Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
File: wQdbeoGvSd7_tsg1xWCO4LiEMso.mft (raw, json)
Hash identifier: Qwn+JaJNdrPgzUlgKc/yXmCO7kAWeiqV3qTgdel9k1s=
Subject key identifier: 2B:A0:B5:DC:41:F2:CC:B6:1A:3A:02:B2:F5:EE:F7:A3:5A:1C:3C:50
Authority key identifier: C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
Certificate issuer: /CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
Certificate serial: 019A522C27C36F134B3DDE37C4AB0229DD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
Manifest number: 023F
Signing time: Wed 05 Nov 2025 04:00:16 +0000
Manifest this update: Wed 05 Nov 2025 04:00:16 +0000
Manifest next update: Thu 06 Nov 2025 04:00:16 +0000
Files and hashes: 1: YfJtBuAEzwrAwSN_J7xGNSKCjCE.roa (hash: XmpRYRo5Vs4yfW8P8k8ClzDTbvhLktOQ+0fCN4Fj/SI=)
2: wQdbeoGvSd7_tsg1xWCO4LiEMso.crl (hash: l3kwd7aBYknfQDNDcyfC1bUTfVYND88LlCI43YhsbQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:27:c3:6f:13:4b:3d:de:37:c4:ab:02:29:dd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
Validity
Not Before: Nov 5 04:00:16 2025 GMT
Not After : Nov 6 04:00:16 2025 GMT
Subject: CN=2ba0b5dc41f2ccb61a3a02b2f5eef7a35a1c3c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:28:69:35:77:b0:89:f0:bf:dc:29:6e:be:
e7:98:d4:a6:78:29:5a:4e:3a:4d:64:7c:9e:35:df:
4c:bc:55:e0:4e:ac:27:2e:bd:dc:11:45:ae:4d:8d:
ef:2e:4f:60:14:f6:58:ac:1b:a1:2e:36:b3:76:f2:
1f:d4:70:ab:40:1a:a7:01:b9:ab:e4:fc:d3:b7:09:
5e:d5:c5:dc:4d:fb:09:d2:78:bb:e9:e6:d1:88:66:
f8:00:9a:c8:11:01:e5:c1:43:72:18:d6:a9:18:93:
4e:69:52:c9:4f:83:38:c1:32:b0:be:60:cb:a3:cc:
07:da:f8:90:57:ff:ae:d1:fc:87:8b:1f:0b:67:9b:
0f:60:72:55:b2:36:09:f8:62:1b:9f:4c:64:02:36:
80:b8:5a:4c:e2:1c:71:fb:01:08:1e:ef:3b:09:c2:
35:a9:4b:0b:1d:6a:b7:73:b8:1e:50:eb:4d:97:32:
6e:b0:f2:22:b2:0a:88:b0:ae:b2:3b:87:d3:6b:44:
75:44:bf:48:0f:d2:1e:6b:0b:9f:06:79:fe:ad:9c:
98:d2:5f:2e:12:fc:a0:39:bf:fd:f7:e3:2a:f4:5f:
ad:ba:61:34:2e:43:82:7f:bb:3d:94:02:82:8f:61:
3b:c5:80:3f:0c:e5:04:f2:2e:55:d8:62:73:03:09:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A0:B5:DC:41:F2:CC:B6:1A:3A:02:B2:F5:EE:F7:A3:5A:1C:3C:50
X509v3 Authority Key Identifier:
keyid:C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:71:fa:e4:76:09:4b:98:65:64:4e:32:a5:d3:77:f2:8b:67:
c3:46:c1:dd:09:2c:97:24:c6:04:f8:99:c8:bf:02:73:2d:13:
d0:38:c0:6d:9f:30:49:3d:31:6c:95:03:e9:d2:45:8c:de:9d:
b7:5a:00:fa:c2:79:c7:26:25:b6:4d:9c:fc:05:b9:6a:9b:7b:
5a:78:9a:2c:ea:01:83:7f:4d:23:f0:b7:44:b3:26:34:47:1e:
a2:90:b2:75:91:bb:15:d8:be:c0:84:74:8b:19:9e:cf:9c:9a:
31:f8:0b:a2:2d:91:2c:d1:8f:8f:8e:bc:02:41:90:ba:a8:a4:
f0:38:48:c6:7e:b8:35:d0:10:61:76:d6:57:fe:1e:8d:ae:33:
22:09:7f:f1:d0:8c:45:14:ca:31:58:62:6b:9f:d0:9f:9b:47:
5b:f2:b5:56:ab:a0:73:a9:ef:a7:5e:c5:19:08:5d:49:d3:6b:
df:f1:5a:2c:1c:7b:aa:f1:58:e2:08:16:89:bc:7e:34:9c:15:
b2:eb:ce:07:57:75:7c:0c:f7:ec:f9:c4:dd:40:5b:37:34:73:
07:67:d7:53:ee:a9:74:83:a0:13:9e:01:31:96:fc:88:5e:03:
a2:f4:4d:79:db:d3:ac:33:82:b1:e2:bf:a8:8f:a4:35:f6:8a:
47:cf:58:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:40:50 2025 by rpki-client