Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft
File: wJLY1VEbGezkVpYPI7-ohu4dVws.mft (raw, json)
Hash identifier: Lp15mwpjV5z3XHJZx9+/5hBq82+z0DMCYFFtYbemS+s=
Subject key identifier: D7:DE:0B:43:C0:B5:89:95:DF:85:42:37:06:F2:3F:C2:1C:7C:D3:B7
Authority key identifier: C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
Certificate issuer: /CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Certificate serial: 019A4D73B2BE48705981220F9B8B69243DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft
Manifest number: 171A
Signing time: Tue 04 Nov 2025 06:00:18 +0000
Manifest this update: Tue 04 Nov 2025 06:00:18 +0000
Manifest next update: Wed 05 Nov 2025 06:00:18 +0000
Files and hashes: 1: Q_ZP2vofzPczALgXLi87Ewl-QYw.roa (hash: L4KrlBgHzgT5N8Y6ICGM0vsH5QclmvNH7VTwBVn5LIU=)
2: Xlu1RjkLIjpUuW9uaM7jn9hmpOM.roa (hash: 4HPailMxVKUe4raNE7C7jB5qTjzwPsjAoquzi7o0XrM=)
3: jz90vv6kT8814r7qD_fGqQHUToc.roa (hash: f3X0CYyJUtKdKPAZKVCkw70r2WPKMFX9nLw9xUALHgQ=)
4: wJLY1VEbGezkVpYPI7-ohu4dVws.crl (hash: KymKHaPm/tKI8PhTOGPoU8UQGhLHVDkOQHr754OvDsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft
rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:b2:be:48:70:59:81:22:0f:9b:8b:69:24:3d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Validity
Not Before: Nov 4 06:00:18 2025 GMT
Not After : Nov 5 06:00:18 2025 GMT
Subject: CN=d7de0b43c0b58995df85423706f23fc21c7cd3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:9b:40:03:28:bb:55:db:aa:0a:ef:9b:f4:
49:65:9f:c2:bb:5d:43:4a:07:ff:bd:90:2f:d8:85:
4e:35:4e:96:24:98:98:18:84:52:9e:e7:ad:e3:05:
d1:8f:dd:8a:28:d7:4b:19:96:f6:c1:e2:ee:b7:a1:
1b:6e:05:71:56:60:e2:82:e3:7a:39:1c:5f:5a:5a:
ad:26:50:f8:3b:f6:23:a4:ba:5d:ff:16:7f:25:47:
6b:04:a4:24:e7:23:5b:07:44:c4:5e:f0:84:e8:21:
98:9c:6b:ea:86:d1:3b:f6:01:9b:67:77:c5:03:2d:
ec:87:df:75:1c:54:bb:30:84:a5:3b:cb:fd:dd:8d:
7f:11:80:f0:6d:c5:da:2b:72:54:4e:c3:a9:08:8e:
5c:5a:28:2a:26:90:aa:cb:4d:fd:9b:44:3e:ef:a6:
79:d9:02:3f:29:38:38:6a:55:9b:2b:94:62:4c:15:
f0:01:b8:2f:e2:74:2c:df:a2:08:97:89:62:e8:3d:
8c:24:50:63:56:32:64:ca:a2:cf:9f:97:da:0a:18:
d7:8a:de:85:ca:96:38:a9:7b:4f:bd:c6:ac:f9:66:
29:c6:7d:29:9b:ac:ae:ce:6e:09:12:75:b2:44:cb:
7c:0e:40:00:63:06:ab:60:8b:da:3d:87:ac:60:21:
95:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DE:0B:43:C0:B5:89:95:DF:85:42:37:06:F2:3F:C2:1C:7C:D3:B7
X509v3 Authority Key Identifier:
keyid:C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e3:d1:67:1e:5c:01:30:33:2e:d3:cd:4a:7d:0e:78:19:97:
af:4d:28:d0:07:83:d2:3e:5c:b1:be:21:25:4e:5b:d7:06:0c:
cf:f5:25:35:4b:2c:3d:79:01:ca:92:4b:5c:97:66:82:d0:23:
ae:9f:45:0c:f5:1b:fe:e1:32:0b:e7:9e:87:df:b7:74:92:46:
bd:d5:59:09:0b:6a:79:71:34:e0:6c:e6:35:24:84:c2:ca:37:
65:86:07:1e:ae:68:e9:08:4a:f7:e9:ed:85:8f:19:b4:be:3b:
e5:fc:fe:7e:b3:95:5c:3b:0a:54:40:41:20:02:1f:cb:43:d1:
8f:2d:7a:01:75:e1:81:ac:90:6b:11:6b:9f:a8:2f:0a:ab:aa:
36:ab:50:b3:6a:1c:96:cc:4d:d8:4d:15:27:a4:af:d3:f3:d4:
72:fe:57:14:40:39:0e:0e:f3:21:8e:0f:cf:37:37:f1:3c:8a:
45:93:5e:3c:c0:69:f4:89:b9:ca:87:f9:89:95:ac:f6:9e:5f:
d0:f1:16:38:5a:59:b4:a2:c9:1a:68:16:cc:38:3e:52:23:c1:
3e:fd:28:92:8a:91:29:fd:5b:92:b9:cf:7c:5b:69:d5:0a:12:
88:56:b9:f6:0b:96:58:4c:8d:f8:61:fd:74:3d:a1:0b:d2:11:
56:1a:06:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:48 2025 by rpki-client