Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
File: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft (raw, json)
Hash identifier: M0xm5FRik3j4mDoIHza62NQDfkn0Y/yUq/L5zdYy628=
Subject key identifier: AF:C8:20:89:29:26:E0:97:FC:44:5F:EC:70:69:D4:0B:0E:75:B8:BC
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Certificate issuer: /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial: 019A5187CBE9BC18F40329CF602723B14852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
Manifest number: 1403
Signing time: Wed 05 Nov 2025 01:00:45 +0000
Manifest this update: Wed 05 Nov 2025 01:00:45 +0000
Manifest next update: Thu 06 Nov 2025 01:00:45 +0000
Files and hashes: 1: T4eXTqD8qMkY5DY9RCIRmYEaW64.roa (hash: E3LBQ2rpYHnPvo7DUVa09ZVv6KEvA9HMX0+KhVuVzuY=)
2: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl (hash: V6nN2KbjrlLxkJOee6XDMGuK1t3Yn8ufuAJxs6B408g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:cb:e9:bc:18:f4:03:29:cf:60:27:23:b1:48:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
Validity
Not Before: Nov 5 01:00:45 2025 GMT
Not After : Nov 6 01:00:45 2025 GMT
Subject: CN=afc820892926e097fc445fec7069d40b0e75b8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:dd:cc:e8:57:4f:99:2a:b8:10:a1:ea:6a:
e9:de:07:cf:c2:12:2d:e4:fe:95:dc:1d:91:8a:26:
48:2c:7d:25:7c:a5:1a:3a:e8:f3:0e:e6:fd:f4:87:
54:52:92:fe:19:97:be:50:e6:57:72:56:9f:35:2b:
3a:4c:07:98:8d:6c:3d:ee:a1:b2:dd:75:88:96:b2:
68:c5:d0:d5:2d:79:4a:de:c8:45:26:ee:46:f5:e2:
f1:11:d0:79:d6:4f:9d:ff:8d:3b:20:86:fc:f6:93:
db:48:91:ff:69:88:51:e1:91:06:28:e0:f7:8d:25:
2a:fe:87:ab:bf:5a:46:c7:9d:77:a3:2d:bb:48:38:
a8:7e:d2:a5:df:ca:a3:05:5f:b9:43:08:bc:44:68:
db:48:7d:c1:e6:8f:e4:a3:a9:4b:4d:93:a3:41:48:
2b:83:09:4c:00:97:5d:5e:45:41:67:cf:7c:64:8a:
93:fb:7c:d8:d1:66:8b:0e:2d:a4:48:dc:d1:13:37:
4a:86:e1:0c:1f:35:14:5e:84:be:a3:d6:9a:6c:44:
03:60:1b:7a:e2:5b:63:69:84:39:80:da:cb:95:aa:
2b:b9:e6:6f:91:80:1e:d7:46:19:d5:7a:1b:8b:8a:
4f:ea:82:90:0a:71:31:ee:40:76:49:3e:ed:d1:26:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C8:20:89:29:26:E0:97:FC:44:5F:EC:70:69:D4:0B:0E:75:B8:BC
X509v3 Authority Key Identifier:
keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cb:c7:76:53:eb:96:f4:2f:ed:d7:70:08:b1:e3:fd:80:f6:
51:2a:63:28:78:bd:8a:7c:9b:aa:36:62:57:68:2b:e3:ab:c7:
e8:dc:8e:7b:57:12:7b:83:a3:29:40:e6:22:07:63:f1:b6:1f:
45:59:66:f0:54:27:8c:a5:6a:47:74:c0:a8:0f:93:21:11:c5:
d3:d6:1b:96:39:7f:35:dd:54:6c:36:9a:c1:97:6b:ae:2d:b1:
89:fd:20:8f:42:d0:c4:26:95:95:aa:aa:27:fe:b4:24:5b:39:
9c:97:08:1f:0c:ea:ac:3c:ab:06:b0:1c:44:a2:ff:9f:67:94:
3c:83:26:1e:08:65:99:04:75:e3:6e:41:dd:d8:67:cf:db:fd:
a6:b1:aa:f5:d6:ec:27:6a:47:6e:4f:b9:c9:64:3d:3d:f2:55:
2b:5a:4a:96:0d:0b:ba:ea:19:11:c6:6c:21:4a:f6:d7:0d:74:
44:2d:ce:77:b8:fa:3f:06:46:8a:6c:66:83:cb:17:24:54:4f:
fc:42:a0:71:a9:03:9d:cb:f6:b0:2c:67:ac:50:b8:9b:81:92:
f2:17:d1:06:24:4a:b4:bd:9b:cc:e3:dc:25:bf:87:86:da:65:
44:5f:a4:57:1d:6e:4a:3c:64:1a:b3:74:2a:34:37:96:2b:fe:
7e:67:76:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:07:09 2025 by rpki-client