Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
File: wBxQlI83N__gw7drJBzpBWKIhdU.mft (raw, json)
Hash identifier: mRsuov20RWro5XFrxjrnH4Nu/m4kyJYKQ4+rwv/e4Gk=
Subject key identifier: 03:00:7F:DA:62:EB:34:88:EF:1A:B0:AA:62:50:81:B2:14:DE:BE:05
Authority key identifier: C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5
Certificate issuer: /CN=c01c50948f3737ffe0c3b76b241ce905628885d5
Certificate serial: 019A4DAAFBD5AA2E42E41E83D237173AC8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 07:00:42 +0000
Manifest this update: Tue 04 Nov 2025 07:00:42 +0000
Manifest next update: Wed 05 Nov 2025 07:00:42 +0000
Files and hashes: 1: XGDEPbtc7WSL9UqjAgvMfvuw4zE.roa (hash: kp+3RGyWysprTwe33mB6LBHrd9lT7FkQfMmhfRn83iM=)
2: wBxQlI83N__gw7drJBzpBWKIhdU.crl (hash: ULkTsfJ6G6QjnzUhVjFYWcNVmYtgqxWKh7mNemAQxxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:fb:d5:aa:2e:42:e4:1e:83:d2:37:17:3a:c8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01c50948f3737ffe0c3b76b241ce905628885d5
Validity
Not Before: Nov 4 07:00:42 2025 GMT
Not After : Nov 5 07:00:42 2025 GMT
Subject: CN=03007fda62eb3488ef1ab0aa625081b214debe05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:3d:12:56:87:8c:19:33:3f:d5:24:33:24:
c6:85:8b:e7:b4:eb:8c:32:0b:6c:f1:87:0c:4a:6d:
5d:81:e8:f7:c2:a4:91:61:9b:fb:bc:3e:dc:df:d0:
bd:29:2c:d5:52:21:63:3b:a2:3d:cd:b4:45:07:fb:
ba:86:82:38:02:1b:46:4d:36:7f:20:9e:f7:e6:3f:
af:36:e7:c8:6c:22:85:83:1a:cd:e0:a6:f6:3f:7d:
e4:e7:ba:f4:66:6c:5c:a3:38:63:68:90:f9:bd:60:
1d:5c:6b:1f:0e:ff:0a:1b:3b:be:42:f2:14:6e:b9:
06:f4:c6:2a:73:7e:40:0c:5e:8d:f1:c3:51:bf:13:
0e:e4:a8:bc:df:5c:61:b7:3b:e5:de:7d:79:e8:6a:
9d:15:50:d9:07:e5:5a:82:46:16:dc:d0:02:96:5f:
a2:a7:97:01:28:af:38:dd:0d:a8:ee:53:8f:ed:c0:
fa:3a:97:1d:83:76:a0:b0:59:28:3c:16:e1:b5:c0:
cd:b5:87:7b:ad:1d:9b:c7:e9:c5:99:d3:ee:f2:2d:
45:c4:b5:ff:ae:65:29:7f:71:f1:8f:e5:f3:f9:86:
37:ce:fb:ca:d4:53:3d:1a:d8:bb:40:ad:8d:4c:cd:
5d:5a:38:95:d9:8b:58:30:0d:3e:e5:2c:e4:8c:54:
65:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:00:7F:DA:62:EB:34:88:EF:1A:B0:AA:62:50:81:B2:14:DE:BE:05
X509v3 Authority Key Identifier:
keyid:C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1d:c0:11:c0:3b:11:1f:23:f7:a7:29:e6:5b:31:9b:9f:86:
d3:3a:fe:20:cd:7f:2b:cb:af:80:ca:a2:7a:1e:73:f0:89:e7:
0d:ad:fc:2b:02:7e:7f:3d:c6:21:80:cd:c6:98:50:8d:ae:0f:
a9:98:13:2d:3c:f5:40:bb:de:a1:2a:33:2a:a7:f3:1a:71:08:
11:6e:fb:b8:1e:2d:30:d5:5f:38:6c:33:b1:4c:27:0d:19:cb:
96:8b:f2:70:24:0f:b9:ec:1e:80:c0:bf:dd:32:bd:3e:82:8d:
fe:4a:79:d6:d1:44:bd:a8:d3:47:a9:3c:8f:5d:0e:92:fd:96:
54:ba:da:60:af:ab:5c:26:23:1a:33:ec:c6:7d:6c:1f:d0:7a:
dd:25:95:44:c4:76:b3:24:2f:ec:cc:57:4b:cb:f0:ba:3b:8c:
32:f2:ea:ec:ba:f8:a2:5f:1c:b4:69:45:25:b8:f1:8c:83:85:
23:fd:2a:da:8e:3c:76:79:ef:1a:8b:6b:cb:32:f0:bd:0b:0c:
11:ac:3c:39:30:01:e2:c8:7c:d7:cf:8a:cb:b3:76:6a:01:f4:
6f:31:d6:c5:f3:d7:ea:3c:83:cf:12:e2:ae:ea:f5:66:96:37:
e9:35:3c:11:76:ac:8c:13:c8:5a:76:2e:99:3d:d6:40:08:1a:
83:11:45:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:54 2025 by rpki-client