Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/wlWYnVecS16t6FL5f2Lpvyz73jw.mft
File: wlWYnVecS16t6FL5f2Lpvyz73jw.mft (raw, json)
Hash identifier: JFaqf37COompIEjai133I789bb5Xicg7PB/uXihOETk=
Subject key identifier: CD:FC:AA:41:55:3A:1F:1A:BB:06:83:62:64:9D:CD:91:76:D1:CC:AA
Authority key identifier: C2:55:98:9D:57:9C:4B:5E:AD:E8:52:F9:7F:62:E9:BF:2C:FB:DE:3C
Certificate issuer: /CN=c255989d579c4b5eade852f97f62e9bf2cfbde3c
Certificate serial: 019A4E4F5873D12BAB54CC01B5025DA2DF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlWYnVecS16t6FL5f2Lpvyz73jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/wlWYnVecS16t6FL5f2Lpvyz73jw.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:14 +0000
Manifest this update: Tue 04 Nov 2025 10:00:14 +0000
Manifest next update: Wed 05 Nov 2025 10:00:14 +0000
Files and hashes: 1: 0ScG0SYY1VJYmCkO7bu4SWFCgDw.roa (hash: nEK6JQy7FzSZP+R7rro7N3DM3RNkDpivxyHHYO4T3GY=)
2: JZ0aaYFj7IVaH2VzvyP-hrd5WRY.roa (hash: NFZatP5QzAykkG+QnrkI9HiICUER0h9e0EtlC/fbFpE=)
3: XNVTHPEtEvJEQtfosSseCOClX9E.roa (hash: ncfHiY3VCS5auvhcc8v+Uwg/prPyczVTt0Pq4DfPjJw=)
4: wlWYnVecS16t6FL5f2Lpvyz73jw.crl (hash: KZvI5MxXe5NEIFuZYVOJw2rWqs0zbKPGhRQTb64EIro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/wlWYnVecS16t6FL5f2Lpvyz73jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/wlWYnVecS16t6FL5f2Lpvyz73jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlWYnVecS16t6FL5f2Lpvyz73jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:58:73:d1:2b:ab:54:cc:01:b5:02:5d:a2:df:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c255989d579c4b5eade852f97f62e9bf2cfbde3c
Validity
Not Before: Nov 4 10:00:14 2025 GMT
Not After : Nov 5 10:00:14 2025 GMT
Subject: CN=cdfcaa41553a1f1abb068362649dcd9176d1ccaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:79:91:95:b5:12:5b:42:55:b8:ad:23:68:ee:
89:46:f4:d8:29:f8:7f:c2:c6:a5:89:6b:2d:41:21:
e9:05:7c:fb:20:83:b7:52:e4:8f:6b:71:17:0c:cb:
00:3b:cc:64:38:44:d4:99:50:71:90:0d:75:c1:5d:
36:a5:1a:9b:82:58:6d:bd:55:cd:fc:3c:ba:aa:5b:
c4:09:ae:b2:5c:03:d9:be:c5:93:b4:28:a0:ce:46:
1f:4e:20:0c:97:3c:eb:46:ae:0f:50:58:d5:fe:f4:
78:17:04:6d:6e:da:4d:1e:17:a6:ae:e4:88:c0:0b:
3d:98:66:41:f3:b5:4b:f5:16:c6:fe:01:a1:7a:61:
97:5d:aa:3d:99:a2:82:07:4d:71:44:08:e7:b7:fc:
a2:0f:29:51:65:f2:a7:f6:c0:9d:59:27:ef:78:8e:
3e:6a:4f:44:3e:fc:f8:67:85:84:41:aa:28:05:f9:
04:48:94:ae:5d:55:bb:6a:4b:37:03:6c:e8:70:96:
1d:06:e1:b8:03:16:38:7e:b9:4b:94:8a:21:13:d7:
2f:fc:44:7e:f5:49:bf:d6:31:d7:c3:cb:d9:aa:d2:
ba:0a:6b:94:49:73:31:dc:b3:45:17:b1:11:21:95:
a0:2c:d4:41:a8:6e:69:5f:e2:f4:23:f4:ec:35:b9:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FC:AA:41:55:3A:1F:1A:BB:06:83:62:64:9D:CD:91:76:D1:CC:AA
X509v3 Authority Key Identifier:
keyid:C2:55:98:9D:57:9C:4B:5E:AD:E8:52:F9:7F:62:E9:BF:2C:FB:DE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlWYnVecS16t6FL5f2Lpvyz73jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/wlWYnVecS16t6FL5f2Lpvyz73jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/720394-cf71-40a3-a538-ed01ed7c129b/1/wlWYnVecS16t6FL5f2Lpvyz73jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:20:3d:a9:4f:6e:84:00:bf:27:db:03:14:ba:82:88:bc:33:
18:82:0f:34:bf:6d:64:c1:dd:95:0f:9c:14:4d:cc:43:f7:b3:
0e:28:20:18:83:02:62:46:e4:c2:dc:83:04:92:7a:40:f8:62:
08:c4:fb:05:23:a2:e8:a6:48:cb:36:8a:be:7b:19:21:23:67:
0b:58:56:fe:6f:97:09:37:9e:74:5b:67:a4:32:ea:16:43:2a:
25:d5:ed:22:00:d9:a7:40:94:3e:9f:90:d7:da:8f:7b:bc:7c:
a8:73:b1:b0:62:61:11:60:09:2e:33:4b:47:a1:b5:d0:96:44:
9b:b3:8e:97:55:00:68:ea:0b:86:d1:b8:0f:2f:af:90:7c:52:
a7:90:1e:6b:e7:f4:1a:57:27:be:70:01:aa:d7:81:49:fc:e7:
51:b5:c7:34:4a:af:78:d5:49:68:3c:24:26:1b:12:f8:e6:b3:
b1:d7:b6:70:85:37:55:80:57:21:e0:12:4e:e4:e8:03:d8:b4:
61:fe:36:66:17:eb:ef:d8:f1:3c:35:49:7e:ff:1f:28:a6:02:
ab:eb:91:48:08:67:98:32:b8:b9:3e:5b:c5:e5:45:da:a3:1b:
25:70:5f:28:57:77:af:c3:b5:cc:57:e0:a5:4d:37:28:5b:ea:
b8:02:96:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:54 2025 by rpki-client