Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
File: wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft (raw, json)
Hash identifier: cb/7k9A5FFlfXAmgHApasDSHYWWnVAnbkJdOVSSGBSk=
Subject key identifier: 69:96:FF:7E:1B:BA:0F:B0:07:CD:BE:1F:05:04:2D:D4:3C:AE:FE:78
Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
Certificate issuer: /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Certificate serial: 019A522C1F4F39157674F401CE5D68113DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
Manifest number: 0A31
Signing time: Wed 05 Nov 2025 04:00:14 +0000
Manifest this update: Wed 05 Nov 2025 04:00:14 +0000
Manifest next update: Thu 06 Nov 2025 04:00:14 +0000
Files and hashes: 1: 0YAlpXVId3LHx7bUr5xQcDkFv50.roa (hash: TFSQN0O8fIRBDFY4jZJFLp3OndkfiZIj1gXdcop7ZBU=)
2: wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl (hash: FHFCOSIZRa+Mr7nXQAQaJ4EpbqFdXGtuGJu1rxm2Lic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:1f:4f:39:15:76:74:f4:01:ce:5d:68:11:3d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Validity
Not Before: Nov 5 04:00:14 2025 GMT
Not After : Nov 6 04:00:14 2025 GMT
Subject: CN=6996ff7e1bba0fb007cdbe1f05042dd43caefe78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:63:8b:2f:63:f2:cc:72:98:d2:16:b8:a5:
62:98:8d:d5:bb:05:24:19:a6:7b:3b:01:3d:5c:91:
e6:95:94:53:85:64:28:25:77:77:a3:55:a1:d3:6b:
12:e7:a3:bd:1f:1e:0e:ad:cd:49:23:b6:77:b8:97:
dc:60:85:4c:c4:12:81:fb:0a:7e:04:44:52:94:27:
cf:ab:57:24:13:e5:5b:9b:7c:eb:f7:9e:26:d9:1a:
b4:6e:8e:24:1c:d6:f0:fc:eb:87:46:22:74:d4:58:
c2:f9:bf:31:66:83:55:a3:94:2d:64:ed:c3:16:00:
70:9b:1f:f2:54:9f:b9:d3:a6:10:2e:51:a2:9e:6f:
ca:63:63:43:57:9c:e0:f1:da:28:57:bc:3b:11:d1:
0a:00:1b:74:da:e3:1a:69:61:b6:9b:05:fc:0b:4e:
03:97:c2:da:fd:b5:42:cc:76:a2:a2:4d:93:26:27:
d6:cc:8c:0a:b4:21:90:74:47:7d:da:22:41:f3:f2:
3d:3d:7d:4f:3c:c9:8f:69:31:d6:10:28:f0:87:af:
cf:79:98:6a:f9:91:53:bd:b0:fd:9f:a1:b9:82:7e:
39:10:04:7f:b0:6a:23:7f:0b:a7:8b:61:18:38:79:
24:1b:fb:03:00:e1:89:b0:0f:44:b6:ba:74:c0:6c:
97:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:96:FF:7E:1B:BA:0F:B0:07:CD:BE:1F:05:04:2D:D4:3C:AE:FE:78
X509v3 Authority Key Identifier:
keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f4:b1:4b:73:db:bb:83:e5:da:ae:09:e2:33:91:38:17:17:
cd:3c:56:1b:e4:18:ea:85:33:83:dc:5a:6a:a7:01:35:aa:be:
02:c3:3b:03:57:27:26:0a:f3:07:6a:af:48:ee:f0:a1:ad:e7:
56:02:cf:01:e9:b7:d3:9d:ea:5f:16:30:67:4c:25:f6:f2:00:
83:ba:10:c6:ba:cd:dc:f9:38:15:b6:0f:b1:d5:f4:c0:44:03:
07:80:52:f9:50:60:e2:4c:eb:69:e4:ba:9e:84:c8:01:bd:b5:
1c:d3:71:6e:a3:5c:f2:7b:9d:5b:60:bd:56:bb:5a:2b:f4:1b:
fb:dd:ca:16:fa:9f:b9:7b:26:2f:cd:e0:77:94:74:70:d6:5f:
2e:d7:1f:08:f8:9f:57:cb:e6:6f:c2:9c:1f:fa:a8:26:1d:d0:
0f:a1:ee:d1:f6:45:f8:2b:32:19:a2:d0:14:47:ca:b9:74:4f:
95:10:e9:c9:bc:48:4d:8d:5b:44:ce:20:f3:e8:c5:b4:93:98:
cf:75:0d:65:98:5b:c3:37:31:34:2b:4e:ab:4f:81:df:93:59:
78:46:9f:e6:31:51:31:1b:97:e8:c3:d2:aa:3f:a3:b0:44:31:
91:ed:e0:47:24:c4:5f:9d:52:86:e1:bc:76:9b:2c:2a:4f:d0:
dc:bc:78:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:23:34 2025 by rpki-client