Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier: gqkZ279PQPvtafpKdXa/nrfiKPtZtOwHz4M5AGnnZIE=
Subject key identifier: C8:2A:A7:58:5F:8A:01:2E:09:F6:F8:21:D5:B3:EC:33:16:66:24:62
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer: /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial: 019A53760241BD5ACC66566042C3BAC8B617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number: 0404
Signing time: Wed 05 Nov 2025 10:00:33 +0000
Manifest this update: Wed 05 Nov 2025 10:00:33 +0000
Manifest next update: Thu 06 Nov 2025 10:00:33 +0000
Files and hashes: 1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: Hy3Fvv+ar5HqSCRMkB3Ti/lPgFjax1GHRpk5a7OCORA=)
2: fMqs9FskGDIW9ZbaQwk0qUEC3ks.roa (hash: CtgaQ4J8AgrMFT4kVvGV6ADv6GPEnX8MMv9l/y32iWU=)
3: idiMTHuxguw5KJd3P5FoGJbinyo.roa (hash: n+9BnqU/yI6WzHcfhLc6mXo8IOBS4JMkN/uhkjIXEGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:02:41:bd:5a:cc:66:56:60:42:c3:ba:c8:b6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
Validity
Not Before: Nov 5 10:00:33 2025 GMT
Not After : Nov 6 10:00:33 2025 GMT
Subject: CN=c82aa7585f8a012e09f6f821d5b3ec3316662462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:19:35:f6:78:f1:83:65:03:c4:00:1a:96:ca:
21:c5:14:d5:e0:72:2d:74:18:cf:f9:f6:11:52:ce:
ea:e5:a0:34:21:c2:26:1c:55:1e:9e:8c:72:01:a8:
12:c4:df:33:de:dd:30:c5:9f:fb:4f:e7:3d:0a:be:
7f:6c:2a:4c:ac:81:b3:79:b3:50:99:9b:e7:a8:f2:
12:b6:a3:67:63:17:ce:bb:d2:df:ce:eb:50:b3:5a:
52:a5:05:6d:d5:88:ee:45:7e:6c:0e:af:44:4e:58:
0d:ce:18:60:f9:74:a8:29:ee:88:80:56:58:88:d2:
20:77:84:f4:dd:02:6e:a4:80:81:0a:2e:ef:1e:4a:
7c:df:10:48:31:f3:27:6c:8f:e8:6d:d8:3d:c6:62:
60:f6:eb:a6:7f:ff:0d:c7:c2:5a:3c:ec:bd:21:09:
ed:e5:d9:09:61:0a:1e:53:c5:cc:db:b0:64:d3:54:
be:f3:aa:f9:0a:7f:81:81:8a:a2:07:2e:14:c2:5d:
c7:f1:1b:3c:4b:6d:4d:da:5b:75:3a:d1:0e:0e:ff:
29:48:6f:00:16:2f:b8:1a:73:08:a0:8d:53:c8:9a:
e6:ae:5d:f6:22:b4:c2:97:a4:07:a0:b8:91:89:57:
7f:fc:99:2f:98:37:7b:9f:8b:65:1e:7b:3c:75:51:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2A:A7:58:5F:8A:01:2E:09:F6:F8:21:D5:B3:EC:33:16:66:24:62
X509v3 Authority Key Identifier:
keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0b:e0:cf:34:34:c2:79:b6:68:34:3e:c3:4f:c9:3c:c7:c4:
79:4c:c1:d4:a3:7e:08:bd:68:62:9c:15:a0:bc:8f:03:fb:bc:
db:77:7d:15:5a:de:3b:f4:28:44:0c:0d:09:6a:74:e6:e9:51:
a3:d9:7d:3a:1e:f0:d5:69:05:08:2c:e4:e1:f8:dc:ec:c5:77:
5b:d2:d6:ed:8c:9c:b1:94:b5:24:58:f8:e1:e6:c0:79:16:b2:
15:1f:9e:f6:24:cb:75:4a:62:4b:a8:50:79:b6:69:ce:f8:29:
c5:55:ad:20:eb:02:f0:6f:e0:b0:26:ae:3b:46:8e:fc:3f:6a:
b3:ab:90:8c:d0:d7:46:df:96:0c:d1:00:92:a9:ca:5e:7d:00:
63:33:f0:3f:0f:5e:88:4e:ec:ad:bb:bb:eb:f7:bf:4c:dc:ff:
4a:77:b3:f6:25:f5:8a:a4:16:55:9e:43:0d:ef:93:ea:81:88:
23:48:07:b6:21:ef:8c:82:2b:de:73:6e:b9:e5:ee:74:56:95:
bb:15:9d:e2:95:3e:8c:b0:e2:22:63:8a:50:9b:cf:72:33:bc:
7e:b3:55:6b:8f:c9:ef:2b:d7:74:3a:ca:56:bb:ac:2e:6a:3c:
e6:76:4b:4e:1e:ab:e0:32:08:2e:0e:74:66:10:ab:a9:4f:83:
70:4c:20:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:46:35 2025 by rpki-client