Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File: WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier: 9PGUYQXNoobokRgGsHaVfFE21NsiMs3wEK7o0sVj3MI=
Subject key identifier: 81:51:A7:DF:6E:7C:C8:13:5F:25:7A:5E:87:B2:8D:44:06:AA:59:E4
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 019A51BEE4575723AE09343CB820EA6CBF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number: 1469
Signing time: Wed 05 Nov 2025 02:00:56 +0000
Manifest this update: Wed 05 Nov 2025 02:00:56 +0000
Manifest next update: Thu 06 Nov 2025 02:00:56 +0000
Files and hashes: 1: 0D01ZS927DpHThbFhFQ-_hFWxII.roa (hash: W9Yn7dxHb0Wn1s2QKfIJNqloaSt38wuy4qDOcPmUhfU=)
2: KZZiPS9ZeOzzb7Ol0GU3vdesmec.roa (hash: vFZw/xYafILFh9yVo7+bAnIUSWqHvFS5F2SG90lZkR0=)
3: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: emcvJwgxvNsYlrzI88LdxnML8t+8tKi2I75sTna8mTk=)
4: Xo3ldLDsIsZwGbJ3VdetX-GULwc.roa (hash: 81La9U37EUF9V2tnd1e+qs0cFhZ17T44E32Wc8vicAU=)
5: _WlES2eSPPAcdb99IjbgTsc5Xro.roa (hash: EOl3gK+o3EL4dSF6oUVZ6VSDAeYTaurQvmfArpGviOI=)
6: sBlJ4mJbmZ7QPuvf5LufFr5BMyU.roa (hash: i/AotRsBPnt5Nf8geU1CUYhpvrjw/c5dfcC4n774/K4=)
7: wcZznbX9VosJP0oVFOMR9sEtRTM.roa (hash: z/i6QSkFVh2Ed4/qc7yxip/ox8LwcslNmjsXdqJkdo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:e4:57:57:23:ae:09:34:3c:b8:20:ea:6c:bf:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: Nov 5 02:00:56 2025 GMT
Not After : Nov 6 02:00:56 2025 GMT
Subject: CN=8151a7df6e7cc8135f257a5e87b28d4406aa59e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:93:09:ed:ac:c5:04:8e:5e:02:11:d1:8b:
99:01:be:2a:1e:07:4f:25:0e:be:58:d0:fe:e6:9b:
15:b7:98:b4:c2:9d:5b:5a:72:0f:7f:95:c0:2c:a4:
78:4d:44:4a:2f:3c:e3:7f:cf:b9:6d:ff:74:e0:13:
84:d9:4b:15:5e:54:3c:96:19:63:e2:12:07:ac:b5:
46:7a:32:f6:7b:e0:60:16:06:a0:f4:53:33:da:b2:
b8:41:ae:fa:77:eb:07:f4:ff:cc:e2:04:81:ec:98:
94:66:4d:88:f2:ad:cd:13:85:c5:78:c2:de:f0:4b:
63:40:e3:9e:22:53:35:2e:7d:b7:2f:55:31:bb:f5:
ae:47:db:dc:74:70:c3:4a:f9:3c:63:d5:89:f9:0f:
94:d8:32:10:3b:85:a8:00:b4:de:4c:6e:78:8e:3a:
8a:5d:5c:3b:44:a0:41:7b:54:0f:04:46:bd:7d:f1:
af:ae:ef:33:ce:90:a4:aa:b5:f2:dd:fe:64:35:a7:
9c:82:f2:8e:2a:10:b4:13:46:8e:be:52:3a:83:fc:
57:14:3b:1b:da:a4:49:05:fb:f9:a0:41:30:5b:6a:
9e:07:98:dc:45:e8:42:3c:98:b7:28:26:04:b0:4a:
1c:60:be:22:15:3d:e9:72:a3:3a:14:90:9f:8c:fb:
ec:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:51:A7:DF:6E:7C:C8:13:5F:25:7A:5E:87:B2:8D:44:06:AA:59:E4
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:13:aa:4a:dc:93:d0:a8:1d:30:d5:40:05:07:7d:34:12:66:
90:1c:45:ba:27:c9:87:c9:87:0d:e6:bb:f1:b6:b3:e4:30:9f:
c4:6c:14:c4:d5:7e:7f:12:24:68:56:81:89:b7:81:2e:7a:ca:
4b:cf:bf:7a:1c:b3:80:ab:ad:b5:0e:94:6a:a1:1f:d0:2f:bf:
0e:b4:37:37:85:7e:b7:1b:d1:00:88:ad:dc:9d:e0:16:d3:8e:
a7:f6:40:71:66:f6:17:b9:89:58:c7:3a:12:42:f5:d7:64:e9:
6d:99:21:71:b7:14:d7:4b:af:a1:6d:50:73:ca:93:64:d8:38:
55:3a:2a:9d:1f:ae:01:9f:17:b0:8a:0f:e8:d9:df:c0:08:63:
94:80:98:5c:73:04:97:72:14:50:00:50:14:69:4f:b1:14:12:
88:8b:5e:f5:a9:82:ce:b3:5e:f9:6e:f0:92:34:50:97:7b:1e:
4c:4f:3d:1f:cf:77:65:ec:a7:50:b0:f8:5a:5f:31:71:29:08:
a9:51:5c:02:49:40:9e:8d:b6:c8:49:68:97:e0:84:21:a1:ba:
44:a6:f5:29:19:94:dc:0c:ad:9f:d1:40:f6:bf:2a:73:4b:1a:
ce:2a:93:0d:fd:7a:4d:71:c5:6e:ec:53:cd:22:63:63:f0:d2:
64:cf:67:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:14:49 2025 by rpki-client