Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
File: WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft (raw, json)
Hash identifier: +E+2AUjJLLdKzHbBm1Ky7M0LmTuxN9bKmo6ycNVJjec=
Subject key identifier: 79:BB:CC:58:48:D1:E2:A0:C2:F4:EA:C3:F3:EA:59:96:17:D3:56:D2
Authority key identifier: 58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
Certificate issuer: /CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Certificate serial: 019A4EF540DA9E58F0B43594B1279064B155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
Manifest number: 0671
Signing time: Tue 04 Nov 2025 13:01:26 +0000
Manifest this update: Tue 04 Nov 2025 13:01:26 +0000
Manifest next update: Wed 05 Nov 2025 13:01:26 +0000
Files and hashes: 1: HdQg4z2Zf1RFHyfPIhhO8wU76o4.roa (hash: 6V9zMRoiTuGwCa4UmUjRFtWch8Ql0rvMtNhWDgEc7Wc=)
2: WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl (hash: vlCsJd4Fo5mqHub+vV0Xp1vxbuNSyBgwI/ZP6uSG/6Y=)
3: rztsTufSoR-W_P1Ii78nFC4FuTk.roa (hash: xuo1Ar7awubUSeGyu2ODhUDhZtyEioCr27uE58GVZok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:40:da:9e:58:f0:b4:35:94:b1:27:90:64:b1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Validity
Not Before: Nov 4 13:01:26 2025 GMT
Not After : Nov 5 13:01:26 2025 GMT
Subject: CN=79bbcc5848d1e2a0c2f4eac3f3ea599617d356d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:20:df:b2:e7:c9:4d:88:22:3b:9d:3c:ac:
0d:60:50:51:f0:4d:7f:8a:34:00:51:da:c7:a0:e8:
da:c5:9e:c6:5d:8a:00:a8:9d:4f:04:af:01:42:96:
6c:1d:aa:be:5e:1e:09:d7:11:ca:d7:31:7f:63:ec:
91:d3:ab:5b:3f:ca:5e:a6:8b:21:d0:5a:f3:2a:ba:
f7:64:f0:53:a5:b0:df:59:d5:04:89:90:cd:8f:7b:
cd:3b:e3:82:58:d8:78:ab:5b:d5:f9:86:88:9f:3c:
44:e4:28:71:5a:26:ab:42:88:b2:95:24:86:93:74:
47:03:02:df:1e:0e:c5:58:74:c7:76:4e:b8:51:09:
59:f5:dd:31:9e:13:23:49:45:af:ba:96:7c:21:65:
0a:0b:b9:0e:f2:2a:9c:6e:de:b8:21:c5:4e:16:89:
b7:8e:58:bd:b8:e5:24:49:60:e7:0d:12:1f:32:14:
d2:64:86:1a:54:ce:e3:15:c2:e7:5c:fe:7e:53:38:
5a:85:f8:38:ff:c3:18:69:66:4a:44:1f:d2:6f:d9:
e2:af:e8:33:d5:70:ca:ed:e8:b5:b0:c0:26:a7:a2:
05:0f:3b:89:03:1b:61:2f:11:51:f2:23:7e:f0:98:
1a:a4:0c:56:95:71:79:50:fa:5f:b6:d2:d4:9b:58:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BB:CC:58:48:D1:E2:A0:C2:F4:EA:C3:F3:EA:59:96:17:D3:56:D2
X509v3 Authority Key Identifier:
keyid:58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a4:4d:4c:d4:92:b9:42:4c:30:64:ca:08:c8:d8:82:a9:3d:
bf:b6:15:45:05:37:44:d9:d2:18:bf:87:ec:b1:5e:2e:18:4f:
c2:68:80:a1:dd:35:d4:55:0a:29:7a:fa:12:f7:44:b5:ca:f1:
77:f4:46:4a:09:30:58:e9:20:50:97:9d:66:4d:05:ab:af:fa:
6f:4a:d0:e3:67:39:7c:43:fa:7a:e2:b0:04:78:f1:f6:e0:60:
96:f4:bd:b6:ab:d2:14:e1:ff:06:6d:2c:30:f4:7b:a6:34:83:
54:36:58:6c:00:a8:d6:4b:fe:4c:7b:d5:57:ef:a5:e7:fc:a8:
74:1e:5b:cf:05:cc:e5:5a:b2:01:30:2e:12:50:bc:b4:c8:0d:
3d:7f:4d:c5:23:f8:1f:a7:bc:98:de:0d:1a:35:dd:d7:b4:23:
84:6f:57:b7:45:ee:6d:ec:69:b8:77:53:93:60:d3:79:16:c6:
31:f9:b3:09:28:88:27:04:57:bb:18:2e:5c:38:df:70:0e:cc:
06:09:41:1f:7e:8e:60:c5:32:92:03:c2:63:16:5b:70:30:d9:
c4:af:12:71:61:7a:6e:b8:52:fc:35:d7:f9:80:a6:87:2a:99:
0a:14:e5:da:7d:26:15:2d:e2:01:75:45:e6:81:e5:03:a7:f2:
0b:d4:75:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:53 2025 by rpki-client