Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
File: wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft (raw, json)
Hash identifier: TEnZ/RFxX4MMeO3QdTbcmTgBjB7f5ne0XhfLp7lZudo=
Subject key identifier: 51:9B:A1:30:1B:B0:1B:8B:2D:CB:C2:65:26:AC:6E:C4:D2:D6:03:28
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Certificate issuer: /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial: 019A4DE1F7FF27A656A8D0C1A602E08C3FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:45 +0000
Manifest this update: Tue 04 Nov 2025 08:00:45 +0000
Manifest next update: Wed 05 Nov 2025 08:00:45 +0000
Files and hashes: 1: E0oPYTANwX4SVfmo4G4Bb_Ffflc.roa (hash: POCopGH4Sf5gshG/ai7EpgPCh9X9MivwqlQ7wpM8V2Q=)
2: wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl (hash: KNw6c/xrD0W8BXq+ROj2nu3Fdd1cpnFM3ne+sHUUyyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f7:ff:27:a6:56:a8:d0:c1:a6:02:e0:8c:3f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Validity
Not Before: Nov 4 08:00:45 2025 GMT
Not After : Nov 5 08:00:45 2025 GMT
Subject: CN=519ba1301bb01b8b2dcbc26526ac6ec4d2d60328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:d8:dd:d4:f7:b2:50:9b:61:ad:c7:59:fa:
bd:c8:3f:d4:89:4c:f2:3e:05:77:96:58:86:e2:64:
99:29:8d:0b:88:64:e4:3e:11:a5:17:90:c5:ea:4e:
d3:e9:3b:00:f5:f8:8f:3d:d7:cf:76:79:61:83:ff:
64:aa:40:83:8f:3f:c4:04:eb:28:2f:4f:fc:bb:a0:
51:63:99:83:c4:52:0c:3b:43:49:b6:9a:96:6e:eb:
e6:32:b7:a7:8d:04:0a:e8:8c:43:df:61:06:01:ac:
f2:25:59:b1:fc:e1:6b:ed:b3:0b:05:ca:f9:d9:59:
9c:52:20:c7:d6:e0:ea:43:77:47:37:e5:01:68:db:
1f:a8:59:e0:94:54:c8:14:41:f0:e1:c7:fe:f8:72:
36:7f:22:79:84:1e:82:ef:35:15:35:cc:0c:ad:e7:
2c:23:e7:c1:51:0f:7a:f1:72:5e:7f:34:3a:ca:84:
35:99:64:7f:be:bf:c9:b2:af:15:1f:92:a9:47:db:
16:f1:04:79:f8:98:45:a5:62:f2:f4:99:47:70:14:
26:51:36:27:f5:8e:47:90:e9:8e:c7:c8:e7:a1:25:
4d:0b:8a:4b:a6:67:be:20:3f:26:42:78:51:a6:4d:
3d:65:88:45:87:3a:f0:46:51:11:0b:42:d5:60:a1:
40:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9B:A1:30:1B:B0:1B:8B:2D:CB:C2:65:26:AC:6E:C4:D2:D6:03:28
X509v3 Authority Key Identifier:
keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e6:54:f1:d1:51:f6:f0:00:a4:e7:68:b0:ff:cc:e4:dd:75:
52:cf:83:45:03:14:8f:88:92:47:e0:30:9a:3c:a3:c6:d0:a8:
ae:6a:d0:52:ae:81:c1:e3:a6:e8:74:64:ac:1a:f6:de:4e:d0:
c0:db:60:b8:1d:d6:a7:7a:2a:06:1a:2b:3a:55:05:38:9d:57:
57:3e:e8:34:49:81:95:62:4f:37:76:0e:4c:43:eb:45:a6:b1:
a8:f3:39:49:3d:a7:e4:ff:cf:1a:8c:32:b2:fa:d5:c9:02:81:
1e:d6:60:48:e6:a3:34:67:92:a3:cb:fc:22:e2:53:9f:8c:68:
7e:86:40:98:46:59:2e:ec:32:89:93:c4:9a:5b:21:bb:48:7d:
81:d0:15:88:8b:6b:cf:05:04:c7:f2:1a:97:64:fc:40:97:d7:
e1:3a:ca:09:9c:76:b7:38:cd:73:96:8c:a4:74:ff:e6:56:56:
db:59:f5:ab:d5:94:fc:a9:45:4a:9a:41:9c:9f:0b:eb:5d:b4:
d8:bd:ed:23:bc:7b:57:c2:85:47:f9:62:60:99:1b:b6:3b:81:
8a:c5:67:da:04:7c:6b:25:ee:45:cc:81:e7:2e:7d:60:f1:73:
4f:bb:5a:81:e3:e0:f9:42:d7:dc:29:02:13:4d:52:cd:35:4f:
1b:67:cb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:46 2025 by rpki-client