Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
File: wWFXjOD_N_BsJjYuosY1e5hjO3A.mft (raw, json)
Hash identifier: Ay9LTokQX+Z6RFh7ywgiSnDZVKq5KCMb/KOwn312W6A=
Subject key identifier: 33:62:9F:CD:97:DE:E5:D4:33:F7:F7:08:73:82:D2:C3:81:DA:EC:98
Authority key identifier: C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70
Certificate issuer: /CN=c161578ce0ff37f06c26362ea2c6357b98633b70
Certificate serial: 019A4EF55BC9C2F6330A7F8F116E9C40AF23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
Manifest number: 0EBD
Signing time: Tue 04 Nov 2025 13:01:33 +0000
Manifest this update: Tue 04 Nov 2025 13:01:33 +0000
Manifest next update: Wed 05 Nov 2025 13:01:33 +0000
Files and hashes: 1: VaQFkBkaVYjwzbk-d1HfVSqGj30.roa (hash: mgqfVOInqFPvEjCxJre+1kdiyjEUS8UusvaHKwVL6Uo=)
2: wWFXjOD_N_BsJjYuosY1e5hjO3A.crl (hash: jPVlU5S5lptOSeVhsLtmj/2Yrm9oBbQ3JWoplbWmAbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:5b:c9:c2:f6:33:0a:7f:8f:11:6e:9c:40:af:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c161578ce0ff37f06c26362ea2c6357b98633b70
Validity
Not Before: Nov 4 13:01:33 2025 GMT
Not After : Nov 5 13:01:33 2025 GMT
Subject: CN=33629fcd97dee5d433f7f7087382d2c381daec98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b9:03:5c:86:2b:cd:4c:48:eb:b1:ed:3c:9c:
90:a7:cc:b2:2d:44:a5:10:90:81:0a:30:34:6a:17:
70:ab:0c:7d:39:0a:7e:d2:b3:59:39:41:b9:15:0f:
58:61:c4:69:a1:0f:97:ab:c3:62:84:f9:35:94:2d:
e1:9a:09:f0:c3:4c:17:ea:06:b5:b4:1b:88:06:a3:
64:a7:be:21:e1:1c:6c:b5:12:9f:07:ff:49:bb:58:
b9:4b:cd:c9:e2:43:15:ee:ff:e8:99:a0:f8:41:4a:
64:fa:27:ca:0f:92:fe:f2:9b:00:0a:d6:44:65:46:
d4:9b:a3:33:fc:4c:ba:05:c0:e6:49:58:8f:b3:06:
65:1b:df:cd:c7:6c:b6:33:db:c1:8a:13:3a:98:eb:
62:17:ed:7d:81:0f:30:55:6a:cd:28:3e:e8:a8:9f:
dc:d2:32:67:38:f0:ba:2b:f0:43:e4:75:05:12:50:
01:b6:81:2c:6a:e0:01:b3:77:96:9c:51:f2:7c:23:
8e:b2:b6:be:66:48:54:97:dd:1e:30:f5:54:8a:1e:
9a:23:8c:9b:f7:2e:0d:a7:f7:e9:a4:49:c8:c4:da:
e1:14:d1:f5:27:c8:d9:48:9a:96:ab:43:a8:96:87:
36:13:be:22:4c:3d:2d:6f:79:c6:62:da:52:76:dd:
d8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:62:9F:CD:97:DE:E5:D4:33:F7:F7:08:73:82:D2:C3:81:DA:EC:98
X509v3 Authority Key Identifier:
keyid:C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f7:4a:87:25:04:29:3e:15:47:1a:4d:69:33:f8:da:c0:7a:
b3:d2:1e:62:3b:2b:46:a5:c4:ca:0e:dd:3f:17:8e:64:6a:10:
a0:e4:b3:87:98:e2:a3:c0:c3:1a:de:83:f0:7d:63:b6:9e:d8:
63:e7:2b:76:c3:82:f0:89:41:3f:9f:e7:d0:01:49:0a:13:d3:
c1:39:d8:9c:a5:08:cf:ae:f2:58:b4:94:29:7e:3d:b2:a0:f3:
78:69:c3:6b:c5:d0:ee:b1:65:86:8a:62:19:49:18:9d:ae:73:
d8:4f:db:5e:44:51:49:d4:29:11:1b:ac:ae:d4:61:e4:07:c7:
b0:be:b3:16:a9:6b:ca:58:59:1d:f7:0e:94:b7:83:e8:12:e3:
a0:f1:6c:0b:5c:7b:a8:87:f7:db:12:dd:d3:57:c9:fb:37:9a:
a7:e7:25:21:50:cb:c9:c3:ca:76:47:7e:d5:d3:84:4c:c4:e7:
3b:40:11:dd:a0:33:eb:af:83:ce:c8:b2:6f:e7:45:89:31:d6:
38:21:9d:28:67:ce:6b:0a:97:96:0b:c3:0b:2f:5b:97:60:ff:
94:61:75:8b:c1:35:d8:af:bd:ed:9b:e6:d5:e4:cd:78:8a:c2:
03:55:c5:46:a3:a5:01:12:6b:dd:25:aa:09:f8:77:e4:7d:30:
ab:97:33:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:44 2025 by rpki-client