Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
File: wN3S1PAw-jY4wEvmNu-T0oknFlI.mft (raw, json)
Hash identifier: H5i1FEAdcuuiTtMRTFHuwHu/n9a61Ap1flVWDgl0DR8=
Subject key identifier: 7E:76:E9:8C:5D:1E:07:54:28:DF:03:A5:BC:69:81:62:73:31:2D:DB
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Certificate issuer: /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial: 0199FFC885A6D1FAA6B806F6DBE2C260FACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
Manifest number: 0525
Signing time: Mon 20 Oct 2025 04:02:35 +0000
Manifest this update: Mon 20 Oct 2025 04:02:35 +0000
Manifest next update: Tue 21 Oct 2025 04:02:35 +0000
Files and hashes: 1: 7XfhLun6Ve5uRxXwPsgdrE6D-fI.roa (hash: b8AATSifx7/LvpsKfDCuwWcrOC9fgkYZg2ZM6+VpEfM=)
2: iuHoct3zHKPAQY0zJWbgQODPfEo.roa (hash: Un9DAj/KSTfz3PzRpucfMK4GqYVgsTE2tiPdLJ964Po=)
3: wN3S1PAw-jY4wEvmNu-T0oknFlI.crl (hash: pQdO6rsPL+FSrs7F2Vru64ddNxiPotGAcP7cRtubHWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:85:a6:d1:fa:a6:b8:06:f6:db:e2:c2:60:fa:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Validity
Not Before: Oct 20 04:02:35 2025 GMT
Not After : Oct 21 04:02:35 2025 GMT
Subject: CN=7e76e98c5d1e075428df03a5bc69816273312ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0d:ac:9f:bd:90:5e:6b:b4:7a:9f:0d:d5:39:
1c:b1:70:bb:6e:71:09:d2:3e:d1:e9:25:bf:35:10:
fd:fb:31:b8:cc:69:ae:70:0b:da:cf:8d:c2:dc:d7:
ab:29:13:23:fa:9b:b7:32:25:6b:69:6b:cb:66:29:
d1:85:26:0f:3a:dd:c1:ad:a2:8a:5c:5a:4b:e8:3a:
f8:1d:92:8d:c4:17:2d:b8:e8:fe:db:77:f1:a5:ab:
4d:98:90:bb:dc:2d:6d:9a:29:3c:6d:2f:70:09:88:
23:5f:22:a0:63:c5:4a:aa:ff:97:b2:3d:f2:86:8f:
99:23:59:be:e1:9a:0f:91:0b:27:57:6e:4c:a8:3d:
22:da:3d:18:d3:4e:06:6b:bc:64:59:86:21:c3:39:
5a:ce:29:ad:f4:af:39:fd:d4:fd:85:f7:72:82:f4:
dc:ac:ba:fe:d4:f3:db:6e:5c:5c:f8:ec:96:93:26:
4b:03:31:a0:a8:0d:7d:a7:a4:85:b6:10:5b:50:8e:
d2:47:89:7b:d9:74:98:e7:de:3b:43:bb:80:44:6e:
17:a6:46:2c:0f:8a:b3:88:1d:7b:f6:58:86:2a:3e:
c3:45:10:6a:ed:60:8b:e1:8e:55:04:ca:c2:37:30:
57:05:9a:77:57:8a:02:a6:c7:68:6d:f8:e9:bb:b5:
6b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:76:E9:8C:5D:1E:07:54:28:DF:03:A5:BC:69:81:62:73:31:2D:DB
X509v3 Authority Key Identifier:
keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6f:4f:aa:af:20:ef:f5:50:8e:75:90:60:05:d8:5e:79:f9:
0e:ee:1b:76:70:7b:8a:16:d5:3d:99:e5:be:fd:84:7a:39:52:
ff:8d:6d:9a:e6:8a:88:b7:9f:62:f6:3b:23:db:01:fb:29:ce:
c9:17:40:8c:7e:5e:9f:4d:14:7a:62:e6:34:1e:44:a8:9a:62:
e1:77:10:5b:04:25:8e:2d:dc:62:14:4e:1b:8a:fa:7c:29:14:
60:1c:d0:8d:0c:2f:7f:86:c7:7e:70:af:48:78:bd:38:3c:95:
74:41:55:9c:29:a9:5d:a9:be:02:4a:df:b9:68:c5:e4:c3:d2:
b9:89:99:ad:5e:28:6c:cd:3a:57:0a:ce:49:d6:6b:79:ed:30:
d3:64:1c:cc:bb:77:21:6d:d4:c4:77:6c:b8:02:d2:01:76:ee:
10:97:25:6a:ff:4e:3e:ac:5e:36:91:e0:fd:70:5b:6d:c5:9e:
84:78:4a:d8:55:58:3f:14:d4:31:74:a0:41:df:e8:25:a4:f5:
31:51:af:42:7d:99:dd:85:b6:12:31:6a:b4:c8:b8:d5:c8:12:
c9:82:59:e6:8f:97:39:30:12:43:f2:64:45:1b:de:f2:73:fb:
c8:85:f9:fe:02:97:47:3d:84:47:41:92:f4:16:26:45:68:dd:
7b:0c:2f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:30:49 2025 by rpki-client