Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
File: wMfxuj-ucTZOkysFYNYCxXJd2o4.mft (raw, json)
Hash identifier: C1tAiwWttoAKaSBRe+kU21czulvr6k2K4y8b+KF/hB8=
Subject key identifier: F1:18:43:AE:5E:AC:5C:0E:96:F1:4A:69:B1:92:A6:20:76:20:35:C2
Authority key identifier: C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
Certificate issuer: /CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Certificate serial: 019A4E188379A51E8E6BC1B838C6F0848141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
Manifest number: 0B85
Signing time: Tue 04 Nov 2025 09:00:20 +0000
Manifest this update: Tue 04 Nov 2025 09:00:20 +0000
Manifest next update: Wed 05 Nov 2025 09:00:20 +0000
Files and hashes: 1: Ts1wD-6dXK6YF6lbWc4Bp6qGGOU.roa (hash: l6AYzjv5b4VOeQIHxSNacHxCFNVxW6gn4dbeXJ7uQKA=)
2: wMfxuj-ucTZOkysFYNYCxXJd2o4.crl (hash: 7suTgrWxD+xMgxYQwIdbxYmGMc1GcsEmps3e5SOjpEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:83:79:a5:1e:8e:6b:c1:b8:38:c6:f0:84:81:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Validity
Not Before: Nov 4 09:00:20 2025 GMT
Not After : Nov 5 09:00:20 2025 GMT
Subject: CN=f11843ae5eac5c0e96f14a69b192a620762035c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:d5:68:53:f7:ae:02:e9:e0:79:25:94:db:
e9:ff:fe:fb:cc:8a:89:e1:70:95:5f:0e:f0:6b:1d:
d4:37:fd:a9:c2:bc:91:fe:ed:93:ed:53:67:8c:c3:
e4:ef:94:58:ff:d3:4d:55:4c:3e:1c:b4:42:60:43:
f7:57:0c:b6:d8:a5:bc:3a:db:12:bf:76:82:9c:00:
93:cc:3f:2e:29:e9:1b:ca:53:70:59:90:af:ad:29:
f7:33:2b:cb:96:4d:c0:2e:37:bf:fc:ff:d3:f7:7c:
85:e5:f4:82:3a:fd:56:ea:5c:74:33:ec:35:fe:7a:
38:64:b0:e4:aa:b5:58:ab:0e:9d:df:73:ca:f4:e5:
ea:9f:ba:41:dc:fc:61:ba:61:dd:1b:a2:21:e6:f3:
df:7f:c4:71:81:f1:69:c2:23:45:40:87:08:ad:a9:
0c:f2:63:b5:87:9f:2f:8a:38:4c:50:dc:03:ac:c6:
c1:b3:cf:cc:08:00:64:ed:03:f5:52:f0:57:da:76:
49:fe:c4:0a:55:5d:4f:8e:ae:fc:7e:19:6c:44:b1:
85:d5:3d:64:45:0a:d3:96:2e:12:b8:b8:63:fd:47:
ff:e7:37:af:a4:de:96:ca:38:bc:0f:83:06:66:3d:
73:d4:56:4f:4d:c3:ae:a1:a3:1e:17:26:84:22:6f:
b8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:18:43:AE:5E:AC:5C:0E:96:F1:4A:69:B1:92:A6:20:76:20:35:C2
X509v3 Authority Key Identifier:
keyid:C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:91:20:11:6c:47:04:74:c8:17:a4:26:61:26:bd:1e:44:e0:
fb:b2:48:be:d1:4b:50:ef:82:3c:49:d4:e5:48:ff:ca:58:35:
8e:14:4d:bd:c0:52:db:23:77:51:25:07:00:47:11:c0:b3:5b:
69:b8:ef:a2:5c:5d:38:02:92:14:6f:ca:8e:ab:2f:07:cd:c1:
3f:0a:e1:b8:e2:22:0c:8f:9f:ad:0f:5b:51:fa:72:7d:b9:8c:
21:a7:4c:8c:ab:aa:05:91:78:69:56:64:ef:4b:b9:39:1a:da:
95:35:24:32:6e:1f:a3:24:1f:d3:2d:33:f1:08:87:d5:96:83:
70:89:cf:85:72:e6:83:93:ab:24:45:5d:3d:ce:df:9e:92:0e:
55:ca:10:b7:f6:98:a1:05:20:f7:c3:c7:0b:e0:d1:a4:5c:8c:
dd:85:e9:dd:39:68:ad:58:bd:75:62:55:8b:be:c3:ea:ab:87:
20:9b:dd:b4:06:5a:54:af:3e:98:8b:fc:06:e0:4f:f8:13:91:
ae:f9:6d:df:42:39:ca:80:fa:93:36:de:45:21:07:4b:12:d1:
cb:32:6e:4b:03:de:d9:1d:7e:af:64:66:22:57:c8:8a:dd:c7:
ce:c9:8c:1f:fd:cf:2d:03:26:7d:87:09:43:95:e0:d0:37:da:
54:34:4d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:09 2025 by rpki-client