Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
File: wtJUnY0AZ6NyMjzHbY7gECt02DM.mft (raw, json)
Hash identifier: MNgM4X1yZ6n5+KMKApvtv6Px5ShPP7cUYPV4n2KUFMo=
Subject key identifier: 19:72:D4:6D:B4:F9:D3:09:EC:AE:AF:31:D8:5C:39:FC:91:70:29:37
Authority key identifier: C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
Certificate issuer: /CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Certificate serial: 019A4C60F29BC88A7E0039B9CC24518387B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 01:00:13 +0000
Manifest this update: Tue 04 Nov 2025 01:00:13 +0000
Manifest next update: Wed 05 Nov 2025 01:00:13 +0000
Files and hashes: 1: 1XPduftMWiA3mhDReUc68s4JF-M.roa (hash: BCW8W7hox85l+EvIIJN43p7alSsxdX+eLTmQrODF5v4=)
2: wtJUnY0AZ6NyMjzHbY7gECt02DM.crl (hash: kbV2dLGAam4EgIXfkMlAiLbQm0KYvqqd42mYc5+nz5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:60:f2:9b:c8:8a:7e:00:39:b9:cc:24:51:83:87:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Validity
Not Before: Nov 4 01:00:13 2025 GMT
Not After : Nov 5 01:00:13 2025 GMT
Subject: CN=1972d46db4f9d309ecaeaf31d85c39fc91702937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:aa:43:23:7b:c9:61:2d:36:8b:13:15:ca:
41:75:a6:1e:b8:5b:30:26:bb:f8:ed:03:c6:e0:6d:
9c:28:c0:3c:d1:a4:f5:dd:98:3e:1d:93:cd:c2:34:
e6:3e:65:a5:f4:cf:69:19:a8:0a:6f:b5:48:6c:95:
a4:70:1f:eb:96:cf:00:7a:eb:8b:e3:71:9b:28:71:
5a:50:f0:e0:a7:40:44:7a:28:3a:b2:2b:21:d2:a6:
da:fa:0c:8c:23:93:5e:d2:4a:4c:00:f8:f1:61:e2:
db:66:2e:28:67:cc:eb:fd:bf:f0:e6:be:c5:76:20:
e1:e7:ef:c3:11:5c:30:46:12:5b:8f:3c:40:fb:70:
39:c4:b1:1b:ae:47:b5:ce:47:7e:03:bd:d3:8b:f6:
81:3a:9b:82:f0:4d:78:dc:b0:20:c0:11:39:9e:b2:
c6:7a:4c:13:d0:65:cb:97:c1:93:e3:5b:be:e9:77:
d9:b0:69:42:8a:5c:50:9a:15:87:77:b7:08:a1:46:
c3:e3:7a:b4:be:aa:2a:b0:6d:e1:9e:ed:97:2b:e7:
12:f3:e0:9a:0c:e3:bc:21:68:52:87:4a:83:e0:49:
69:2c:b6:d9:48:0f:2d:bf:73:0f:d3:b5:88:15:05:
e0:b7:80:51:9b:b1:9f:1e:e0:32:03:96:7c:8e:fd:
5b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:72:D4:6D:B4:F9:D3:09:EC:AE:AF:31:D8:5C:39:FC:91:70:29:37
X509v3 Authority Key Identifier:
keyid:C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fb:fb:71:52:cf:fb:62:34:42:0d:d0:a1:1e:10:8d:61:74:
e2:ca:8a:46:2a:04:63:fe:79:da:b4:38:9c:b3:42:ba:5a:b0:
69:4f:ac:60:ab:1a:73:da:5a:fe:f4:7b:97:c7:bd:d9:41:5a:
56:f0:15:74:c0:f6:29:d3:0e:e7:95:79:d8:3a:c7:09:5e:68:
0a:5e:79:2c:b0:a8:7b:82:f4:c3:5d:a5:b7:c7:89:ef:54:67:
b3:81:86:5a:b6:41:da:ec:4e:70:f7:a5:a3:26:fb:54:f7:54:
a5:76:1c:30:c5:33:ed:39:55:91:e7:14:f5:c0:2d:c7:32:73:
7d:ff:33:c5:aa:ce:a8:67:b7:fe:d3:22:a6:c3:c6:3b:96:2f:
78:e1:bc:aa:f9:b0:4f:0e:ea:4e:67:25:f7:26:10:cb:45:a0:
3f:2d:99:15:3f:78:5a:9d:e8:4f:41:5d:2f:f1:2f:ad:88:de:
86:aa:d9:7a:d9:8b:8f:df:4c:82:8a:8f:40:a0:17:f7:85:90:
81:77:d7:3f:6c:8a:2b:ac:59:2d:ba:46:80:96:57:56:93:61:
0e:84:df:90:bb:8e:50:ba:9d:80:94:76:39:33:e5:c1:a2:5b:
23:ee:01:7d:4f:d7:c5:e4:28:c8:99:18:1a:54:8c:5b:f3:b2:
0a:c7:02:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:42 2025 by rpki-client