Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
File: wvMmbgYS2DFPTp-So9uLyyU-2rw.mft (raw, json)
Hash identifier: noBWBagIR8JZeUnavLMcdmBcTm9NC8F6lhCNXWErGks=
Subject key identifier: EF:A3:4E:45:02:4A:B5:E8:4F:AB:0F:B0:A1:7C:B8:49:6C:37:C2:BB
Authority key identifier: C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC
Certificate issuer: /CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
Certificate serial: 0199FFC808C491AD48C11F74B0985458F488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
Manifest number: 0B43
Signing time: Mon 20 Oct 2025 04:02:03 +0000
Manifest this update: Mon 20 Oct 2025 04:02:03 +0000
Manifest next update: Tue 21 Oct 2025 04:02:03 +0000
Files and hashes: 1: 9QfEv6VDYJHwg-_mBcw3nPg902w.roa (hash: bDGQkiI5avL3G45Js05YIuwiQofAZ2dxukXBkwwmDkY=)
2: wvMmbgYS2DFPTp-So9uLyyU-2rw.crl (hash: twlIdQ265VNydLmxkl9wZTCzEmaiMWNfwjkiMZBZ/3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:08:c4:91:ad:48:c1:1f:74:b0:98:54:58:f4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc
Validity
Not Before: Oct 20 04:02:03 2025 GMT
Not After : Oct 21 04:02:03 2025 GMT
Subject: CN=efa34e45024ab5e84fab0fb0a17cb8496c37c2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:b5:5c:96:6c:8d:2c:5a:60:b0:79:22:25:
94:6e:11:fe:bb:40:0b:0f:56:72:83:62:d5:b6:6d:
05:c5:55:be:6d:b3:83:cc:96:ac:9b:0b:33:62:6f:
28:8d:b0:88:5e:a1:15:c1:72:96:ef:69:5b:66:09:
d1:cf:e7:03:fa:41:f3:20:dd:a8:9b:7d:65:e4:42:
ec:d9:74:13:27:e0:8b:50:80:d3:20:ed:0a:20:a1:
ef:5b:95:85:ec:16:62:af:67:c9:3f:c4:ef:28:48:
70:78:ac:bc:9c:eb:86:9d:9f:6a:1c:62:61:9d:2a:
e9:5a:e5:36:75:1b:8c:38:b4:21:bb:a8:94:93:5f:
38:73:6e:de:5a:00:c0:6b:03:e9:fc:80:97:9a:f5:
33:53:6b:17:d8:54:77:71:b4:5d:be:61:00:97:06:
5d:8a:68:b4:21:7b:c5:e0:63:4c:d1:34:3e:1d:84:
18:f1:4b:7a:d1:32:db:ea:36:8b:43:e6:94:51:8c:
cf:df:78:65:24:1e:27:2f:a7:92:7e:25:a6:6b:4f:
03:9f:de:a1:27:61:97:a7:f3:c8:ab:87:16:6e:5b:
7a:0a:f5:33:b1:19:19:21:01:80:2d:20:96:7f:2f:
ff:17:50:2c:f0:20:a2:86:fe:63:3d:21:61:a1:c0:
d2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A3:4E:45:02:4A:B5:E8:4F:AB:0F:B0:A1:7C:B8:49:6C:37:C2:BB
X509v3 Authority Key Identifier:
keyid:C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1e:ea:8a:f1:9c:76:a8:33:d5:98:92:ba:93:e0:82:1e:c2:
aa:18:5d:87:6e:3d:fa:fe:44:89:1f:2d:3c:3a:21:23:22:2c:
e7:a7:3c:1a:78:00:08:35:99:3d:39:9c:b1:2d:a4:43:b5:0d:
e4:32:45:e4:60:58:84:71:cf:cc:d0:33:51:0d:2e:5c:02:55:
a1:e7:a0:8d:a5:84:d1:cc:21:fa:9e:de:02:16:a3:0a:11:61:
06:61:eb:26:aa:9c:18:05:54:1d:e8:a9:9b:9a:94:bb:c7:b1:
54:b1:91:6c:ee:c9:67:1d:63:4e:3f:7d:df:a6:2b:9b:93:a1:
8d:9d:b6:97:52:d5:3d:0c:0c:6d:b3:8e:34:20:91:53:78:c0:
d4:cf:e6:0f:11:c1:59:d3:95:55:c8:f7:64:8e:13:b1:fa:ac:
8a:bb:9e:1e:a5:1a:21:57:f3:59:6a:e1:43:ec:71:95:97:4d:
bd:97:97:17:f5:f7:3e:96:f9:2b:c5:a4:ed:e3:d0:cd:1b:59:
9b:f9:4b:98:fd:ac:d2:2a:30:d7:26:6c:bf:f1:15:71:fc:4c:
fa:df:9c:74:cb:59:0c:37:e3:43:e4:14:1b:41:45:56:11:aa:
ec:92:70:4a:38:06:8d:ac:47:50:8c:91:76:73:78:81:c4:a5:
00:cb:a5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:56:07 2025 by rpki-client