Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
File: wPDumEJicDHsomTaxl5f72OUP5g.mft (raw, json)
Hash identifier: viWjyxYKH/cTRaxgHxH0K5N2phUgfgk70evGIm5x1K4=
Subject key identifier: 7A:CE:08:6D:23:B9:04:36:6D:84:F1:EA:DF:2A:C1:B6:E6:CF:2C:30
Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
Certificate issuer: /CN=c0f0ee9842627031eca264dac65e5fef63943f98
Certificate serial: 0199FAD7ACA90EFCFBB6D1E670D41E860101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
Manifest number: 0DB0
Signing time: Sun 19 Oct 2025 05:01:02 +0000
Manifest this update: Sun 19 Oct 2025 05:01:02 +0000
Manifest next update: Mon 20 Oct 2025 05:01:02 +0000
Files and hashes: 1: KyVtpyRTcvgBS4JaV8NPZOuwdLQ.roa (hash: iY3Qd0RfijC3WmQCC9uFX5dUNLie0ZRKHtS62kmKzs8=)
2: wPDumEJicDHsomTaxl5f72OUP5g.crl (hash: BWojGQFKLbkKkL+RxReNgPUal2kOMlW/7fq5oggNdB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:ac:a9:0e:fc:fb:b6:d1:e6:70:d4:1e:86:01:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98
Validity
Not Before: Oct 19 05:01:02 2025 GMT
Not After : Oct 20 05:01:02 2025 GMT
Subject: CN=7ace086d23b904366d84f1eadf2ac1b6e6cf2c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:ab:2a:35:75:a3:31:df:12:5e:57:e0:c1:
fb:de:18:5f:0f:92:81:ec:3f:27:e9:e9:53:42:67:
c1:d9:3b:90:62:b8:c7:17:d1:84:6b:55:a6:9a:8b:
73:85:18:9d:98:51:75:3f:db:59:f6:29:1d:bf:6a:
7f:ab:de:e7:03:76:7d:ab:f0:da:dd:de:70:82:4e:
e7:4b:08:d2:eb:35:ec:c4:f9:5f:6d:1c:cd:12:e3:
11:b0:67:25:53:5d:39:d4:a9:e1:22:d4:2c:f6:65:
4b:9d:c7:3d:40:62:3b:95:08:4d:8c:8d:cd:bc:39:
7e:56:52:5b:95:70:f6:1b:26:50:a2:0f:ec:16:7d:
b4:74:b3:35:17:9a:3d:cf:4b:73:75:8b:cb:8c:00:
63:43:02:a2:23:50:1c:c9:13:68:9d:9e:ef:e1:18:
05:a4:54:e9:9a:bc:b8:00:f4:66:a9:5f:c3:93:86:
74:09:8f:e0:e7:31:a9:77:2c:28:7c:22:bb:b8:c7:
d9:13:77:da:21:3e:de:6e:ee:1e:30:fc:e7:9f:cc:
65:e2:52:b0:f0:27:5c:1d:73:d3:78:33:f6:27:84:
c5:a4:7a:20:c2:c5:44:d3:30:b5:ca:e0:d0:ff:27:
ad:56:b3:ad:de:9b:18:db:59:57:6c:e7:af:ee:e2:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CE:08:6D:23:B9:04:36:6D:84:F1:EA:DF:2A:C1:B6:E6:CF:2C:30
X509v3 Authority Key Identifier:
keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2d:eb:0c:12:63:ab:b7:c0:22:34:f1:7d:5a:de:a6:d4:66:
c9:4e:3d:69:fa:61:d7:47:cb:63:b7:59:f2:b8:58:39:a2:b1:
0a:f0:f1:dc:32:12:68:5e:2d:65:50:57:00:82:d6:d1:1b:c3:
2a:7a:6f:b5:85:2c:78:54:c6:af:01:7d:ad:b2:9c:e2:9e:9e:
f5:e9:7b:f1:92:98:c5:0e:4a:f4:93:c6:2b:6b:24:74:3a:13:
72:c0:cf:ca:0e:55:af:88:d6:21:1b:f7:ad:90:e1:9f:18:ec:
08:e6:da:5f:de:d7:69:eb:b3:db:b7:17:75:a8:8a:44:77:c7:
b7:8e:b6:27:ee:b9:25:81:a6:b0:f3:af:fe:71:cd:90:cd:a2:
51:9f:4f:32:ea:39:fa:b9:c2:61:3b:4c:cf:f7:ff:dd:cb:26:
83:5b:b8:c6:e5:05:3e:36:a6:d3:d0:8d:54:82:fc:97:91:0e:
82:e4:a8:73:f9:ec:a5:c5:be:aa:7b:f1:a6:4c:de:f4:6e:40:
9d:c0:4a:5f:c6:bb:0d:b2:79:c6:d1:8f:46:5c:4b:01:8c:12:
0b:a4:42:bc:62:6d:a7:d9:a0:6b:7f:b2:b0:7b:6a:eb:f9:79:
9c:05:a3:7f:46:64:6a:82:74:20:d4:cc:ad:b7:b7:4c:bf:b0:
a9:d4:4d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:22 2025 by rpki-client