Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
File: wBWqbOyG3yEV4qEOkgnYqi35i78.mft (raw, json)
Hash identifier: YS3Dv85H3Rse3xdFjhMLqTYVCYIVBmKtcEQCzQfw3ss=
Subject key identifier: 0A:84:7E:CB:E5:73:C5:5F:8E:C1:4F:87:7A:04:2D:67:79:51:FC:60
Authority key identifier: C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF
Certificate issuer: /CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf
Certificate serial: 019A52D16820BD59895A661E6BFCDD4AD1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
Manifest number: 01CF
Signing time: Wed 05 Nov 2025 07:00:46 +0000
Manifest this update: Wed 05 Nov 2025 07:00:46 +0000
Manifest next update: Thu 06 Nov 2025 07:00:46 +0000
Files and hashes: 1: u0y20R9QTPyQ909oZwz8h1z4D_c.roa (hash: JOHDDdtCt33NzefI4pce2GppbGjse6UDJKzNAqgwUuA=)
2: wBWqbOyG3yEV4qEOkgnYqi35i78.crl (hash: /j/YhEk8q29an4esqbc88tXlBa/eCs7Axfmertp3Gkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:68:20:bd:59:89:5a:66:1e:6b:fc:dd:4a:d1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf
Validity
Not Before: Nov 5 07:00:46 2025 GMT
Not After : Nov 6 07:00:46 2025 GMT
Subject: CN=0a847ecbe573c55f8ec14f877a042d677951fc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bc:5a:34:27:fe:08:ce:81:95:6c:81:56:8e:
6d:3a:c8:5f:6b:74:ef:32:ed:9f:41:90:0f:35:73:
f2:f3:26:52:66:bc:0d:2c:ce:27:70:f5:d4:7e:f8:
a6:81:90:8b:27:e2:86:1f:6e:80:c8:ae:39:84:e3:
91:ec:31:59:bd:20:d3:95:c1:4e:2e:ec:87:f6:a9:
c6:8f:3a:d2:2d:d3:9f:c9:03:77:fb:25:36:37:37:
58:e8:ad:2b:a5:4c:36:d6:37:be:1d:29:4d:3f:f6:
45:c9:7d:a5:7c:3c:12:00:51:76:20:6e:1f:c0:61:
34:0e:f3:bd:ff:d2:08:79:42:6a:e8:57:fa:bc:27:
9d:16:93:4f:41:cf:de:68:fe:14:0f:08:e3:eb:53:
4f:bb:19:34:1e:03:94:51:f8:ca:02:1c:da:20:51:
b6:d3:bc:a8:ca:d6:13:a4:b9:7e:d8:58:d3:18:81:
9f:02:e3:b8:35:2c:3c:fc:88:eb:64:dd:5b:13:d9:
ed:01:e1:55:97:62:0f:fc:bb:f4:e0:27:7d:e2:fe:
db:8c:4c:38:6a:34:bf:d4:a5:7e:62:db:4b:25:5e:
c8:63:1e:3f:95:30:aa:39:5d:a8:d4:12:39:6c:64:
13:21:43:4f:12:cb:6c:16:24:8f:46:16:4d:fd:96:
ea:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:84:7E:CB:E5:73:C5:5F:8E:C1:4F:87:7A:04:2D:67:79:51:FC:60
X509v3 Authority Key Identifier:
keyid:C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:30:ca:ab:7f:74:1b:f4:a1:5f:16:36:06:92:89:d4:58:d0:
74:78:9e:4b:3e:11:d0:c0:ec:41:de:b0:7a:44:38:19:b9:3f:
f8:e0:07:d6:8d:8f:ac:db:37:72:0a:d8:6f:50:65:63:a0:37:
50:76:00:86:35:ef:9f:6c:b9:93:90:58:28:8e:7e:f4:fd:b5:
6c:d0:e6:5a:b7:b1:f5:76:27:14:64:04:da:75:f6:b2:7a:50:
05:f1:d5:ee:60:dc:76:51:d4:86:0f:b3:27:f4:3d:41:80:53:
ab:76:8d:ab:dc:65:7c:3a:86:72:37:cc:b3:9b:f5:17:2e:bf:
b3:47:6c:a0:08:7d:4f:4b:51:01:38:19:7a:19:51:ec:f9:c3:
95:0c:63:fb:77:ec:3d:0e:20:d1:bc:21:eb:92:c5:21:08:cb:
08:b0:46:f9:b7:6c:2c:ee:b2:96:8c:7f:db:62:39:64:f7:fc:
18:9d:92:82:ce:94:f3:b8:32:8d:42:c7:a0:f6:80:88:91:e0:
22:27:cb:60:46:f0:e4:70:2b:c7:d6:e9:4e:87:e2:7b:eb:0b:
05:72:1f:86:13:5d:db:00:d6:47:de:41:78:5f:d3:3e:1f:79:
54:a8:6d:7a:4e:cd:1a:78:48:7a:c2:93:f1:c9:ba:49:f5:60:
fe:32:16:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:56:18 2025 by rpki-client