Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
File: wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json)
Hash identifier: Sji01rjllzQJKjyZpLE/y5JGKF4UM1neknC7CbqNwJE=
Subject key identifier: 19:3F:CF:A8:C9:6E:21:6E:F1:44:37:BA:60:F4:8C:46:AF:48:E0:09
Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
Certificate issuer: /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Certificate serial: 019A4D063A3D8624D73EF043AED202BD3582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
Manifest number: 03F2
Signing time: Tue 04 Nov 2025 04:00:44 +0000
Manifest this update: Tue 04 Nov 2025 04:00:44 +0000
Manifest next update: Wed 05 Nov 2025 04:00:44 +0000
Files and hashes: 1: f45K-_tztLGikN2V1uWSCFuY_68.roa (hash: xJe3gW2GTPkOmGgSxCeDd1gAbtFU96D/eKs9HOKj+Eo=)
2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: EuFbmFTzVAJ57DP4C2GTJm4y2F827mJo3aDEsyr/pKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:3a:3d:86:24:d7:3e:f0:43:ae:d2:02:bd:35:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Validity
Not Before: Nov 4 04:00:44 2025 GMT
Not After : Nov 5 04:00:44 2025 GMT
Subject: CN=193fcfa8c96e216ef14437ba60f48c46af48e009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:67:18:14:05:cc:5c:dc:f5:96:f7:8f:6f:
61:6e:17:3c:b9:3d:23:d4:d9:2a:86:b6:d0:c2:9a:
b9:93:9c:2f:8a:67:b5:30:ff:4f:9d:b4:d5:ae:7e:
4b:b8:f8:0c:5f:01:7e:ad:35:21:7c:36:2f:22:69:
62:e1:4a:d2:d0:ba:55:b1:64:c3:cd:ae:cb:3c:66:
e9:e6:e6:5b:be:04:6e:04:13:3c:02:5f:39:0a:df:
c8:69:2a:b6:15:4b:fc:1f:e8:0b:89:1e:6e:fb:cc:
0a:db:2b:82:cc:77:c7:cf:73:ca:c2:c5:99:7d:49:
97:aa:fa:36:f1:9a:fc:15:42:04:f8:01:0a:38:ca:
0d:01:98:80:5f:c5:bf:e5:0a:4e:04:f3:1d:35:62:
ea:2f:a5:b3:a4:42:a6:ec:63:0b:b2:f9:38:5e:ea:
2e:94:c7:50:04:a0:ba:9c:10:e2:20:2f:38:65:39:
00:da:be:47:c1:0f:47:08:ab:84:9e:92:45:65:88:
c4:31:f8:17:26:d5:bd:04:3c:98:12:1a:68:d9:28:
a9:e7:72:2f:64:be:c6:f5:31:b8:52:0d:0b:f3:4c:
df:2c:24:fd:db:ba:d9:a8:03:e9:d2:f5:17:be:f1:
1b:11:64:5e:41:f2:d0:f9:e2:2a:24:cd:b8:75:27:
1e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3F:CF:A8:C9:6E:21:6E:F1:44:37:BA:60:F4:8C:46:AF:48:E0:09
X509v3 Authority Key Identifier:
keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:28:38:fe:71:1b:55:30:dc:af:03:96:15:bb:06:61:a0:c9:
ec:48:e6:c6:86:09:7f:15:da:a5:d4:37:11:d6:9b:c0:bc:d2:
16:3e:d3:fb:1e:9b:4d:d8:8d:fa:39:89:7d:34:17:a3:f8:b2:
c9:04:97:6d:7b:e7:d0:53:22:4e:4b:ba:61:0d:b9:8a:f0:50:
33:bb:a7:13:60:bd:c7:e4:55:cf:c3:fd:10:28:3d:e6:ec:ec:
e6:7f:1b:fd:0b:92:37:2a:f3:3e:ff:f0:2f:84:67:4d:9e:53:
3c:fa:e0:5a:cc:f8:81:2f:4e:d7:4c:d0:2f:ba:d0:fe:29:a9:
75:d5:44:ad:e3:f2:c0:7b:53:4a:e8:b6:d8:c5:c1:d7:2d:b1:
7c:07:60:3c:da:56:c5:c1:4d:25:39:17:eb:57:a5:32:73:61:
e8:dc:d2:4a:73:f5:b6:c0:d6:0d:c4:d5:55:a7:e4:20:0d:c1:
92:72:8c:ea:e3:bf:06:97:98:a6:4a:14:47:c0:1e:9f:d8:ba:
a2:11:1e:4f:7f:16:e8:e6:70:5d:3e:25:93:e6:57:e0:c3:e6:
d3:22:ca:24:db:d6:66:40:24:2e:b9:44:b6:75:90:a8:21:b9:
9c:ef:4f:0b:2b:c7:20:a8:48:0b:ee:c8:9d:fa:eb:0e:cf:52:
10:34:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:32 2025 by rpki-client