Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
File: wrXTr9C3Lrc0wh7XgjKetufBzkE.mft (raw, json)
Hash identifier: gyA7h3y/Aux3NKvUQwazG+dvqA31Zq/+/egFFIK3d7Q=
Subject key identifier: C9:24:0B:18:DF:D0:D6:21:DA:4C:C3:B6:69:F3:92:E5:9E:7A:41:D5
Authority key identifier: C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
Certificate issuer: /CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Certificate serial: 019A00A343B2DD6CA95968B00AC4910C20A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
Manifest number: 09B0
Signing time: Mon 20 Oct 2025 08:01:30 +0000
Manifest this update: Mon 20 Oct 2025 08:01:30 +0000
Manifest next update: Tue 21 Oct 2025 08:01:30 +0000
Files and hashes: 1: 24ln-8DkQtv-Hk-B6dzvfSqyjQY.roa (hash: SeW6VNZ/+9bUzjzq/OzL5WVkY+lRaswkW52Mz3zEsYI=)
2: wrXTr9C3Lrc0wh7XgjKetufBzkE.crl (hash: vDoc/6mNMuRp5++U5UdLFsBXY0qlpOJGFbRWL9Kw38g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:43:b2:dd:6c:a9:59:68:b0:0a:c4:91:0c:20:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Validity
Not Before: Oct 20 08:01:30 2025 GMT
Not After : Oct 21 08:01:30 2025 GMT
Subject: CN=c9240b18dfd0d621da4cc3b669f392e59e7a41d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:eb:fb:25:c2:4c:49:e4:0b:1a:81:9d:92:
12:4a:da:b7:e9:e9:57:48:ee:e9:c0:19:5e:1f:4b:
3a:16:6e:46:9b:ad:c4:f2:ae:55:cb:22:c4:9e:ce:
9a:64:29:26:43:41:f7:be:33:37:50:af:f4:c8:b3:
13:cd:2f:16:7c:8b:7a:42:10:4d:8f:e0:5d:61:8e:
08:cf:49:e2:b0:bb:fd:77:eb:a7:e3:75:59:8b:cc:
5c:4b:f0:87:f1:9f:0d:49:bc:b0:22:db:e1:52:1f:
45:5f:f1:9e:8f:14:c8:14:66:3c:99:8a:ac:3d:b7:
48:06:de:f8:94:af:c4:ba:71:b4:07:0b:e2:e9:5b:
61:0a:56:bb:ab:85:47:f6:8c:13:96:45:7d:71:20:
b0:0e:d5:b0:8b:c3:ab:b7:21:59:75:a4:8a:c0:0f:
1a:bd:60:db:09:b0:aa:de:2d:60:f2:9c:83:ff:f6:
26:5b:1a:fa:a1:1b:16:1b:97:2b:72:50:e4:c3:cf:
ea:af:50:0b:df:c4:46:72:36:2a:a8:1e:d0:0f:fb:
1a:0c:b3:22:86:37:b4:ab:bd:33:b9:93:c8:1e:b9:
32:ed:ac:e6:17:0a:a7:bd:f3:1f:af:51:7f:68:14:
ec:c4:d1:d0:d0:84:bf:91:ab:21:f2:b4:bd:f0:21:
a4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:24:0B:18:DF:D0:D6:21:DA:4C:C3:B6:69:F3:92:E5:9E:7A:41:D5
X509v3 Authority Key Identifier:
keyid:C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:96:00:0b:a0:e7:e3:63:ec:b9:0b:41:0d:af:44:f2:04:14:
29:d5:b3:e0:38:61:fb:75:6b:15:97:2b:c4:ed:6b:89:72:6f:
f9:f6:4e:9d:25:32:99:fb:88:94:91:eb:0a:c5:ed:d6:8a:5a:
b3:86:f0:42:f5:fa:00:d8:24:03:64:02:79:63:1b:73:fa:67:
21:46:9e:b5:6c:ce:74:a9:8c:c9:bb:c6:0f:f2:a7:1a:0b:5d:
c3:d1:79:64:e5:28:1d:c3:b1:e9:48:ae:86:39:9c:29:b9:cf:
3b:a1:af:b7:32:4b:12:18:1a:de:52:26:c2:48:26:f5:8d:4d:
de:04:54:8d:2a:d1:df:3d:e3:f9:32:24:41:12:4b:17:d6:2f:
a5:d6:1b:a5:74:2a:9e:7b:54:3d:33:82:5c:e8:eb:6e:36:ca:
fb:63:24:ea:ed:6a:35:61:9c:41:73:71:54:0c:06:5b:22:0e:
d8:1b:b0:01:7e:8a:d8:21:54:26:7f:59:d2:ab:64:71:42:22:
84:b7:84:23:2e:2a:22:f6:9a:1a:3a:0f:e9:9b:0d:b0:7f:8b:
66:38:4a:40:ad:c7:a3:e0:b9:c4:f0:5d:53:ad:33:e3:5a:fd:
7d:a5:26:18:da:cd:40:69:7a:9d:b8:c8:42:f3:cd:84:37:93:
bc:47:1e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:01:51 2025 by rpki-client