Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
File: wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft (raw, json)
Hash identifier: bLXzSzfKDyDrYcS68nTCEGAETcbcBOOIOUAKCEhtXyY=
Subject key identifier: 5A:0F:C2:48:6B:F2:F7:02:DC:8B:91:6B:79:FD:C3:A2:38:18:72:3D
Authority key identifier: C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60
Certificate issuer: /CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60
Certificate serial: 0199FB7CB110CA7CA8C2538C62D96233CDEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
Manifest number: 14FD
Signing time: Sun 19 Oct 2025 08:01:16 +0000
Manifest this update: Sun 19 Oct 2025 08:01:16 +0000
Manifest next update: Mon 20 Oct 2025 08:01:16 +0000
Files and hashes: 1: fS3aIp_dstilOoZpsHs2fT3hEwI.roa (hash: ekL2u08a8PJkCPy3xwuS3H8hi/HVcBEIiMkXY+L534U=)
2: wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl (hash: SCBI/pH8bjy2oSBYu+8gTZt6pmjVoQILD+wfEae2E84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b1:10:ca:7c:a8:c2:53:8c:62:d9:62:33:cd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60
Validity
Not Before: Oct 19 08:01:16 2025 GMT
Not After : Oct 20 08:01:16 2025 GMT
Subject: CN=5a0fc2486bf2f702dc8b916b79fdc3a23818723d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:71:e0:a7:0e:65:23:e5:cf:09:7b:44:d3:
b3:dc:ce:8e:b5:51:b5:0d:e5:97:77:a3:93:3d:d5:
b0:4e:86:9f:22:cc:6c:97:1b:3a:53:24:f9:a1:b9:
47:00:9b:f4:20:fa:20:be:d0:67:e9:32:14:9a:f1:
da:a0:f7:e1:60:02:af:83:fe:ac:24:e9:db:23:40:
e8:bc:c8:45:b9:54:27:20:31:7b:f7:b0:2b:d9:fb:
ad:69:05:e3:28:bc:1e:5e:0b:b7:db:2b:5c:ee:bd:
57:a3:ac:24:5e:e0:a6:e0:09:a5:44:a1:cb:43:f9:
a4:b9:8f:89:9d:11:d6:78:cf:98:b9:44:05:19:db:
50:5f:8d:8c:93:38:7b:70:51:23:b6:67:32:7d:44:
aa:6f:df:7d:dc:6d:06:38:fa:b4:11:e2:87:d9:08:
e3:77:10:13:93:08:bd:ee:80:8a:89:64:71:98:3e:
89:61:be:34:b1:2c:e5:66:52:81:70:9a:17:60:08:
89:1d:a8:4b:2a:fc:cc:69:29:26:84:0e:e4:8c:a4:
b0:72:82:1c:57:3d:7e:f4:95:6e:fd:e0:17:44:61:
63:49:62:72:2f:54:47:70:29:69:06:50:b4:d5:1c:
a3:5f:d9:0a:09:4a:dd:bc:91:4c:2f:35:2a:9b:38:
0a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0F:C2:48:6B:F2:F7:02:DC:8B:91:6B:79:FD:C3:A2:38:18:72:3D
X509v3 Authority Key Identifier:
keyid:C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e9:96:08:dc:c2:e4:1a:38:68:fb:f0:40:44:6d:d8:8d:4c:
dc:b3:62:1d:9c:63:3c:4a:6d:b6:3b:ca:f5:55:f7:12:24:5d:
46:6b:98:1f:6e:32:b3:cd:6b:44:1b:af:1d:00:87:d1:b9:26:
dd:21:84:f5:9a:76:2a:17:09:86:c4:cd:8e:80:44:5d:34:7d:
2d:8b:e1:49:53:f4:2c:c8:a3:d8:58:fe:7f:b3:1e:93:31:86:
52:43:9b:9e:3c:34:d1:e2:a4:a0:7a:ae:85:d2:2e:fa:27:9f:
34:6d:1d:a2:6f:b0:44:7c:40:52:82:bc:76:3d:b3:6e:ac:2c:
42:18:12:f7:0b:9d:bf:ba:45:97:8a:07:77:ac:bb:b5:94:2b:
95:22:1f:21:78:2b:68:f5:2e:7f:40:0f:4b:bf:17:78:56:41:
17:c5:87:47:1d:bc:67:a4:d5:cd:37:13:d7:03:d3:ec:a6:a9:
d8:76:98:54:95:b5:a0:fa:a8:73:6d:54:dd:7c:06:2d:3a:dc:
37:d4:5a:f0:c0:59:a3:76:ca:15:6d:35:c2:cc:e7:95:00:14:
82:2f:6b:7f:c9:0c:5a:ad:2f:f7:92:be:5c:59:c3:a9:b2:75:
67:ee:1f:16:34:d9:d0:ba:69:93:98:cb:64:83:eb:86:80:b7:
e6:64:a8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:53 2025 by rpki-client