Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier: VDNkDfHXU0VY42VNUS9yHpleh8PJZs38MxQnn75t4Q0=
Subject key identifier: 68:20:8F:9C:B9:99:29:4C:4A:32:31:2E:9F:8E:71:B9:DB:13:7C:F4
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 019A4D740AB86F91940D5F4839B9A8A87087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number: 116C
Signing time: Tue 04 Nov 2025 06:00:41 +0000
Manifest this update: Tue 04 Nov 2025 06:00:41 +0000
Manifest next update: Wed 05 Nov 2025 06:00:41 +0000
Files and hashes: 1: 9c0rgR7sx5b0INcSJYu5W29d3Lc.roa (hash: y70EM6GErQtflpK0nFkjr6koXzt1x9WLonWw/bb44FI=)
2: GGiu1L5lhvZ8MzbHc6hTc-r37u4.roa (hash: rDG83BQh2P4hrlgqRkJ2V5CxzCdFANpJED+WOO84WlU=)
3: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: EMGCp/pBRqDGYQiomgF1ghFkk837iQIG8Hn28E9pLrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:0a:b8:6f:91:94:0d:5f:48:39:b9:a8:a8:70:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: Nov 4 06:00:41 2025 GMT
Not After : Nov 5 06:00:41 2025 GMT
Subject: CN=68208f9cb999294c4a32312e9f8e71b9db137cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b9:1c:1b:2c:5c:e5:47:c4:bb:df:10:3d:8e:
23:16:cc:a1:78:c2:4c:98:06:ad:d2:b3:e7:0e:71:
ec:17:7b:38:c7:a0:49:78:b4:ae:97:43:87:87:33:
93:da:21:94:f7:ea:f4:44:12:26:99:e5:57:00:40:
21:2f:71:9b:16:59:d2:bd:00:1f:ac:8d:c0:57:7a:
98:bf:c7:62:40:c3:0a:b1:06:14:94:98:da:2d:e1:
27:2e:d1:18:a4:82:2b:01:27:dc:72:43:3a:95:a0:
8f:d4:29:2b:3a:e8:fa:52:aa:b3:b4:65:d2:3d:86:
88:be:e5:69:f7:6b:3c:a0:af:7f:b1:61:9d:f0:95:
a7:6c:76:b8:4b:d5:34:f2:96:0d:fc:fc:09:aa:f9:
4d:53:b3:4b:10:7b:08:0a:f8:54:d9:57:3f:5b:de:
b3:be:a3:95:84:cd:83:e5:44:06:ae:1c:4e:a2:ce:
f6:8b:27:48:b4:2f:b8:68:ad:1e:04:5a:e3:6d:7c:
97:1b:0b:72:b4:ed:06:cb:5e:6d:8f:9e:e9:da:04:
e0:1d:45:79:11:37:5c:bb:f8:5c:53:95:a1:9e:46:
82:a6:69:c4:73:d3:99:98:f4:1e:fb:0a:e2:db:ad:
7a:05:8e:a2:ac:98:24:6e:5b:e5:3a:db:86:f5:e9:
33:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:20:8F:9C:B9:99:29:4C:4A:32:31:2E:9F:8E:71:B9:DB:13:7C:F4
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5f:47:bf:29:53:16:00:db:c9:95:6e:d5:e9:07:ed:07:57:
b3:11:d1:fa:3f:e9:d3:cb:f2:4f:d1:37:7d:92:a2:80:9d:19:
12:9c:f2:e6:d6:ef:d2:dc:2e:87:b2:82:e8:39:42:fe:5f:50:
32:4d:ea:af:31:03:ee:d7:be:81:ce:a4:5f:d6:06:2a:1b:85:
94:5b:41:c4:9e:76:0c:d2:99:a2:b9:02:c8:7f:f4:79:e2:c9:
06:53:9a:7c:64:c7:e0:f0:d5:08:02:ff:f0:8f:6f:9d:7f:a6:
8c:a7:e2:67:ff:7b:98:26:c9:62:ca:48:92:ad:dc:2b:dc:e7:
84:a6:27:b4:7d:ef:0c:ce:27:d3:10:32:63:a2:d9:0c:ab:ed:
25:25:c3:4c:f4:58:7e:c9:de:2b:3b:30:1e:fc:71:9b:06:a3:
d0:0a:3c:e3:ec:31:3b:df:f0:de:23:7e:15:40:db:14:34:82:
56:db:02:05:51:df:08:88:f6:bc:14:18:64:e6:40:5c:6f:d6:
ed:5a:2b:da:dc:d9:d3:2a:cc:1a:51:d5:5b:df:fc:9a:0a:f0:
ea:b4:33:47:7b:cf:3a:98:09:0b:49:4c:e4:90:1a:a4:bf:8c:
00:c4:0d:2b:16:4a:13:eb:60:0c:22:b8:1a:43:b2:7e:1b:fa:
69:3f:5e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:55 2025 by rpki-client