Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
File: wArEVewO3ikw6lgQV-4f9Z9b9sc.mft (raw, json)
Hash identifier: JR75UVqVNuWhm4VkGmCiMYyDEcbgU/5N+ESBI/SspPQ=
Subject key identifier: 64:2C:1D:95:58:84:59:F6:41:50:28:6A:47:9B:44:CA:48:A4:56:16
Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
Certificate issuer: /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Certificate serial: 019A4C61549A6FA6B754BD77D49D78A53D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
Manifest number: 1194
Signing time: Tue 04 Nov 2025 01:00:38 +0000
Manifest this update: Tue 04 Nov 2025 01:00:38 +0000
Manifest next update: Wed 05 Nov 2025 01:00:38 +0000
Files and hashes: 1: IaifUimRjLV0wimYFwuBxS5X-tQ.roa (hash: cmI9raT4lPlOUQCttfe+nau/yhN6VEMOtjQDtEZ8tbk=)
2: wArEVewO3ikw6lgQV-4f9Z9b9sc.crl (hash: Cp5VyTzhxsbVLdW2UNb9AVHuj5CkcVgoiVRKIW4zs5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:54:9a:6f:a6:b7:54:bd:77:d4:9d:78:a5:3d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Validity
Not Before: Nov 4 01:00:38 2025 GMT
Not After : Nov 5 01:00:38 2025 GMT
Subject: CN=642c1d95588459f64150286a479b44ca48a45616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:1d:e9:d1:72:6b:f0:a7:d0:b6:7d:28:0a:
52:7f:45:19:e3:4f:e7:d0:e3:f2:72:fc:c6:15:94:
94:b2:5b:67:4c:04:97:09:6b:29:6f:7c:f6:08:0e:
36:ab:1a:ae:cb:2a:94:2f:2a:5d:d4:e2:2e:0e:d5:
00:e7:2c:cb:35:d8:34:71:94:17:80:f2:bb:69:1d:
64:a7:9f:ed:f2:20:87:c5:77:38:fa:45:96:e1:f2:
a4:cd:9f:07:19:ce:d2:41:0f:2f:c9:82:00:cb:7e:
5f:05:c2:ad:40:fb:09:4b:b6:be:9a:0a:80:a2:7c:
d5:a5:d3:11:60:6f:4b:a0:f8:27:b8:ac:7d:15:46:
37:1e:7a:0a:a3:00:52:5e:10:4e:66:8b:e0:e3:7e:
19:31:0f:1b:c7:a2:4d:aa:a4:04:7b:c0:1e:9c:d4:
36:42:fa:61:75:d8:86:ea:b4:42:86:5b:b4:a2:e5:
c7:52:e2:17:32:65:94:e2:7d:d5:a6:ca:ef:64:f2:
aa:12:ce:d0:97:25:1b:7e:0b:a8:de:48:d5:6e:ef:
b0:e1:1f:ac:15:71:56:98:33:ab:37:89:9c:27:1b:
3a:fb:b9:75:b1:7d:71:d9:9c:40:60:4d:81:f5:15:
7c:64:83:1e:49:27:f6:6e:0b:19:0d:64:14:1b:d0:
01:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2C:1D:95:58:84:59:F6:41:50:28:6A:47:9B:44:CA:48:A4:56:16
X509v3 Authority Key Identifier:
keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:f7:c8:31:5b:0c:54:6f:b3:bb:95:e0:2f:b3:98:1a:d5:38:
52:41:d3:11:ae:45:42:4a:71:57:d2:ab:10:9a:8a:7f:9a:ba:
ff:fa:dc:3f:da:59:f0:a4:95:7b:5e:a4:ef:cb:d3:2e:8a:96:
e7:23:fc:ea:66:0a:a2:5c:72:08:b8:6b:bb:26:15:45:66:cb:
76:4f:a5:de:0c:b8:57:1e:27:fa:65:37:ed:01:7d:8c:97:f9:
1c:40:c0:bc:dd:c8:19:79:f4:4a:38:72:1e:f7:d6:93:54:d7:
c4:5b:88:31:89:b4:a5:e5:7d:99:3b:49:8d:3b:91:11:80:bd:
1f:46:ed:d5:b4:94:88:2e:14:1d:3a:32:5b:aa:a8:c5:35:c8:
c9:d1:ce:1b:d5:17:e4:9b:8e:2c:2d:46:ee:f8:17:f7:08:10:
0c:3c:ab:03:36:d7:17:17:6e:b0:76:0f:ef:f5:ea:49:7d:8b:
60:e9:65:42:f7:9d:8b:fb:d0:b7:a9:05:7e:06:9d:95:b0:b9:
9a:f1:79:de:6b:4a:8c:4d:6d:9a:9d:c6:00:51:8a:41:82:c8:
26:a7:f2:28:8b:c7:73:a7:e5:b4:32:ce:b5:dd:66:34:5b:71:
fa:81:37:f2:94:f3:3d:37:5e:a4:7c:53:6e:3d:ac:80:7d:07:
24:0d:05:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:13 2025 by rpki-client