:cc:e2:db:a6:c7:84:
17:f3:e7:21:82:ed:d0:a4:79:6a:04:02:c9:80:54:28:40:f8:
c5:f5:70:87:7c:07:4e:a7:2e:cb:56:c2:ef:f1:d7:f7:9e:40:
5e:a5:f5:3b:78:66:37:a7:a1:29:4a:b8:fd:60:29:93:30:fc:
61:18:f8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:56 2025 by rpki-client