Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
File: wftJLwoYjwAUJ44N9ruwKc66268.mft (raw, json)
Hash identifier: p/0n0Wn5FUh+ZLGJJS+NRzdIUIQzDLwpExMvhbscnGY=
Subject key identifier: 20:A6:99:9C:7C:4B:1B:A7:51:21:C6:50:BE:A8:F7:94:75:DC:03:BF
Authority key identifier: C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
Certificate issuer: /CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Certificate serial: 019A51F5603670D6B5D563E952DCDE51116A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
Manifest number: 19
Signing time: Wed 05 Nov 2025 03:00:26 +0000
Manifest this update: Wed 05 Nov 2025 03:00:26 +0000
Manifest next update: Thu 06 Nov 2025 03:00:26 +0000
Files and hashes: 1: Fe7zjbjsSkfSmHcOcKTsjCvLSrw.roa (hash: ilUtJi4tRjp7bb2QTirkNRC/xpGUx1kSM2twyjBIiuQ=)
2: gziDOqPG6U9afjnBXPEc69mX6Dw.roa (hash: +GIafbcUuO8i9qY+f9XBYqM/fVpDKVh4VVCbD4KyQBw=)
3: wftJLwoYjwAUJ44N9ruwKc66268.crl (hash: AD3XwJpaAcal9sOR1vvKt9K1cR8R4o9Sq8dveRb89W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:60:36:70:d6:b5:d5:63:e9:52:dc:de:51:11:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf
Validity
Not Before: Nov 5 03:00:26 2025 GMT
Not After : Nov 6 03:00:26 2025 GMT
Subject: CN=20a6999c7c4b1ba75121c650bea8f79475dc03bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:a1:27:55:a0:69:2a:a6:5a:aa:f2:fc:60:
98:90:34:21:9d:6a:bd:9f:14:7f:1b:b2:96:60:4d:
12:17:24:f4:38:54:e4:66:bf:63:9c:62:40:81:63:
ad:a6:1e:ad:8d:c0:96:7d:00:38:c5:51:9a:0e:14:
bd:44:14:da:16:83:ad:51:76:9d:65:0c:12:7a:21:
9c:1d:aa:b3:02:3e:57:a6:23:0f:6a:af:99:f6:37:
7a:14:38:78:c2:23:fd:0a:8c:92:f1:34:f9:97:66:
62:e8:f7:68:1a:68:50:1e:3f:43:94:d0:d7:c1:ec:
16:19:64:a3:a1:a5:55:e6:cb:9a:5b:88:4a:87:4c:
2a:b8:d4:05:68:9b:ec:16:cc:e9:6f:fb:a0:88:14:
d7:c3:f9:0c:d0:9c:69:b9:7b:10:ea:99:8d:4c:6e:
35:c1:d5:e5:77:a2:e4:e6:7d:f8:c6:85:51:22:27:
7f:06:5b:65:f0:b6:d9:63:5a:23:4e:75:c3:a1:5b:
74:8d:32:04:2b:4b:08:c1:14:2e:cc:dd:98:cf:29:
f9:48:ce:0a:44:43:a4:df:5f:ec:bd:cc:c7:bb:1a:
ac:b3:eb:ae:6b:a1:91:b3:37:12:83:6d:bc:e8:b1:
4c:ce:ac:21:eb:c5:e8:21:96:7e:54:b9:30:24:1c:
d5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A6:99:9C:7C:4B:1B:A7:51:21:C6:50:BE:A8:F7:94:75:DC:03:BF
X509v3 Authority Key Identifier:
keyid:C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6c:e2:34:de:a1:1c:1b:98:90:58:aa:62:9f:81:a6:f4:f6:
72:e5:8f:ea:d3:b5:9a:c4:23:e6:83:ec:90:aa:ce:75:a4:5c:
05:af:d7:0c:e1:3f:a5:ed:04:eb:ce:42:98:5e:be:9e:64:1a:
7c:3a:f0:40:93:8e:e8:f5:67:32:ea:54:92:5d:6b:b5:85:b4:
d1:58:43:13:4b:42:d7:8a:fd:37:08:2f:67:e1:c4:13:f8:b3:
2b:58:35:b9:1c:18:a5:f1:81:d3:34:c4:a9:6d:21:4b:f5:0f:
6f:e7:a9:74:40:1a:24:22:f0:1d:81:c7:c0:09:86:16:cb:28:
40:8b:ed:61:57:f6:27:13:f1:a5:bc:ce:e7:09:22:ef:0a:4d:
e3:ea:58:59:59:6a:67:c0:4d:46:aa:32:13:86:98:de:f3:6c:
b5:fe:34:62:33:0c:80:e8:2b:07:e2:2d:91:37:14:df:fe:e4:
9d:70:36:05:36:01:fc:a7:ea:e3:61:d2:b7:c6:65:70:c9:43:
ce:60:ad:5f:7d:36:17:b4:6d:1a:87:b0:4d:9d:48:18:bb:1a:
1a:90:35:cb:fb:5b:82:19:29:08:c4:b0:da:31:df:1d:a8:2d:
f5:0b:6d:8a:b0:1e:60:ec:90:11:6a:53:10:13:30:8f:aa:57:
9c:5e:e0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:52:38 2025 by rpki-client