Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
File: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft (raw, json)
Hash identifier: YakZzV43henaqV5fJ9ehUFYrKIU/PsOAFFOGIic+WyY=
Subject key identifier: 0C:40:6E:D8:BA:05:18:31:83:B5:10:78:0D:C3:A2:E1:5A:BC:E1:45
Authority key identifier: C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
Certificate issuer: /CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
Certificate serial: 019A4D7486259B16BF6FAF98AB689B3C5684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
Manifest number: 0808
Signing time: Tue 04 Nov 2025 06:01:13 +0000
Manifest this update: Tue 04 Nov 2025 06:01:13 +0000
Manifest next update: Wed 05 Nov 2025 06:01:13 +0000
Files and hashes: 1: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl (hash: X3K35+33GOylP3A9w/HjpvdYkMb982Z8kTQqHWyrUGU=)
2: zpicEsTdAQH31s_U5VTklFFkx3A.roa (hash: F4NgHOhmdVZSO+9LtvSeSBchmLUaANtpy3YFPClVpoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:86:25:9b:16:bf:6f:af:98:ab:68:9b:3c:56:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
Validity
Not Before: Nov 4 06:01:13 2025 GMT
Not After : Nov 5 06:01:13 2025 GMT
Subject: CN=0c406ed8ba05183183b510780dc3a2e15abce145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:ab:0f:4e:72:ec:56:bb:ac:d2:5d:42:ad:
71:b6:f7:e6:39:d1:dc:77:f2:1a:2c:22:70:f3:77:
e8:15:f5:99:93:24:5e:54:0d:d2:74:26:c7:14:a7:
e7:f3:73:37:15:0d:35:c2:27:91:ad:9c:2b:d2:0a:
48:ce:91:ca:91:e3:f4:e0:11:b2:3a:68:49:5e:20:
79:91:69:73:cd:75:3e:08:02:3f:a2:64:c4:3f:f6:
0a:52:db:1b:6d:a7:1d:15:cd:4a:ec:1e:0d:e3:3d:
c2:0c:87:3b:8a:a0:f0:4f:94:f4:7f:64:0e:38:ae:
f4:67:64:e8:da:19:4b:48:58:c0:39:35:08:26:56:
bf:f0:1c:2f:b6:1d:48:d0:c6:d9:4a:1e:a1:66:d1:
c4:14:48:3b:71:2f:5e:b6:dc:59:fc:af:49:45:4a:
d3:9e:bc:89:95:a7:85:bd:11:e8:d5:ea:11:98:87:
50:95:6f:c1:8f:81:7e:10:e6:16:d1:c0:b8:d5:43:
78:12:06:36:63:ac:d7:55:b6:ca:c3:f5:2f:7b:96:
8e:26:eb:72:09:2d:26:e8:a8:12:3b:f4:53:1f:fe:
e1:9f:92:8f:cc:e8:1a:e1:c3:a0:f4:b7:00:6c:71:
08:04:39:56:26:b2:44:03:c0:0a:49:14:e1:7e:30:
1a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:40:6E:D8:BA:05:18:31:83:B5:10:78:0D:C3:A2:E1:5A:BC:E1:45
X509v3 Authority Key Identifier:
keyid:C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:31:f6:4a:f3:76:50:56:42:6c:80:1f:09:55:6b:e8:7c:bd:
cd:4b:fa:56:34:58:43:34:ae:fb:f2:76:02:f8:f6:83:53:3f:
d9:9a:8a:2f:88:c5:8f:f5:fa:fb:89:82:c6:0c:2c:ab:18:0b:
20:2e:c6:c9:12:d2:3e:68:6b:3f:bc:65:b3:d8:7c:4d:43:93:
91:e9:3c:d2:61:6c:e9:f6:11:6b:d2:5c:a5:d2:17:ea:51:57:
fa:0f:98:08:49:d9:49:e5:51:6c:33:43:bd:08:a2:11:33:df:
77:5b:20:b7:9f:70:c9:f3:b3:a0:a9:c9:21:bd:4e:4d:b9:74:
1b:ce:69:32:33:e0:c8:5f:4b:24:b1:a4:46:06:d5:fa:b5:3c:
ff:6f:eb:da:3f:d7:7d:18:9a:ea:d6:a1:67:f0:91:dd:43:d8:
cb:e1:e1:99:a3:26:63:7c:69:3f:c4:06:0b:93:89:4b:a6:00:
48:b6:b8:87:72:36:9b:4e:65:f3:e9:1e:9d:a1:bc:bc:16:e9:
1c:6e:96:5f:a2:d7:89:5c:9d:53:66:7b:5f:59:50:07:9d:3a:
22:cb:9e:50:cb:3f:a5:5b:a4:ef:10:f4:8a:8e:5f:f7:fc:5d:
4b:d6:8c:88:88:3b:3e:a1:93:93:3f:22:cb:20:50:c3:ad:12:
01:f5:58:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:16 2025 by rpki-client