Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
File: wZ91slk8orGwpf0MVAFd4wbEfuY.mft (raw, json)
Hash identifier: AXeNpo1esQEGCWLAlflSIwZR2xY6iN10ScmI4A/qnes=
Subject key identifier: 4B:9B:87:9E:4C:4D:7B:A7:2A:1C:47:4A:29:DD:88:AE:78:27:07:6F
Authority key identifier: C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
Certificate issuer: /CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Certificate serial: 019A4C97EAF2ED4088317D9B6C5CD6DB8B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 02:00:15 +0000
Manifest this update: Tue 04 Nov 2025 02:00:15 +0000
Manifest next update: Wed 05 Nov 2025 02:00:15 +0000
Files and hashes: 1: NcyIXNvoa22SJL0FsYyeOTgc_BE.roa (hash: I7SWTbgf+E38lSjzpIc20ooNKJL8yjb7efp//cF2mds=)
2: wZ91slk8orGwpf0MVAFd4wbEfuY.crl (hash: Kfw8mViyXHx0bPe9t2hRbdF+ZvS9AcTGpcByfy6lsZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:ea:f2:ed:40:88:31:7d:9b:6c:5c:d6:db:8b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Validity
Not Before: Nov 4 02:00:15 2025 GMT
Not After : Nov 5 02:00:15 2025 GMT
Subject: CN=4b9b879e4c4d7ba72a1c474a29dd88ae7827076f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:30:46:56:52:57:6e:4e:e6:88:06:c2:de:
f2:c9:01:dc:8b:7e:eb:23:1b:a1:9c:b3:41:30:21:
68:80:d8:5a:36:a5:08:9f:ae:33:59:b7:53:ea:0e:
20:52:fd:de:19:ef:d9:56:c8:2c:58:e8:f1:fa:d3:
18:60:4f:20:cd:2c:7f:66:89:c1:71:e4:0f:f8:f8:
40:af:d2:c8:e7:c2:ed:d8:52:97:a0:ed:39:e3:a7:
d4:aa:3c:1b:5d:ae:36:15:77:7c:c0:63:7c:07:67:
30:9e:f3:01:ef:7d:a0:d6:94:f6:c6:9d:98:b9:1e:
75:db:c6:40:2f:4e:b6:06:c4:a7:d8:47:e9:06:76:
1c:9b:21:1c:96:57:43:28:c8:cb:ff:b9:40:fd:8b:
f4:38:f6:17:04:5e:b4:cd:9f:d7:cd:35:30:17:45:
10:5c:e2:2c:40:32:9e:6a:30:13:40:1c:85:04:66:
26:70:f6:f9:67:ca:a3:1f:a3:43:51:c8:4e:4e:30:
20:3a:8d:4f:e0:38:eb:3b:99:ae:2b:f3:25:8d:ec:
0d:6e:7b:22:f8:da:eb:04:7f:39:a9:b6:01:4a:47:
a5:c2:e3:a5:c3:3f:8d:cf:88:dc:ee:18:6b:b3:3c:
af:fd:4f:a4:e8:ce:50:e7:b0:19:12:20:d5:90:a3:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9B:87:9E:4C:4D:7B:A7:2A:1C:47:4A:29:DD:88:AE:78:27:07:6F
X509v3 Authority Key Identifier:
keyid:C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8a:6b:f4:5b:c8:cf:0e:02:5b:7c:99:0b:67:bf:6a:5d:de:
df:96:dc:b5:48:f9:f9:d3:72:68:18:34:17:9a:fe:9f:1d:89:
bb:d0:0b:ad:cf:64:79:22:b8:f1:a1:ce:99:f4:9b:83:fc:86:
c9:b9:e8:b8:86:94:87:f6:ed:e3:cb:ca:e5:f9:07:c6:cb:60:
36:f3:99:f1:c1:92:6b:04:5c:b7:63:5c:2e:0b:63:35:3b:a0:
1d:40:a0:08:8f:4b:6a:6c:ee:ce:19:40:ec:c4:05:32:25:a6:
8f:1f:8b:9b:ec:8a:36:ce:64:98:0d:a2:92:da:43:29:b2:a8:
59:eb:d4:a2:f2:4d:17:2d:a8:b7:53:5c:a6:62:5c:60:0d:96:
88:0c:52:71:bc:ed:cf:b7:d0:95:62:b4:a0:ff:55:83:da:44:
eb:72:e8:ce:c2:b2:23:8b:2e:06:cc:1d:40:0a:12:bc:68:8c:
2a:f6:47:1b:bc:7f:ab:4b:ca:81:43:99:a2:3b:73:57:fd:d4:
a1:d9:92:92:16:b1:23:6a:47:63:3a:01:59:ac:14:35:a7:99:
2c:c2:c2:d3:c9:56:cc:f5:ae:7d:db:e7:0f:8d:d6:26:81:2c:
b8:5b:65:d2:aa:a7:29:f7:e0:2e:cd:7a:17:ad:2b:f1:cb:14:
f2:d3:9a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:47 2025 by rpki-client