Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
File: wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json)
Hash identifier: BCz9/eUcqQtsO3NDnX3lI5vttIdaJ9lEHC3yQp6rTz8=
Subject key identifier: 18:1F:AE:3E:26:79:64:C9:DE:BA:DB:9F:39:0A:0C:00:B1:59:22:43
Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
Certificate issuer: /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Certificate serial: 019A4DE1ABF695D069049D6647922FDDCA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
Manifest number: 0FE0
Signing time: Tue 04 Nov 2025 08:00:26 +0000
Manifest this update: Tue 04 Nov 2025 08:00:26 +0000
Manifest next update: Wed 05 Nov 2025 08:00:26 +0000
Files and hashes: 1: T_9TOa_stF5E9eIWRjxCGlAnn6k.roa (hash: 4V/y6Lec10YacV5wmtQBGvh+cufcrshrFw6PyKn/laI=)
2: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: WIXUS5ozKMvNj+X3XjrQtyTvPrT4WjqcRjrZuCDVUhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ab:f6:95:d0:69:04:9d:66:47:92:2f:dd:ca:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Validity
Not Before: Nov 4 08:00:26 2025 GMT
Not After : Nov 5 08:00:26 2025 GMT
Subject: CN=181fae3e267964c9debadb9f390a0c00b1592243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:50:44:54:44:cd:6a:2d:44:5d:00:a8:0e:ba:
5b:6e:c9:ee:b8:f3:39:45:4b:82:c5:b7:d2:f0:0d:
86:1a:97:10:21:ae:1a:b0:e9:34:5c:2c:7e:a0:4f:
de:c9:1a:53:79:48:ba:da:87:00:d6:7b:35:ad:fc:
ed:4a:bf:cc:fa:07:47:68:5a:8f:eb:72:04:d9:4a:
8e:70:af:fa:7c:39:25:d0:bf:3c:80:86:a6:26:5e:
36:d5:72:5b:23:35:60:94:23:67:a6:e0:bd:9c:67:
76:ab:df:b7:fe:22:3e:f3:da:6c:9e:ce:d6:ec:39:
08:4b:8e:75:43:f9:cd:1a:1b:c5:24:c4:86:9f:e0:
c2:15:17:7a:af:06:10:22:e8:92:84:44:47:d1:08:
ea:07:d5:e4:aa:1b:be:4b:46:33:e1:c8:78:55:79:
25:57:6f:9d:88:36:7a:e0:5f:55:d3:7d:34:00:79:
ab:d4:9f:13:f9:98:3c:80:f4:16:91:eb:47:52:8e:
a3:17:70:31:6f:dd:5f:54:c5:d9:96:b1:72:8e:93:
7e:ea:19:7e:16:64:c1:f2:49:d0:44:1e:fd:ed:82:
22:fa:28:71:a4:97:ff:7c:0b:16:25:e8:a7:de:88:
07:6a:af:ae:d7:02:f5:f6:40:ff:5c:d0:1b:bf:f3:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1F:AE:3E:26:79:64:C9:DE:BA:DB:9F:39:0A:0C:00:B1:59:22:43
X509v3 Authority Key Identifier:
keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:af:b5:0c:74:19:06:71:81:7c:be:12:94:c9:c7:58:3b:b7:
0d:7c:ab:cc:c0:32:9d:57:7e:59:fb:32:04:5c:37:3f:0c:70:
56:e5:92:da:90:14:ac:c2:4f:9d:64:25:fe:62:52:9a:70:98:
5b:06:75:c1:2f:b9:7d:1e:14:d8:84:73:26:54:28:1e:70:f8:
0a:ed:d8:56:da:82:c5:98:b1:93:27:d9:f9:1b:20:41:2b:10:
36:b0:eb:29:04:fd:62:d8:a2:5a:b1:b8:cd:33:fc:74:62:a6:
26:3f:47:01:6a:38:c6:ce:f0:26:7c:7c:de:3d:7f:15:4f:99:
2c:7b:25:74:ed:07:f4:ec:4f:ba:c5:b4:73:dd:a9:04:96:f8:
36:41:69:7f:eb:f1:0a:6c:b6:61:0a:34:43:36:83:06:4c:90:
cc:04:f4:cd:87:25:60:c1:f5:51:78:72:36:85:ee:66:a1:89:
0e:94:21:fa:30:2f:40:18:d7:c9:77:d8:c5:11:aa:1f:6c:d7:
ca:08:63:17:a5:62:1a:5f:fd:4d:7d:68:2f:0d:5a:57:f6:11:
19:11:e5:71:fb:23:6f:ab:b5:56:63:fb:6e:1d:d8:08:3b:62:
dc:1e:03:ba:fe:5b:5a:4c:d7:b4:bb:cc:d6:bf:47:14:cb:38:
15:28:b7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:28 2025 by rpki-client