Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
File: wQKF31sDng8E4t_s4opaj77G6Tg.mft (raw, json)
Hash identifier: cMsoqivxYvPienGnEcx3SxBaqRLpfLF3TAZ6MsS0SwA=
Subject key identifier: 75:54:E1:E3:DF:01:88:73:A4:09:1C:93:66:9D:D8:04:BC:F9:B9:00
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial: 019A4DAA7BD5DC39DF4C5186DD758FBB1BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
Manifest number: 104A
Signing time: Tue 04 Nov 2025 07:00:09 +0000
Manifest this update: Tue 04 Nov 2025 07:00:09 +0000
Manifest next update: Wed 05 Nov 2025 07:00:09 +0000
Files and hashes: 1: 2GK7KjijxkSp5rFI9ZFtp0atb8k.roa (hash: wdEjqmgar3oUItYyi55t1/3r4eSEpgrdLi/xchL3smU=)
2: XqKPzfmuCzaXuReNqmun-bylVl0.roa (hash: fIH8TXgcjjHXQ/BvOpbDJ0pldyGYRtZMTKQJxTQ5HkU=)
3: ty37WXzEM_QABRJJkI6c7K_G8EQ.roa (hash: KUqDTpdF99zPoKmTMTv8GshjWBlrKcQSI4Ly51l4brg=)
4: wQKF31sDng8E4t_s4opaj77G6Tg.crl (hash: fjDwJmMuOCxZtDNfX0y9/EFA9hMWYX2zRX2icBM2OeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:7b:d5:dc:39:df:4c:51:86:dd:75:8f:bb:1b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Validity
Not Before: Nov 4 07:00:09 2025 GMT
Not After : Nov 5 07:00:09 2025 GMT
Subject: CN=7554e1e3df018873a4091c93669dd804bcf9b900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:8b:70:27:1c:33:ec:a8:53:d3:5f:d3:fd:
a6:f6:85:02:07:2f:1a:01:4b:6d:9b:a0:e4:17:92:
a5:fd:13:26:99:de:17:07:ce:84:a0:39:31:c1:46:
0e:6a:7f:1c:96:72:16:0e:f6:06:b9:aa:fe:93:0a:
c3:e0:11:c2:4c:23:0e:98:be:b7:b5:de:7d:b4:a2:
00:de:83:e1:72:f4:2c:1f:2b:15:2a:0d:88:b5:ad:
22:75:95:dc:b5:1d:2f:c5:e7:dd:7b:02:d0:45:26:
8f:c9:d1:d9:db:2c:8a:1b:d4:af:87:22:c8:a0:24:
3d:d3:5a:34:7c:e9:55:26:80:d4:40:62:a7:eb:0a:
ee:44:59:dd:75:78:30:00:da:5f:5b:ee:be:45:a7:
d5:44:4b:c2:95:9b:ec:46:33:de:11:c2:05:7c:4a:
47:dd:0d:06:02:14:a9:81:c5:93:f6:c8:24:4c:70:
94:6c:bb:06:04:4e:9d:4a:7c:50:2f:26:29:06:e9:
46:5f:81:aa:9a:09:94:f9:62:b7:5d:30:c9:7e:31:
98:eb:48:bb:fa:7d:55:7f:89:c7:29:2f:bc:38:f5:
d7:1c:de:5c:78:d2:1a:79:4e:61:ca:b4:1a:93:1b:
5a:c9:bd:69:7f:7e:3a:a8:5a:36:81:46:e4:37:8d:
e8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:54:E1:E3:DF:01:88:73:A4:09:1C:93:66:9D:D8:04:BC:F9:B9:00
X509v3 Authority Key Identifier:
keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4d:b7:1a:21:9f:35:42:5b:e6:54:70:9b:53:97:d8:4b:df:
9a:0b:af:7c:ed:01:5c:25:8b:18:88:1b:80:07:22:a9:c1:4f:
da:21:0b:a9:42:85:0c:39:ab:8e:20:43:2b:8a:70:83:68:30:
28:26:d2:a8:32:e8:07:bf:5f:e0:0f:ef:6f:c3:9d:7d:2b:f4:
0b:39:9c:54:c0:ed:44:ee:f9:1c:0e:06:e7:77:a7:84:2d:da:
69:44:8a:91:0e:d6:ec:a6:8f:61:0c:a3:71:65:4c:bf:69:c6:
f1:0d:b0:72:3c:e1:d2:8b:b8:32:3e:6c:36:05:78:44:13:bc:
84:f0:13:f6:3c:27:c8:57:14:6a:39:a5:97:a3:49:19:1d:c0:
bd:8b:59:f1:64:77:2e:4e:6d:62:2f:3a:b0:aa:64:81:cb:17:
33:ce:7a:43:0a:7e:2a:d5:df:7f:b0:ba:07:73:c1:f7:49:93:
42:b0:86:79:a5:19:c0:6f:5d:c4:d7:30:27:64:a2:81:82:78:
53:a6:4f:b0:77:4a:77:e2:c4:fb:60:72:f7:c3:6a:c9:2c:f9:
af:3d:76:f1:11:d0:9d:6a:4d:a3:76:51:23:bb:b4:c4:43:4a:
05:97:77:46:4d:a6:b5:14:d9:9c:5c:3a:53:b8:12:cd:2d:67:
b2:bb:59:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:00 2025 by rpki-client