Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
File: wU7kzo087uI-Amb8r1RIIK5BB4g.mft (raw, json)
Hash identifier: myJX+PxhYDCojVT+SpP5DSGJBHBxMwze+9ecb0aD5wU=
Subject key identifier: 2C:C6:F5:93:DE:FA:A8:DF:E4:BD:9D:48:00:0B:C7:D1:58:8C:AA:33
Authority key identifier: C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
Certificate issuer: /CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Certificate serial: 019A4D740AD2C07C450FD6EB18ED76D0562C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
Manifest number: 0367
Signing time: Tue 04 Nov 2025 06:00:41 +0000
Manifest this update: Tue 04 Nov 2025 06:00:41 +0000
Manifest next update: Wed 05 Nov 2025 06:00:41 +0000
Files and hashes: 1: StpUpn9lX23TO-Oe-4PI79KxNG0.roa (hash: Y4gPgVsX/dvV/I4lGCjA++A6e1J5MarmPPrWMNyloHc=)
2: wU7kzo087uI-Amb8r1RIIK5BB4g.crl (hash: oUy4NN3jnxrVbtRxUmF7a3FxwkTOuRSjuS3pZLzCPCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:0a:d2:c0:7c:45:0f:d6:eb:18:ed:76:d0:56:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Validity
Not Before: Nov 4 06:00:41 2025 GMT
Not After : Nov 5 06:00:41 2025 GMT
Subject: CN=2cc6f593defaa8dfe4bd9d48000bc7d1588caa33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:25:be:be:98:df:3c:4c:d2:bc:f2:74:91:
37:20:4a:15:9b:fd:db:79:b5:76:25:f0:3a:42:46:
7c:79:d9:35:53:e5:d6:97:10:fd:43:84:58:71:a2:
6f:27:37:d6:f8:ba:45:bf:57:ef:17:c6:72:6d:20:
49:7d:4e:fa:fe:e9:56:85:cf:aa:4e:d4:5b:e8:10:
74:73:12:6a:42:a1:c1:94:3d:7d:e2:53:37:51:2e:
fd:88:a0:42:02:82:b3:c8:7b:33:e2:a0:8f:1e:44:
11:8c:33:fb:7b:08:a7:a5:f4:ea:9c:ce:f9:c8:2e:
2c:34:6f:f7:af:76:99:ba:c9:86:7c:ab:49:04:41:
d6:df:80:bb:17:7d:46:a8:fc:76:1b:7f:ef:33:21:
44:30:a3:d2:a5:e0:a8:1a:28:4c:65:b5:1e:de:fc:
3b:0f:63:58:50:b7:79:d3:ba:c7:2b:5b:28:6e:02:
54:c8:80:00:79:3c:f1:4e:41:42:31:a4:7f:0b:29:
42:22:fc:fb:ba:b1:3a:9e:31:e0:98:5f:12:00:71:
e3:f9:f6:bf:45:6b:fd:4a:40:ce:9e:07:c9:ee:e5:
d3:25:48:d5:b9:5a:42:8e:43:ff:fe:90:97:0c:46:
40:41:51:3b:14:db:dc:44:a9:80:02:c6:2c:56:3e:
60:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C6:F5:93:DE:FA:A8:DF:E4:BD:9D:48:00:0B:C7:D1:58:8C:AA:33
X509v3 Authority Key Identifier:
keyid:C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f4:4d:19:b7:93:04:86:41:90:d8:0f:4a:8f:2f:ef:28:71:
2a:25:03:2c:5d:20:e5:2a:db:25:b3:32:77:69:74:a4:94:df:
38:d1:4e:1f:06:56:dc:14:ad:7c:3f:0a:4b:59:b0:ba:22:f5:
82:95:1e:26:2f:93:8c:07:f7:f2:af:ed:22:e0:d1:0b:6c:4e:
c6:3f:44:07:d6:d6:58:5c:a3:fc:85:d2:a9:2d:cd:7f:86:cb:
bc:1e:e3:de:a3:e2:50:db:9f:00:70:1b:a4:2f:4c:84:46:dd:
da:20:2d:de:a3:b4:fd:ab:0a:be:0a:7d:2a:63:1f:b6:3d:74:
38:3e:7a:32:43:2d:08:cc:c2:39:bd:80:ab:b2:ad:76:da:6a:
bd:80:b1:68:ac:26:37:73:9f:99:47:53:e7:26:7d:73:c8:b6:
a6:9a:53:f0:a6:86:bc:c3:bd:d5:04:8e:dc:d7:f4:30:df:b7:
5b:90:35:6f:88:d1:d7:5f:f3:25:21:47:71:3b:98:28:f0:86:
b3:c1:13:c5:a0:03:40:4d:18:65:19:3e:6c:0c:15:3b:24:b0:
08:ce:5a:93:0e:f6:45:cc:eb:bf:13:e7:2e:26:83:c0:d6:bf:
d6:c4:8c:ef:84:0f:8b:c5:cb:60:e3:7d:d6:08:ec:e0:e7:e6:
9d:9e:99:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:17:52 2025 by rpki-client