Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
File: wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft (raw, json)
Hash identifier: 1RQucfkZhgZnWJPu9F2OMBs54dN7cCxZsZ40UFA3G6k=
Subject key identifier: C0:BA:B4:BB:75:64:52:FF:88:A9:F5:1A:90:CC:5A:DE:97:20:C6:9A
Authority key identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08
Certificate issuer: /CN=c14d63d39707d45a8c683cb52e47171d136ce508
Certificate serial: 019A4E4FFB97FF64C61E66E61EEC97E57679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
Manifest number: 0FDF
Signing time: Tue 04 Nov 2025 10:00:55 +0000
Manifest this update: Tue 04 Nov 2025 10:00:55 +0000
Manifest next update: Wed 05 Nov 2025 10:00:55 +0000
Files and hashes: 1: VWUmt1-Lc9mwWkzpXFUMDbb2UqE.roa (hash: Tjmb/lxEFBxZz68PrILtJGnl1lSlmzqzB3RT5UoyTR8=)
2: wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl (hash: MjiSiUNxkcIkjzkXy64ALxagk0LM8T6r9rZ/NxlKP2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:fb:97:ff:64:c6:1e:66:e6:1e:ec:97:e5:76:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14d63d39707d45a8c683cb52e47171d136ce508
Validity
Not Before: Nov 4 10:00:55 2025 GMT
Not After : Nov 5 10:00:55 2025 GMT
Subject: CN=c0bab4bb756452ff88a9f51a90cc5ade9720c69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:7f:6b:aa:9c:a9:7d:36:2d:76:30:14:ec:
d5:2b:23:2d:c9:b7:7c:be:d6:4b:e7:2c:7b:43:4c:
16:c9:29:da:6a:15:ee:1a:0d:ce:22:2d:4e:5b:55:
fb:88:ba:5b:61:a1:b1:64:30:1c:e1:08:7f:05:9b:
fc:dd:46:3c:4a:58:68:fe:24:a9:c0:db:1d:e0:ed:
19:59:3c:15:61:93:55:5d:1f:81:99:63:bc:a0:c0:
b4:12:3c:1e:55:a9:98:97:1d:a4:7c:f7:32:39:ef:
58:7f:0c:f6:d5:9d:42:45:7f:8a:4a:95:60:a2:85:
a8:b5:73:4f:bc:c1:e3:68:f1:56:02:32:c4:e0:fa:
60:b3:9f:e1:60:2a:9a:3d:c0:dd:46:36:f6:1f:7f:
63:d2:2f:f6:1a:93:9f:22:e1:29:8a:f1:23:0f:a2:
4b:e7:4a:b8:82:07:a3:f2:8d:8d:54:e6:81:e7:0a:
6b:60:0f:a7:50:1f:36:8c:09:56:78:44:2a:70:a1:
96:50:70:b5:4e:df:3c:6e:9a:64:eb:92:3b:6a:5f:
1d:8b:0f:e4:60:36:b9:7c:5f:a2:8e:5b:af:b2:e0:
37:e1:32:fd:f3:c4:5d:26:36:66:65:69:63:d7:60:
a1:12:9e:11:cf:09:d4:37:bc:b0:94:fa:da:27:07:
f2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BA:B4:BB:75:64:52:FF:88:A9:F5:1A:90:CC:5A:DE:97:20:C6:9A
X509v3 Authority Key Identifier:
keyid:C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:98:c9:c8:b3:2d:e8:27:3d:f5:a0:5c:1a:59:11:7f:83:b7:
22:42:3f:e7:4c:ba:02:72:85:d5:00:17:a8:a9:1b:0f:b8:cd:
01:bf:36:01:4e:f9:27:a2:db:7d:46:b4:82:c4:1b:72:b5:4e:
e1:e6:d2:9b:2c:5b:58:17:11:69:33:39:8b:f7:18:39:56:bb:
58:e5:4b:ca:85:7d:d4:ea:56:34:f9:14:07:f6:c9:1c:21:1e:
61:31:fc:d2:d9:a4:d7:13:22:57:03:8e:08:62:19:ee:30:8c:
6f:27:05:cf:94:0a:2e:40:ca:47:3c:a1:43:39:89:84:ff:5a:
a8:d4:be:dd:d8:6c:0f:dd:ca:0b:f7:ed:ea:29:a8:a4:77:37:
36:9f:f3:3f:b4:6a:39:a5:06:2e:a8:ae:6b:7c:19:d2:46:dd:
5c:df:00:20:f1:af:ec:e3:ee:94:85:46:07:fe:a2:76:2f:29:
13:fb:9a:51:b8:18:eb:de:b3:69:82:1e:a1:16:1d:ea:cf:3b:
fe:8d:0a:45:64:45:46:e1:2d:a0:4b:2b:92:5d:06:0e:dd:5b:
f3:47:d9:a1:de:67:9a:0c:f1:26:b1:d0:89:57:75:b7:62:91:
1b:75:e7:a3:df:71:52:6a:02:d8:b9:51:12:31:27:68:a3:e2:
3f:22:a1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:03 2025 by rpki-client