Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
File: wc2HDWChpsQgZxWK7rzA4_1t2B8.mft (raw, json)
Hash identifier: 4I/NGRQcqq2GM2tM6rfhoQYGF81s6PREXfmMzFALAkE=
Subject key identifier: 78:A3:87:3D:96:72:94:43:C5:2C:5E:ED:B6:9A:7B:8D:2F:0A:50:F0
Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
Certificate issuer: /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Certificate serial: 019A4E8682A11D82DCD7A33AFFBA42D5C1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
Manifest number: 03F0
Signing time: Tue 04 Nov 2025 11:00:29 +0000
Manifest this update: Tue 04 Nov 2025 11:00:29 +0000
Manifest next update: Wed 05 Nov 2025 11:00:29 +0000
Files and hashes: 1: BqHb_zqnMM3dIgBF_BTfgVY5a5k.roa (hash: uhtJUVXZSGPPQKjYqbLF+Cz5CPTBTCYfz/c5yIRK4Ss=)
2: wc2HDWChpsQgZxWK7rzA4_1t2B8.crl (hash: K2dOTPW/moeOq+DiwjhSOX+7Lj9WuO1WwZX7P9wwp7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:82:a1:1d:82:dc:d7:a3:3a:ff:ba:42:d5:c1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Validity
Not Before: Nov 4 11:00:29 2025 GMT
Not After : Nov 5 11:00:29 2025 GMT
Subject: CN=78a3873d96729443c52c5eedb69a7b8d2f0a50f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:d3:26:e0:4f:a5:06:19:4e:cf:6a:4c:e7:
dd:49:a5:96:2d:34:3a:ce:f7:c3:7f:fe:ce:0c:e9:
da:d8:53:ee:01:14:55:e6:93:1a:e5:f6:10:0f:be:
c2:79:2c:3e:f9:c9:b3:d4:8e:52:34:91:bd:16:3b:
40:70:37:2c:69:8a:29:76:75:a0:73:4d:24:99:68:
6b:a2:41:d3:03:66:85:95:5c:39:b7:03:56:23:2b:
cf:3d:e5:61:fb:cd:4d:c0:b4:b7:dc:13:ae:ea:d1:
6b:c9:05:96:57:65:90:1c:f2:1f:51:c6:63:eb:c7:
ba:3e:7f:54:66:12:b2:2d:22:43:70:78:94:d2:11:
34:e7:d5:51:4d:9b:3d:ed:94:39:75:72:7e:3f:0d:
36:c9:83:59:0c:33:cc:be:0a:8a:0d:04:f5:a3:90:
a4:96:95:33:02:28:0e:c9:74:4f:90:a8:c0:29:61:
18:df:fb:fd:68:bd:1c:10:ae:8b:27:98:00:3d:ef:
85:02:d8:e9:2a:0b:54:28:e4:3d:14:59:b4:d7:9f:
51:99:66:31:d0:c8:e4:f3:a2:94:f0:ab:86:bf:19:
12:41:05:9a:7e:2f:b0:6d:c1:b9:eb:d1:42:d5:a5:
91:87:50:25:de:38:99:de:32:c1:5d:b5:db:ad:a8:
97:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A3:87:3D:96:72:94:43:C5:2C:5E:ED:B6:9A:7B:8D:2F:0A:50:F0
X509v3 Authority Key Identifier:
keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9d:a4:2e:3d:62:20:e5:7c:ee:51:9e:b6:98:b7:cc:5c:8e:
0e:85:a7:11:ab:bf:e2:5e:24:ca:48:8d:ce:53:31:1d:50:f8:
5d:6c:33:68:64:57:60:20:79:1a:34:1a:e1:80:06:9a:a9:a3:
78:1a:f2:e1:c2:a1:16:37:e9:99:1f:42:6f:fd:a5:fe:ab:2c:
5d:5a:ad:64:e9:64:ab:4f:25:fc:22:75:f7:01:33:08:df:84:
00:6d:94:98:bd:de:b4:c8:f4:97:cb:fa:31:6e:af:96:0c:59:
50:0b:ff:07:35:b2:d8:e2:73:27:7a:5d:9a:ef:3b:7a:1c:fd:
28:75:49:00:34:2b:03:75:f4:8a:2a:f6:07:f8:41:06:c6:b9:
d8:08:c1:91:97:40:ce:41:fa:1d:f8:b1:9b:ae:5e:fa:a6:46:
84:d8:6b:fe:f3:b3:76:07:3d:46:c0:d8:df:49:2c:58:29:92:
7f:ed:c4:60:e0:84:70:29:20:72:d5:55:ea:1c:40:94:b5:f2:
2b:3c:05:5e:d9:dd:68:2e:aa:5d:02:6c:74:0e:d8:23:a2:ab:
a4:8a:64:32:d7:b6:10:36:df:23:35:08:8f:e0:8b:1f:7a:7b:
12:2d:df:8f:2f:b4:c2:92:87:8d:b4:08:c1:54:33:6a:16:f3:
75:86:18:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:15 2025 by rpki-client