Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
File: 85-Wwg4Q928D7UeBW3pqXv2-A9U.mft (raw, json)
Hash identifier: cZjTPlOXBAC6vbORLseqMmVxFCwUKTxw80B458quTkw=
Subject key identifier: 1D:A7:5C:B0:7F:57:A9:4F:F7:85:3F:4A:98:DE:0E:44:33:FF:1C:DC
Authority key identifier: F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5
Certificate issuer: /CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5
Certificate serial: 019A4F625FA6FD6FB6E59668F65CEEEDA660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
Manifest number: 1237
Signing time: Tue 04 Nov 2025 15:00:38 +0000
Manifest this update: Tue 04 Nov 2025 15:00:38 +0000
Manifest next update: Wed 05 Nov 2025 15:00:38 +0000
Files and hashes: 1: 85-Wwg4Q928D7UeBW3pqXv2-A9U.crl (hash: xSe/GziN4jdIkGJ1JSz4TbdgvmCkViOq9Tk85zfCUD0=)
2: mG96Y715wDIwvEKSq5Z-71rWs6M.roa (hash: Y3E3/3Utv7uEbR1MqLWFqsWoMU44kmtfUjplzEpgK2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:5f:a6:fd:6f:b6:e5:96:68:f6:5c:ee:ed:a6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5
Validity
Not Before: Nov 4 15:00:38 2025 GMT
Not After : Nov 5 15:00:38 2025 GMT
Subject: CN=1da75cb07f57a94ff7853f4a98de0e4433ff1cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:e6:e8:b6:17:d7:d0:c4:7b:12:c0:c3:ba:
87:7d:5c:b5:3f:9f:fb:52:ae:86:1e:8d:dd:8f:8b:
9f:91:91:8e:3e:f2:a4:be:76:b8:f7:4d:f5:f7:02:
73:df:30:d0:b1:63:4c:ba:71:5d:47:a3:f9:f3:03:
2b:79:74:0b:d9:95:f7:ed:e9:7e:19:8b:c5:d1:7a:
a5:2b:b2:48:32:28:07:cd:65:91:7a:f2:d6:42:a6:
02:d6:b4:cd:e6:8e:b0:af:cf:03:8c:d2:8c:9b:76:
42:8c:e9:93:35:30:d8:f0:01:24:07:e5:26:77:af:
24:0d:b8:e3:d1:86:65:59:c8:15:3c:fb:48:09:11:
4d:a5:1e:07:b2:67:75:a9:b8:91:3a:56:9f:13:86:
27:03:d3:17:14:da:bd:e7:5a:10:7b:ca:31:e4:78:
49:c9:cc:57:43:60:d5:46:4d:04:17:c1:76:26:10:
26:86:2a:fc:83:23:8c:09:58:4c:91:49:69:65:00:
88:1c:34:06:e9:90:ce:b8:f0:39:3f:f1:3e:4e:4f:
1f:38:ea:95:21:a2:0e:e5:05:42:2b:e8:a9:12:e3:
bc:d5:3b:76:30:a0:d3:5c:bd:7b:22:9d:24:51:16:
2d:23:01:5f:4a:c1:60:bc:fa:1b:20:50:13:5d:5e:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A7:5C:B0:7F:57:A9:4F:F7:85:3F:4A:98:DE:0E:44:33:FF:1C:DC
X509v3 Authority Key Identifier:
keyid:F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:da:4a:4a:62:f4:52:50:0d:93:b8:01:eb:52:a4:44:d4:60:
97:8b:63:27:99:62:04:3f:3c:a7:9e:ea:99:e5:f5:31:1f:1e:
7d:de:61:81:cb:ab:00:0e:40:2d:ec:4d:6c:2d:25:92:9a:d9:
97:3d:1d:73:a9:56:8e:86:bb:a8:bf:d7:a2:b4:1a:3e:72:62:
25:a9:f6:4a:e5:1d:1d:15:20:4f:0e:cd:a2:87:20:41:e5:70:
04:2d:21:62:56:a6:18:38:45:e7:3c:6b:22:ab:0e:ee:d0:eb:
76:a0:1c:49:99:c5:7a:70:63:d4:af:ae:14:ea:aa:b9:3b:8f:
9b:7b:6e:ac:a7:7d:99:15:ee:a7:f7:d4:4c:73:3f:47:87:fa:
f4:fc:73:86:ef:69:27:7e:a2:77:85:a5:b7:64:4e:a7:de:9f:
6e:e1:ad:1b:b3:e6:1c:c3:5e:d1:ed:6f:2f:fa:44:25:53:41:
ab:e6:ef:91:8e:3d:53:5a:75:b1:42:c2:6f:36:0a:5e:3f:dd:
dd:50:76:8d:a3:48:cb:aa:d2:bc:f3:45:d3:df:06:3a:b1:2f:
75:65:ae:d8:6e:6c:ac:48:53:1a:15:dd:75:b2:4c:1b:6b:79:
03:ef:d9:5a:9c:9b:42:6d:3b:92:19:ae:a0:36:94:c2:b3:b4:
a3:bd:cf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:27:58 2025 by rpki-client