Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
File: wHCBpvcho3qeHXmTFbs-onWLiHc.mft (raw, json)
Hash identifier: LuA/t/vmJod8Us7UWJZ9W3A0AE+O6ElEtqEXqpJucJM=
Subject key identifier: 02:4A:DF:81:87:0C:81:24:23:37:3A:9F:25:7D:54:AB:48:95:1F:A4
Authority key identifier: C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
Certificate issuer: /CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Certificate serial: 019A4E4F81E2A17C8EE183699B21E7610784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
Manifest number: 0661
Signing time: Tue 04 Nov 2025 10:00:24 +0000
Manifest this update: Tue 04 Nov 2025 10:00:24 +0000
Manifest next update: Wed 05 Nov 2025 10:00:24 +0000
Files and hashes: 1: iBvouIeGNb-tETlrG7R7kd8KLJk.roa (hash: ZFh8TKmia8sW44WOw2BVZ15xBNpA9QpJzWskGjFsYMo=)
2: wHCBpvcho3qeHXmTFbs-onWLiHc.crl (hash: Lbwi0x4k9SGEv+Z593VCAfstwuZYGsJmjywNIvjqYDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:81:e2:a1:7c:8e:e1:83:69:9b:21:e7:61:07:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Validity
Not Before: Nov 4 10:00:24 2025 GMT
Not After : Nov 5 10:00:24 2025 GMT
Subject: CN=024adf81870c812423373a9f257d54ab48951fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:31:c0:7a:d9:6f:d2:39:d6:db:08:c2:c0:
e8:3d:00:ac:8b:1a:c6:2e:c6:31:33:e2:4b:95:f9:
44:07:8f:33:4b:a5:30:6d:d5:fb:90:41:b3:ac:5e:
92:0c:21:58:ad:1a:49:79:e5:24:55:86:58:ac:ff:
13:c0:d9:6a:2a:50:fb:bb:9d:7d:da:3f:f5:ae:b3:
2d:2c:e0:9b:ec:55:19:3e:b3:d1:00:4b:1b:33:45:
d3:d8:ac:76:6e:93:29:e3:32:84:e2:e6:d0:c2:36:
9b:c1:26:2b:cc:bf:4c:92:b5:20:34:d7:50:7c:db:
af:1f:02:35:15:ef:0f:3d:8f:c7:22:94:e1:4e:56:
9e:62:58:11:93:70:9e:7e:c7:a2:e4:b1:35:3c:bf:
e9:55:bd:9a:ac:5a:90:ae:e6:40:cf:7a:51:bf:f7:
5e:be:e4:64:3d:cd:9e:d3:6f:5d:ef:3f:c2:b2:c0:
20:97:0d:e0:11:1b:04:ea:bd:61:a8:c7:ee:be:69:
f7:d6:f1:09:a3:d4:9d:88:e5:57:e8:1f:74:f6:a9:
c9:37:0e:ec:51:55:94:ea:d5:b1:44:9b:9d:49:3a:
de:05:13:07:9c:07:c0:38:21:9c:08:40:a0:1c:e7:
98:2a:07:77:e0:bc:9d:08:36:fe:7c:66:d1:b0:7f:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4A:DF:81:87:0C:81:24:23:37:3A:9F:25:7D:54:AB:48:95:1F:A4
X509v3 Authority Key Identifier:
keyid:C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d3:ed:33:8c:70:1d:c0:bc:40:69:89:e0:b7:1b:86:39:ba:
b1:b0:96:42:88:75:4b:68:3f:bc:f0:f9:56:3f:96:7d:1c:85:
29:be:6f:13:c1:4f:13:5c:52:28:76:ed:72:e2:6f:15:8a:c8:
b3:e8:64:70:47:97:47:5a:4c:c2:fb:09:2f:02:8f:85:34:43:
01:10:7c:11:7d:be:59:ad:b9:d6:51:27:22:f9:66:f2:1f:10:
e3:85:65:e9:17:7e:21:02:d4:30:fa:98:a2:3b:40:8e:fa:13:
91:01:66:9c:99:0b:a7:ca:19:4d:ad:25:5c:e0:92:90:25:50:
8b:0c:aa:0a:30:65:33:51:7f:24:36:3f:e5:5e:59:dd:45:4c:
9a:74:b4:97:77:f0:d8:44:49:44:84:f6:ef:34:f9:94:47:e3:
d1:77:e7:de:0e:d2:ca:c2:c7:01:a1:be:73:85:52:c5:f6:b2:
e1:52:e4:2c:70:35:b2:cc:a5:61:fc:d2:c3:83:62:a9:0e:cc:
af:cf:c5:fd:7b:4a:3a:a1:23:84:d6:53:5c:dc:36:c1:3d:c3:
ec:9c:aa:68:90:1b:71:b2:da:b7:2a:d6:27:5d:3c:9a:d1:04:
6f:94:35:3e:b6:94:90:eb:33:e1:cf:2a:f3:d1:dc:fe:13:cb:
76:34:63:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:50 2025 by rpki-client