Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
File: WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft (raw, json)
Hash identifier: CFSCsBbe7W75lmLQDbl8EDM6tIdmGKCYDXwnIjMOqUk=
Subject key identifier: 96:39:D5:EF:D2:95:1A:C1:AE:A5:06:EB:EF:DC:2D:4A:BE:5E:F3:71
Authority key identifier: 58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
Certificate issuer: /CN=588cabf6f523f26e267db03b524347841aaaa465
Certificate serial: 019A4DE21242148B00B9777E7E3A22A05CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
Manifest number: 0C33
Signing time: Tue 04 Nov 2025 08:00:52 +0000
Manifest this update: Tue 04 Nov 2025 08:00:52 +0000
Manifest next update: Wed 05 Nov 2025 08:00:52 +0000
Files and hashes: 1: FdWV2F8xywrkJr_ZVSWY8qWRv_A.roa (hash: X0QnMJo/L6uBm6V2nWu9aN26xqXlZf++2BNldb6DVIg=)
2: WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl (hash: Glv6YPfmaO7v3Qrdm72NtUGMQnXAgxaZGbRGHeg10E0=)
3: b2nv7c16taiMY7lqlyo1vW0yars.roa (hash: cEulSKA26PCcgT5q7VJTUwPAnJnY+2U0A9I6b42tRhY=)
4: tizL6qWbIsOeypyIPPPfmLusGE0.roa (hash: sAyubtv15VYxRHUf9fkBNCBE+xwZmyTEiVd/Zqvt42M=)
5: yM3VxLDm43j2WFFtLdyhV36CKLo.roa (hash: 9bUJueK4QyJ0cAFSTSBWIDQYHaEcmwDUAkzfIlOERVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:12:42:14:8b:00:b9:77:7e:7e:3a:22:a0:5c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588cabf6f523f26e267db03b524347841aaaa465
Validity
Not Before: Nov 4 08:00:52 2025 GMT
Not After : Nov 5 08:00:52 2025 GMT
Subject: CN=9639d5efd2951ac1aea506ebefdc2d4abe5ef371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:b4:61:6f:63:30:21:76:45:5a:f8:ad:26:
b6:ec:aa:59:d7:2f:c5:b0:93:a3:47:78:24:17:ea:
bd:e5:02:a5:75:1d:40:1e:1d:f9:c2:c1:05:c8:cc:
a9:c9:0b:82:2e:f8:e2:90:c2:7f:22:fd:bb:0e:58:
90:e5:43:ca:48:15:4f:e6:77:dd:59:91:16:1c:ad:
ba:0a:7b:f6:9d:de:d9:77:5d:45:62:3a:89:8e:39:
0b:67:f8:ec:64:85:50:52:ab:f3:b0:5d:9d:22:b4:
17:51:c9:e6:71:f3:88:db:0f:e3:ce:4a:be:eb:20:
ec:76:61:7c:5a:4a:d0:19:53:ce:9f:0f:04:7b:e3:
88:09:2f:54:66:b7:45:fd:93:a6:13:41:9c:e0:94:
42:1d:b3:cd:c8:57:f1:0d:e1:b0:ea:ed:a3:37:c5:
0d:be:28:b0:b5:11:ed:fd:ea:6f:a9:88:56:4a:9f:
b8:da:cf:d2:3f:ec:2b:19:35:19:16:c2:25:3f:8a:
95:b1:48:d1:72:1c:60:2c:76:06:43:24:26:a4:41:
ff:2a:42:47:93:81:5a:9e:c1:97:d5:0e:d1:e3:2b:
96:aa:11:22:e0:98:85:c7:39:b0:c3:15:af:a8:9b:
2e:d4:67:7c:b0:98:4d:a3:7d:f1:d0:ea:5c:1d:7b:
11:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:39:D5:EF:D2:95:1A:C1:AE:A5:06:EB:EF:DC:2D:4A:BE:5E:F3:71
X509v3 Authority Key Identifier:
keyid:58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cc:f0:0f:fb:17:fd:0c:3f:93:1e:6a:2c:13:77:db:e1:f2:
50:64:b4:4d:42:15:39:dc:e7:bb:90:9b:e5:d7:71:00:8a:92:
2c:46:85:42:22:27:44:76:ad:e7:a8:05:5f:ab:7a:93:7a:68:
2b:10:44:79:41:fc:c7:fa:8a:0c:43:69:ca:84:21:10:d5:07:
b3:ca:2b:92:4e:19:08:8e:82:28:7f:2d:29:0b:cb:10:74:24:
d1:a2:e7:7f:8d:d9:6a:cc:30:cd:6d:17:d9:53:57:ec:5a:3a:
16:b2:2c:67:1d:65:53:1b:e8:d3:71:02:7c:ec:39:1c:70:8d:
86:9c:0d:3a:2e:8f:7a:6b:df:e1:da:37:70:42:4c:e9:ea:6a:
e6:6b:6b:2f:0a:f3:7d:57:a5:22:8f:dc:9f:e4:12:b9:01:6e:
f0:c8:c1:26:b4:6a:e9:e4:cc:29:77:d7:0d:47:d8:5b:75:7a:
fc:b6:54:a6:f2:d7:d8:bd:b3:4f:62:92:19:e0:28:46:d5:e7:
4e:0f:f2:c9:40:b1:a3:5b:b2:5d:7f:08:c9:cf:d8:d5:cf:ee:
86:a0:8d:ac:9a:ad:40:58:c2:99:d9:5e:da:a2:fe:00:f9:42:
cb:09:98:59:9f:55:87:3a:8f:e4:91:1b:c1:c8:11:18:22:5b:
15:90:6c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:24 2025 by rpki-client