Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
File: Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft (raw, json)
Hash identifier: DnUA0k/VVsWzl87tynQJzYIqPI22RQFfEwOAQuEpR4I=
Subject key identifier: 3B:D5:CF:11:47:63:38:02:92:70:2D:DF:46:A9:BF:0F:3E:36:AA:3F
Authority key identifier: 5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
Certificate issuer: /CN=5afd8667cce95be0ae96058c4550d7088035312f
Certificate serial: 019A4EBD3A3C545385118BC8A1201A8D55CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
Manifest number: 138D
Signing time: Tue 04 Nov 2025 12:00:15 +0000
Manifest this update: Tue 04 Nov 2025 12:00:15 +0000
Manifest next update: Wed 05 Nov 2025 12:00:15 +0000
Files and hashes: 1: 1-Nwco5vWw63pYOoiXeEziJ8cPec.roa (hash: A8og17z+q1WxTvxdTmf8v2Hsh2pkC1lSNWSe2XBfRe4=)
2: NP9ETkcPIfZiSMV55HsJboQ-GHY.roa (hash: cI4wvFFvTdVvpTjPJ+zLUBYHPo+x7aSz3XoVXrfmrY4=)
3: Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl (hash: t63xj/LHhUiOnwd4KVq0LGBkGCouY0GDMbHBYWwajqw=)
4: oASD19FfafZ9Bk1cWcQplzT_eGk.roa (hash: 5KCTISkJIdPY0yxRXHdtjkMOZNoEuDC1m+xGq1kXxdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:3a:3c:54:53:85:11:8b:c8:a1:20:1a:8d:55:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afd8667cce95be0ae96058c4550d7088035312f
Validity
Not Before: Nov 4 12:00:15 2025 GMT
Not After : Nov 5 12:00:15 2025 GMT
Subject: CN=3bd5cf114763380292702ddf46a9bf0f3e36aa3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:bb:bb:07:2c:74:91:34:c0:56:fe:cb:d9:
77:ff:e3:eb:1e:07:77:98:a4:08:f1:e9:99:88:f2:
64:bb:de:cd:7e:72:24:97:6f:72:2e:60:7d:f5:e6:
92:66:26:6f:6c:ab:08:3a:bc:e7:3f:79:05:13:0e:
88:da:c5:a8:be:6c:40:43:76:b1:9e:64:d2:99:db:
15:e2:2c:9b:e7:64:ac:a5:7a:1e:bc:30:c7:03:ab:
1c:34:8d:92:3c:67:1d:61:16:c2:47:81:64:7a:84:
6e:80:31:cb:38:a5:d0:23:f7:09:ba:90:2e:23:c3:
30:fb:fe:db:b3:d2:d6:7b:90:19:24:26:b6:b1:8e:
c7:f3:01:a7:42:b1:ca:89:da:d0:f2:b8:72:b5:b7:
f0:e4:29:5f:b6:1d:b1:77:a7:92:42:f5:1e:22:f8:
ca:4f:c8:4c:08:a3:71:f5:12:21:d1:b0:73:ae:ae:
93:09:ec:4d:36:b5:6d:9e:be:ef:87:54:e0:4a:ef:
55:e6:ff:66:ac:47:a9:a2:df:e4:b3:f5:7d:31:67:
66:ce:ca:df:55:50:95:2a:8e:6a:9c:b0:5e:ae:10:
ce:1d:36:62:ed:29:12:3c:83:69:ad:7b:f8:87:40:
85:0e:2e:e5:cb:ef:a3:d0:af:24:24:cb:a4:de:be:
91:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D5:CF:11:47:63:38:02:92:70:2D:DF:46:A9:BF:0F:3E:36:AA:3F
X509v3 Authority Key Identifier:
keyid:5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a3:cf:77:fd:71:ba:0f:e7:78:07:13:6c:1c:b0:a4:35:c2:
b6:ee:bb:16:34:69:41:11:02:fb:b3:93:44:43:bf:34:26:b3:
00:e2:ee:09:c4:93:a3:8c:70:c4:4b:9e:0d:e9:87:45:49:52:
89:f8:8c:e9:8a:9d:bf:c8:8f:26:de:a9:83:04:7d:e5:75:0d:
f3:fd:9a:b0:56:93:2a:1b:e9:86:68:e2:93:52:60:17:70:7e:
44:59:11:d6:75:ef:7e:6c:d5:6c:5c:5d:f4:bf:4a:ea:2e:94:
bd:90:54:37:38:03:89:a3:d8:b8:a6:4f:39:ec:28:1c:52:fe:
0c:06:e1:35:de:27:5a:c9:74:d1:0f:f9:b8:09:3d:ea:0c:fb:
58:d2:4c:63:8b:49:88:74:50:da:61:02:b6:f5:fe:7b:f3:46:
f2:7f:2c:cc:b7:a5:9d:de:bd:29:9f:9b:46:58:38:b3:12:bc:
65:be:8d:b6:45:73:8e:c3:2a:5a:fe:04:b3:62:56:30:60:66:
63:86:52:a1:93:eb:c0:b5:75:44:62:2b:73:dc:34:f5:81:7c:
d3:31:1f:1f:8e:cc:c9:16:10:d7:5b:f0:e9:e2:be:0a:5c:dc:
70:89:56:06:65:87:2c:94:15:f1:11:09:61:c3:69:70:df:8c:
1a:f4:23:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:00:58 2025 by rpki-client