Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
File: wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft (raw, json)
Hash identifier: ocs76X5R04Kg/f/fibKgY9dTcQDNKxSz4wqoOVpaDEA=
Subject key identifier: 0E:5C:7C:C8:78:B8:11:22:CC:74:DC:E5:BD:05:B6:0B:55:D2:6F:ED
Authority key identifier: C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
Certificate issuer: /CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Certificate serial: 019A4C97E39F2652CA37EF2EFDA11710012C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 02:00:13 +0000
Manifest this update: Tue 04 Nov 2025 02:00:13 +0000
Manifest next update: Wed 05 Nov 2025 02:00:13 +0000
Files and hashes: 1: 1-V2Wppi99tQ0ICJCe3K1wVDWeJM.roa (hash: 8LD/75b8b3uJIXBI6PmoCNFAOUQg00FVymHzyQOdHPs=)
2: gR7_p8V_zVRAYSLjkuaCFanK3Yc.roa (hash: qCXHymQkR6cp0GITgkqNAbNsnjRKEGt7ZyJutfebqWA=)
3: lmdWj112UpDUl0YMfe99QFpkU08.roa (hash: 9cGy7MriBqxfTCxDixZtncEZdfRZhLqGhD06Kf2V8OE=)
4: wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl (hash: QAHES0pEjQWLap0z9jjBujS1sR1D3hrHCe5epuLXXnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:e3:9f:26:52:ca:37:ef:2e:fd:a1:17:10:01:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Validity
Not Before: Nov 4 02:00:13 2025 GMT
Not After : Nov 5 02:00:13 2025 GMT
Subject: CN=0e5c7cc878b81122cc74dce5bd05b60b55d26fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:f6:9f:93:7c:30:0c:cc:82:11:ca:78:fb:
12:32:ee:f4:89:c4:ff:6b:49:8d:67:8c:7a:86:58:
a7:98:94:87:2e:b3:77:f0:b8:0c:40:7f:75:82:ee:
f2:b7:a5:f1:73:94:f3:7d:38:00:2a:ad:3c:50:f8:
61:74:b6:5e:8c:4d:a5:b9:c1:44:33:32:ac:06:94:
df:4a:2a:e2:bd:ff:ad:4e:21:cc:25:27:a3:aa:84:
44:92:b0:02:8a:2d:f8:31:22:25:0a:db:a1:bd:a4:
10:4f:6c:b4:f4:bf:ae:fa:30:36:bf:cf:31:61:d3:
c3:a0:4d:c9:db:e3:2f:d1:10:85:38:ef:36:91:f8:
e8:78:dc:9a:a7:43:e9:3d:96:ac:4a:12:b3:c4:20:
a8:73:cd:8d:06:fc:aa:07:00:45:f4:c4:36:60:86:
db:1d:a3:ad:91:0d:a4:d8:c5:b9:7e:6b:38:22:d7:
df:75:66:60:ac:7a:49:4a:93:f4:a8:55:ea:b4:1c:
0f:cf:24:a6:e5:ac:d0:28:f6:d0:17:be:03:86:09:
aa:a5:a7:1d:8c:ed:54:62:a3:e8:db:f5:44:57:a1:
07:3e:a8:35:40:12:d3:8f:f2:eb:8a:3b:a8:52:7f:
7d:f6:ed:14:51:cf:30:9b:39:8c:bc:79:3e:7f:af:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5C:7C:C8:78:B8:11:22:CC:74:DC:E5:BD:05:B6:0B:55:D2:6F:ED
X509v3 Authority Key Identifier:
keyid:C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:87:fb:e7:32:79:d0:bf:ea:2b:b9:f6:04:cf:14:a5:a7:17:
11:dd:a7:06:62:ca:15:e5:43:49:b2:ef:1e:f2:1c:d7:55:2a:
cb:7d:8b:7b:4f:7f:d2:85:fe:da:c3:3c:aa:7d:ed:b5:bc:71:
8f:32:00:60:21:3e:c0:1e:4f:8c:e2:ed:d7:37:bb:f1:7e:2e:
dd:ff:fa:fc:76:d5:7b:e8:65:1d:72:4d:10:26:e7:e0:ef:38:
58:23:73:94:db:1a:1d:65:fd:5c:8b:98:bb:88:f7:f9:61:c4:
e9:fe:40:7c:4c:b6:34:fa:36:d9:c4:6b:fe:b7:41:c2:c6:39:
55:aa:c6:c6:d4:89:6c:f6:f4:18:b1:45:8c:23:c3:e4:66:35:
9b:11:64:08:6e:89:78:2d:3a:df:98:f6:d1:b7:dc:ae:86:7e:
c3:cd:dd:58:71:e0:82:52:db:44:73:10:ad:6c:26:bd:6b:da:
70:94:d4:75:bf:98:e8:7d:70:10:80:66:ce:dd:56:ee:ba:de:
11:01:39:e9:33:c9:7d:50:77:fa:49:f6:21:e7:07:da:ed:39:
42:67:82:74:8c:ff:b0:0c:cc:76:6b:6c:03:36:d2:67:5f:8b:
46:f5:0e:57:f7:0a:1c:5e:45:30:f9:d4:87:a2:1d:74:d8:68:
d3:9d:8f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:16 2025 by rpki-client