Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
File: wtKsHXyezPVli4jxb2E9ez6OjHI.mft (raw, json)
Hash identifier: p4n/PUCsmmDA8Mkh2mFXVoX6ePg2Gyq0RnThM4g8LI0=
Subject key identifier: 98:2E:6C:23:8F:C0:62:16:A1:C2:59:8D:E8:0F:55:40:91:D2:59:B5
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial: 019A522C58D984F622BABED4D1C306538FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
Manifest number: 0DE5
Signing time: Wed 05 Nov 2025 04:00:29 +0000
Manifest this update: Wed 05 Nov 2025 04:00:29 +0000
Manifest next update: Thu 06 Nov 2025 04:00:29 +0000
Files and hashes: 1: iyhHvdxrCDpCx0rthc1y2PDRVeM.roa (hash: tsQpmBoieuwyK9NLkB/rFB9zv5VDj/xDszDJZlsYm+M=)
2: kYICD71uUIhZT1NgaYWPu4i9VEs.roa (hash: tlKuBt17kCCF6TmwuYmDos64rg+wgJTpFtqRY1+6cVg=)
3: wtKsHXyezPVli4jxb2E9ez6OjHI.crl (hash: k8apH3ZnmRqj0qgshQCAs3d2cQv+xM0kMgJFo5Z76Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:58:d9:84:f6:22:ba:be:d4:d1:c3:06:53:8f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Validity
Not Before: Nov 5 04:00:29 2025 GMT
Not After : Nov 6 04:00:29 2025 GMT
Subject: CN=982e6c238fc06216a1c2598de80f554091d259b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1b:c3:02:f4:64:ba:d6:47:63:c6:36:8f:22:
fa:b0:89:bf:15:78:9a:04:e0:9e:91:5d:f0:2c:0b:
19:25:86:6d:42:09:9e:1a:07:58:23:79:19:af:5f:
49:03:8b:2e:e1:9a:b1:8d:81:d5:e9:56:9c:5e:3d:
6b:eb:e3:53:b4:ea:60:71:10:a0:10:a5:73:88:f0:
d7:79:11:de:3d:87:0c:c4:11:1a:ac:5d:2f:70:b8:
94:83:8a:5a:00:cf:5a:00:0a:15:a1:f5:a5:57:07:
5e:5f:d1:db:87:8c:99:93:e4:ab:5d:cb:25:1d:ef:
34:e4:5c:e7:11:3b:52:56:40:95:6e:cf:ab:39:dc:
da:68:5c:26:1b:fe:36:99:99:67:22:fa:7e:fa:bf:
4a:45:76:ed:79:e4:9c:93:e5:65:53:69:57:21:65:
76:28:69:fb:79:6c:57:41:ae:b7:e7:f5:45:49:e3:
0a:55:ad:82:ea:32:b6:5c:7a:40:d5:68:69:12:27:
b7:d1:1a:05:16:35:5c:ba:cf:ce:2a:2b:75:f4:52:
d4:83:97:46:b5:ff:c7:ac:7c:d9:74:fd:31:3c:34:
3e:b9:46:08:ca:18:78:be:44:79:f6:5a:b3:c0:e7:
91:ea:c2:dd:9b:37:4f:ca:f3:44:32:3c:22:25:06:
da:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2E:6C:23:8F:C0:62:16:A1:C2:59:8D:E8:0F:55:40:91:D2:59:B5
X509v3 Authority Key Identifier:
keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:74:ef:f1:77:fd:d2:3e:fe:f3:b6:15:43:cd:f3:12:00:3c:
87:26:40:34:38:8d:c7:d1:4f:a7:2a:5c:ba:2e:ef:8a:b1:5e:
76:d6:2e:10:c8:8e:36:b5:e3:0d:9d:4a:85:5e:2c:17:02:37:
a6:70:44:b9:af:f6:c8:bc:0c:56:bb:99:b6:24:8d:8c:28:35:
a5:e9:0c:16:a4:6b:af:dc:02:ec:3b:2b:a0:1d:0b:b3:3c:e6:
73:09:b0:69:3f:84:00:22:5c:e6:df:d2:8f:41:4e:d7:76:00:
8c:ec:9f:33:de:ff:46:99:0e:cf:c3:f3:77:5a:ac:57:87:b5:
2f:ab:4f:48:34:fe:39:c7:45:53:28:1c:a1:3b:83:7c:00:f5:
02:44:86:98:91:05:36:7d:b1:03:72:c9:09:50:b7:b1:6e:e4:
af:a9:0d:af:29:08:89:e2:8e:20:0d:32:a4:46:b7:70:16:10:
c1:e9:18:bf:1f:64:d2:45:1e:0a:55:10:af:48:a0:75:20:3a:
c6:9d:57:fb:22:5a:1d:e7:f1:b5:b3:f4:7e:a8:7d:4e:09:55:
f2:e5:99:c6:41:40:8f:ca:bf:14:35:33:79:46:cc:eb:04:b3:
0f:d4:f8:4b:05:1a:c1:f8:34:91:46:4c:d6:4e:26:b0:a7:21:
c7:9c:fe:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:02:07 2025 by rpki-client