Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
File: wDxpSwadoTLPTEvXwdIiloY7F20.mft (raw, json)
Hash identifier: 28tbTqjBG0i0eskJxUyKaUHI17jLgjEqSP1WCGUr1Ak=
Subject key identifier: 4E:65:EF:DA:21:79:C4:47:95:32:19:5F:14:93:11:A8:27:20:8B:D8
Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
Certificate issuer: /CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Certificate serial: 019A4E18CB1634B723FDB8F75BA179EF6C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
Manifest number: 0382
Signing time: Tue 04 Nov 2025 09:00:38 +0000
Manifest this update: Tue 04 Nov 2025 09:00:38 +0000
Manifest next update: Wed 05 Nov 2025 09:00:38 +0000
Files and hashes: 1: D83JF5HJmZ_nDCEolR80xNvS-M8.roa (hash: 2gVW9uQvzf9z69pIhSOEl0MnJWNxJhApE/Mz251JqN8=)
2: wDxpSwadoTLPTEvXwdIiloY7F20.crl (hash: G2WH+MExcL+1CZ3elf669qFMFbz9fFhNvM5wuwNBezY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:cb:16:34:b7:23:fd:b8:f7:5b:a1:79:ef:6c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Validity
Not Before: Nov 4 09:00:38 2025 GMT
Not After : Nov 5 09:00:38 2025 GMT
Subject: CN=4e65efda2179c4479532195f149311a827208bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:39:99:2c:23:8c:75:e1:30:b9:ef:63:1f:
7f:5c:7c:0d:1d:fa:c8:61:95:ff:a5:f0:c5:b7:b3:
00:3e:d0:cd:e7:75:b7:61:65:e2:b8:e9:fc:92:8a:
82:6c:23:6c:70:31:0d:2a:c8:93:43:51:49:68:1b:
1a:a2:a3:0f:33:4b:33:00:e1:cf:d4:33:61:3b:bb:
36:9e:09:1a:4d:d5:34:59:de:a0:ee:e1:f6:85:4a:
47:fd:6b:3d:ac:b8:36:35:c6:80:7e:77:b6:d0:86:
ad:75:1a:7e:9c:26:6b:fa:39:65:f0:1e:e2:b9:15:
d4:37:f0:25:ba:76:1a:3e:db:d9:94:a5:cc:43:45:
af:55:60:d7:71:6c:bc:67:e0:cf:fd:fb:18:01:05:
aa:7e:68:53:2a:81:95:17:f3:03:03:63:fb:92:82:
50:ac:53:ca:bc:55:71:02:60:4c:72:f8:aa:07:b8:
6a:74:01:85:f5:96:6c:3a:79:82:5c:f9:16:64:89:
51:89:b4:b5:5d:50:63:94:d3:a0:87:03:8a:05:eb:
65:96:c1:16:8e:aa:c5:89:a5:66:3a:f2:af:d9:fd:
48:b6:f4:4a:78:d9:ef:ca:ee:57:0f:ad:cc:4a:68:
93:28:b5:5e:02:ef:a9:c3:fd:47:a8:d1:fa:56:f5:
ee:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:65:EF:DA:21:79:C4:47:95:32:19:5F:14:93:11:A8:27:20:8B:D8
X509v3 Authority Key Identifier:
keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:55:02:be:45:bf:15:d1:24:35:47:7c:5d:25:04:87:4a:95:
91:c4:58:80:a1:08:e9:de:9d:02:58:c3:38:35:82:58:46:06:
66:29:96:0f:80:4a:2b:85:f5:a7:a1:a7:15:91:b9:4f:cd:0e:
62:34:e8:59:eb:8c:36:80:99:25:ca:09:2b:0a:88:c1:18:58:
a7:d4:69:cf:80:2d:1c:68:41:23:63:f3:be:3b:5c:1a:15:d1:
e0:c7:8f:2d:1c:b2:ac:4e:b3:e2:a8:9d:63:05:59:e6:cd:82:
af:01:4f:b6:a2:a8:e4:ff:81:57:48:0d:3a:0c:9f:39:bf:14:
fe:16:8a:ca:07:93:ae:7f:00:44:d7:49:81:ea:90:9c:79:f5:
1f:92:bb:07:15:97:a8:f4:71:ff:b0:03:34:66:5e:93:0d:2e:
e2:62:69:b4:c9:18:75:e6:40:b6:64:62:14:a1:d2:73:9e:8a:
20:ef:5b:44:be:ff:d3:3c:c3:f8:cb:72:92:c4:ad:d2:e8:e3:
05:08:5c:6a:c7:b8:9a:5f:f8:95:6a:e5:32:df:5a:c5:c7:62:
82:7c:0f:11:2a:b0:d2:5a:35:5d:89:d6:62:7a:21:8d:6f:52:
7f:3b:3a:2e:d3:93:d6:ad:b1:c5:b6:70:e3:a9:60:ba:e8:7e:
91:14:e6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:37 2025 by rpki-client