Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
File: wNBDfN98up85Z-syighobQbkfVY.mft (raw, json)
Hash identifier: dzvsHLUc20onguM7jjfGeiUzPGD+B2tvLaA0NB4uJYc=
Subject key identifier: AF:A6:44:01:D9:29:29:FB:95:78:8B:32:42:F1:76:D1:CA:37:76:B2
Authority key identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
Certificate issuer: /CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Certificate serial: 019A559B923EDCDFD9D8AF52C457B49C2A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
Manifest number: 04B3
Signing time: Wed 05 Nov 2025 20:00:50 +0000
Manifest this update: Wed 05 Nov 2025 20:00:50 +0000
Manifest next update: Thu 06 Nov 2025 20:00:50 +0000
Files and hashes: 1: RVpE5x4ewK-16qeOmC4zQhoP4D0.roa (hash: hUGCkNpwy4m/7VpqWBt6q2aDAeStLb3YaDGvbWD+DDQ=)
2: wNBDfN98up85Z-syighobQbkfVY.crl (hash: dWNu7dTj3lsBTEGePgCNvxuwh/Ox2pnZSW7vvLpBnQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:92:3e:dc:df:d9:d8:af:52:c4:57:b4:9c:2a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Validity
Not Before: Nov 5 20:00:50 2025 GMT
Not After : Nov 6 20:00:50 2025 GMT
Subject: CN=afa64401d92929fb95788b3242f176d1ca3776b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a1:ac:c0:73:76:98:04:b8:d5:2d:95:38:e9:
77:b7:2a:6b:0d:2d:26:58:d2:b3:c1:bd:2b:bb:77:
2e:3d:6e:fa:03:a5:dd:69:4d:04:cf:1c:de:d7:89:
28:6a:79:ec:f8:87:36:b5:36:2a:b6:a3:20:b3:0c:
c5:7f:0d:5f:56:ef:b9:f7:06:bc:0a:fe:04:c1:2e:
fa:c7:1f:37:16:04:68:47:69:e7:5d:13:71:1c:65:
14:30:65:19:d3:17:f3:27:28:99:1e:86:e5:66:3b:
a4:e5:3d:76:41:3b:22:4c:1d:6c:e0:12:64:18:23:
db:b0:d4:bf:e5:31:45:8d:d4:d5:38:80:9c:91:a4:
b0:ff:4d:14:f3:75:8d:5f:99:c1:9f:84:1b:c9:8d:
60:f1:1d:0b:7b:5a:82:7c:12:9e:e4:31:e0:57:cb:
8f:f2:8a:bf:ad:93:bf:c0:8d:c4:62:ef:73:e6:09:
64:53:73:c3:87:6a:44:13:86:21:01:6f:39:d2:5e:
c4:55:db:ab:6d:84:25:5e:06:ae:9c:c9:69:6b:bc:
30:b7:b9:6f:63:fb:29:33:68:cf:ab:70:ab:b8:dd:
55:9a:73:e3:95:d6:9d:0f:c0:1f:6c:73:61:7e:34:
c8:c6:32:ea:4c:50:05:85:b2:97:74:a4:8b:8c:d8:
42:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A6:44:01:D9:29:29:FB:95:78:8B:32:42:F1:76:D1:CA:37:76:B2
X509v3 Authority Key Identifier:
keyid:C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c5:55:47:98:38:2c:ac:47:ed:45:0c:ab:3f:da:ee:e1:c0:
ef:4f:79:4c:69:1c:67:f2:95:11:e3:03:20:25:53:63:a6:e5:
21:ef:d9:b3:ae:5b:44:bd:19:8c:58:cf:6c:86:94:d6:f5:c6:
aa:0b:79:3f:6c:80:69:90:82:9d:11:2a:b5:6b:26:25:ea:2f:
e0:f0:0f:3a:5b:2a:f2:a0:87:e1:ac:ac:23:81:bb:98:98:10:
d3:44:e1:03:f4:f7:de:2e:66:f0:2d:38:db:01:e8:96:57:89:
e7:37:fe:ef:54:51:54:63:db:db:5a:7e:37:56:53:1c:cf:76:
ec:34:98:e4:bd:4f:cb:12:bd:55:72:4f:2f:0d:db:2f:d0:29:
89:49:46:66:c9:02:ca:20:f3:a1:ca:e5:41:43:75:db:04:2c:
d5:35:65:fa:e6:13:d0:ec:6e:e4:e3:e2:a0:dc:b5:66:29:b1:
07:c3:30:34:d6:64:ae:a8:04:92:84:ba:fd:6c:f6:f0:db:67:
fe:a9:4f:f4:51:92:05:08:35:75:f3:8d:11:8c:f7:85:89:c4:
25:60:69:3a:bd:f4:86:87:e9:f4:f8:e2:93:79:d1:92:c0:a3:
16:fa:97:f2:0e:53:df:d3:bc:4c:65:2e:6d:22:e6:a1:12:2d:
f2:0c:08:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:09:29 2025 by rpki-client