Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
File: wPDumEJicDHsomTaxl5f72OUP5g.mft (raw, json)
Hash identifier: y3vNhYHA7qyR8XmC6TMew0P2nsmF/vmwwsFq9i4oLDU=
Subject key identifier: F0:0D:44:F1:0F:B5:75:C3:02:4A:7D:CF:21:9E:CE:9E:13:A0:85:29
Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
Certificate issuer: /CN=c0f0ee9842627031eca264dac65e5fef63943f98
Certificate serial: 019A4DE180A62BA404380DD2A1D99549CFE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
Manifest number: 0DDB
Signing time: Tue 04 Nov 2025 08:00:15 +0000
Manifest this update: Tue 04 Nov 2025 08:00:15 +0000
Manifest next update: Wed 05 Nov 2025 08:00:15 +0000
Files and hashes: 1: KyVtpyRTcvgBS4JaV8NPZOuwdLQ.roa (hash: iY3Qd0RfijC3WmQCC9uFX5dUNLie0ZRKHtS62kmKzs8=)
2: wPDumEJicDHsomTaxl5f72OUP5g.crl (hash: Y9gHqif70vM0vH0uaazTNrxzgRMZamjy61wEFSridQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:80:a6:2b:a4:04:38:0d:d2:a1:d9:95:49:cf:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98
Validity
Not Before: Nov 4 08:00:15 2025 GMT
Not After : Nov 5 08:00:15 2025 GMT
Subject: CN=f00d44f10fb575c3024a7dcf219ece9e13a08529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:b2:4a:ca:ca:52:e1:7d:c5:16:8d:26:ee:
4a:7c:dd:87:5c:58:e6:60:b3:54:af:a7:fa:15:ef:
2a:f4:16:0a:a3:d2:45:59:79:4f:b8:39:1c:23:4b:
29:21:06:f3:6c:d0:fe:80:e3:d4:2f:ba:6e:b5:d6:
49:0d:b9:7e:bd:f4:6c:59:f5:41:4d:4a:9c:6d:1f:
97:bc:a5:80:58:ea:14:96:65:12:45:a5:cd:2f:ae:
04:e0:86:21:8e:eb:63:e0:c3:89:09:b9:87:6c:da:
e6:32:93:9f:e7:d7:76:f7:f3:bb:66:e0:9b:e9:25:
e2:8b:98:41:1b:ec:1e:df:0a:82:fa:5e:94:9c:c9:
f4:c4:f5:d1:b1:b0:48:a2:18:d7:60:08:37:7b:27:
0a:19:f2:21:dd:65:3b:ba:9f:ef:d6:d5:29:c5:ef:
6b:c6:04:0d:b7:3a:7a:c0:5e:34:e5:74:cd:42:0f:
7c:06:0d:4f:6d:e9:d2:bd:65:d4:4a:68:9f:27:31:
6d:f3:43:b0:ec:d9:54:30:b3:a9:fa:16:c4:19:76:
69:b1:dc:1b:61:68:80:39:91:f6:b8:d6:11:6e:c5:
e7:4c:15:55:0b:32:8b:ce:87:c1:28:5f:ca:f4:03:
0d:42:97:d1:a1:aa:61:22:eb:ee:0c:86:1c:df:35:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0D:44:F1:0F:B5:75:C3:02:4A:7D:CF:21:9E:CE:9E:13:A0:85:29
X509v3 Authority Key Identifier:
keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:36:f9:2a:25:6e:b1:cf:72:8a:65:b0:d6:ff:49:94:a8:32:
31:77:c7:63:e5:c1:14:ea:55:91:00:11:5a:5f:97:0d:28:66:
80:9c:2c:d7:6a:36:d3:04:3c:40:0f:6c:0f:d4:1a:06:b2:ed:
76:0e:45:0f:05:1c:ed:8e:ae:f2:38:97:09:39:25:dd:77:cc:
33:94:15:a4:ef:3a:87:9c:27:76:ea:7f:4b:cb:08:6c:6e:63:
bf:81:3b:ce:98:8b:d3:57:3e:a6:93:93:e8:f9:ab:1d:79:9f:
eb:37:ea:40:61:9e:71:81:62:03:58:d9:64:50:d0:3e:dc:7b:
b5:e5:f3:e3:ae:33:59:cd:e7:fa:de:af:22:e7:be:41:ff:f4:
5b:a6:ff:95:1a:2e:e0:4c:ec:f7:2d:7b:7a:7d:ad:9d:4c:b4:
a6:dd:c0:b3:52:f0:2e:88:88:6a:1b:f8:d3:f2:db:6c:59:99:
59:c6:97:11:3c:fc:ce:e6:68:5b:0f:2f:b9:a0:f9:7a:ba:53:
ed:a0:f5:42:d6:58:60:fb:2b:2e:4c:c9:7d:be:0c:a7:d1:14:
24:a3:a5:2a:31:dc:45:f6:9b:48:3b:8c:e3:1d:4e:c1:0b:82:
e5:1d:c4:ef:14:31:b2:3d:e1:53:4c:63:ea:8e:a6:5c:9d:6e:
d4:87:46:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:18 2025 by rpki-client