Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
File: wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft (raw, json)
Hash identifier: +bnq9+H6Xnh5OOoadbXrCymFjMSyyaDUTREX0rIvzSg=
Subject key identifier: A7:B8:5F:06:B8:24:AD:FF:4C:3B:E4:2F:C3:E4:73:9A:FB:38:90:CA
Authority key identifier: C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
Certificate issuer: /CN=c11f603de409a710fdae62cac1c55393a953b5b5
Certificate serial: 0199FFFE7FC9763DCBA75E340AA8E9342945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
Manifest number: 03D9
Signing time: Mon 20 Oct 2025 05:01:32 +0000
Manifest this update: Mon 20 Oct 2025 05:01:32 +0000
Manifest next update: Tue 21 Oct 2025 05:01:32 +0000
Files and hashes: 1: UsAeeJKz5x5UM9R7HFO2Dgzi0jA.roa (hash: FFiDVfqG1v30MyW/O7JaJbrLiihT2L0idYJ853z7lV4=)
2: wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl (hash: btaOqGZO1wIGoiV9OrOfFzpk+1MCFtFoBWioQ1fri+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:7f:c9:76:3d:cb:a7:5e:34:0a:a8:e9:34:29:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11f603de409a710fdae62cac1c55393a953b5b5
Validity
Not Before: Oct 20 05:01:32 2025 GMT
Not After : Oct 21 05:01:32 2025 GMT
Subject: CN=a7b85f06b824adff4c3be42fc3e4739afb3890ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:4e:d4:c4:b8:d9:93:b7:77:d9:c9:8d:30:
77:a4:2e:65:90:66:0a:99:7c:c2:50:61:e3:41:d1:
72:c9:12:2d:1b:f9:00:56:c5:de:94:cd:46:e2:e3:
3c:46:e8:ef:8b:c6:6a:b1:8b:61:63:5d:32:cf:55:
df:99:19:95:82:1e:e3:3c:59:f0:16:3f:47:02:ba:
f2:4a:c6:2b:38:45:00:a8:0e:a1:ff:f1:ff:79:c5:
2d:a1:81:3e:1e:b7:77:81:bc:36:cd:8f:1f:c1:a0:
36:f5:8c:4b:02:33:a7:b9:e0:7f:c0:ff:e4:7e:ea:
61:b9:11:aa:1d:7b:fc:b0:93:79:cf:32:91:35:03:
77:7d:85:02:a8:2f:48:1f:2c:85:8f:a9:f6:76:d5:
10:60:4c:6b:49:e8:91:4c:2b:79:3c:53:45:27:e1:
89:31:e3:ae:cc:f3:b9:f7:23:8b:eb:4d:04:65:16:
93:f5:9b:ee:c7:ff:0d:34:c5:53:da:94:83:77:c8:
bf:cd:b6:f1:af:74:42:2c:e3:84:af:3b:40:75:23:
77:c1:be:f0:54:61:2a:6f:79:a7:a0:46:31:99:49:
f1:78:7a:6d:a6:2c:96:28:2c:14:85:07:6b:87:6b:
bb:96:45:7c:90:8f:79:58:d2:d4:ee:9a:cc:a6:fb:
19:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B8:5F:06:B8:24:AD:FF:4C:3B:E4:2F:C3:E4:73:9A:FB:38:90:CA
X509v3 Authority Key Identifier:
keyid:C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6b:76:1e:64:65:7e:54:9f:25:2c:86:6f:bc:1d:f0:f7:7b:
6b:e4:d8:24:46:1e:3f:df:56:15:ca:38:39:7f:ee:c1:2d:47:
34:35:c7:e6:4e:db:bb:83:ee:bf:3e:3c:d5:02:bf:c2:80:e5:
22:a5:e9:7e:91:32:a2:58:f6:9f:94:01:7b:50:e9:20:77:b4:
37:4f:26:ea:b4:35:ac:a7:a4:94:e3:c3:2b:ab:d7:2c:27:c0:
d6:d4:bf:28:20:4d:3f:be:8f:14:cf:9d:03:7c:a3:b4:6f:ee:
0f:3f:ec:60:cd:96:c9:77:f2:29:ad:af:ce:49:ba:df:3a:9a:
0a:fb:ff:ce:cc:48:19:80:c0:6f:3b:d7:5e:74:0e:d8:c3:1d:
b3:92:c2:38:c0:10:c7:f3:88:9a:85:c9:60:89:78:6f:a8:4c:
8e:b1:66:ec:52:6b:34:fc:60:3d:7a:10:ae:ff:83:8c:bb:dd:
b5:ef:ea:c0:fd:07:c5:16:95:bf:33:d5:0c:e2:fa:8d:7a:9c:
fc:62:1e:7e:f1:20:6f:92:f5:19:63:36:17:9b:c7:66:85:d6:
1d:6b:4e:16:55:5a:e5:d6:3f:a6:7f:6d:d9:e7:35:7a:da:68:
69:dd:4a:7e:ba:b9:6e:c9:b8:61:f6:d5:c8:57:77:3a:80:a3:
cb:6b:3b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:11:27 2025 by rpki-client