Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
File: wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft (raw, json)
Hash identifier: kyCSCpj92UBd57OM6A0feYL6gFBJk26vIDBck1jPZgI=
Subject key identifier: A2:0A:2F:6A:97:40:64:5A:71:D9:2B:07:98:C3:D0:A7:F9:09:15:98
Authority key identifier: C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E
Certificate issuer: /CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
Certificate serial: 019A530832292B08548E716EC7E5404DB8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 08:00:37 +0000
Manifest this update: Wed 05 Nov 2025 08:00:37 +0000
Manifest next update: Thu 06 Nov 2025 08:00:37 +0000
Files and hashes: 1: 6-ydJeMMctB8c_kcu4H6al3x9lI.roa (hash: gkHYAXqWoGGFpT0nUFUwvYsxIUFHF9fDa7NiP95iNN8=)
2: wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl (hash: tGtcdw5/g8R2k2Wyvo02ixVrnGsVXG+HS1qq6vtd52E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:32:29:2b:08:54:8e:71:6e:c7:e5:40:4d:b8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
Validity
Not Before: Nov 5 08:00:37 2025 GMT
Not After : Nov 6 08:00:37 2025 GMT
Subject: CN=a20a2f6a9740645a71d92b0798c3d0a7f9091598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:26:8a:2a:60:63:51:f7:31:fd:2e:63:02:c9:
3c:78:40:ed:af:f9:89:b5:b3:ac:cc:61:2c:4b:50:
8f:28:ef:49:a4:62:c3:83:1e:55:88:9e:7f:d9:79:
3a:84:ff:61:92:03:e2:71:8d:e9:f7:08:4e:b9:12:
46:4b:16:66:71:7c:33:23:a6:ca:05:1b:f4:c7:d8:
f7:6d:18:1e:90:54:82:9b:e8:fe:70:98:fe:43:a3:
e4:44:de:27:59:bb:69:82:4b:d7:3a:28:3d:6a:91:
1d:88:62:e2:9c:32:77:12:1a:9f:ab:4e:a7:c0:67:
37:68:b2:a9:18:24:57:b6:35:ad:ea:ed:0c:b4:72:
6d:94:c6:5b:53:1d:cd:6d:45:b8:f1:0e:6e:80:2a:
83:2b:90:08:40:75:63:07:0b:c9:26:4c:7e:30:ba:
01:6a:50:8f:45:33:29:22:cf:6e:dd:5b:8d:d4:5f:
39:a4:bf:cf:a7:17:7e:45:0a:41:63:f5:8a:6c:67:
32:56:32:74:7b:e5:53:ac:07:14:a9:dc:a1:97:c9:
bc:59:f3:80:0b:62:13:0f:1e:b6:97:c4:44:3b:a3:
3e:43:bd:d5:77:68:cc:55:33:93:f5:02:45:69:86:
6a:4f:a0:48:fe:ae:cb:6f:ad:b3:2d:e1:22:4d:c0:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0A:2F:6A:97:40:64:5A:71:D9:2B:07:98:C3:D0:A7:F9:09:15:98
X509v3 Authority Key Identifier:
keyid:C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d5:ea:9e:9d:0d:d2:0c:62:2b:d5:14:48:5e:36:80:23:24:
7b:cc:a2:2f:89:6b:42:54:08:fd:86:6b:ca:ba:78:52:09:5e:
0d:ad:dc:d0:c4:86:26:bf:af:0b:fd:d8:56:16:1d:2d:e4:fb:
28:90:81:e0:0d:31:5d:ba:31:b7:e4:e6:9a:3d:4d:9c:93:a6:
75:4b:5c:fa:38:d1:01:16:e9:f8:3c:6c:f7:2f:af:05:b4:a3:
87:0a:4e:2a:72:2a:67:38:99:9b:90:42:1f:1a:03:8c:a6:4c:
ed:13:1e:e1:71:91:1d:d8:45:52:d9:74:53:8b:44:09:89:9e:
a8:e5:94:58:65:d5:70:8a:25:68:f0:cf:dc:cc:d9:cf:6c:5f:
12:e4:cd:d3:6f:e7:f4:4a:db:65:8f:fa:4c:a0:46:d3:2b:09:
5e:bc:f3:5a:35:ca:7d:19:3a:98:7d:15:7a:4a:55:1f:9c:85:
b1:af:22:a8:61:bd:13:a8:c5:2b:24:aa:01:fb:ff:34:0c:ae:
5d:45:f1:5a:da:72:5b:b1:af:ad:b8:7a:b7:f9:69:1c:ea:a8:
73:7f:df:98:30:7f:59:61:17:17:88:5a:7f:87:0a:bc:28:96:
c8:f9:d9:c4:ad:33:9d:8a:63:2c:a6:fa:e4:60:ae:f6:bb:54:
9b:d9:83:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:46 2025 by rpki-client