
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
File: _WNpJxttE6au3Koj67KeKbeWpGs.mft (raw, json)
Hash identifier: w0zaLl/Hb6IkjDuAVA0PZAqYdJUEZcQeKJqP7dRIvxk=
Subject key identifier: F9:41:99:5D:EE:89:EE:36:11:CD:FD:DE:3E:B0:E5:93:3E:10:14:B7
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Certificate issuer: /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial: 019A4F6230F75723581B79B048B32BF11824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
Manifest number: 1143
Signing time: Tue 04 Nov 2025 15:00:26 +0000
Manifest this update: Tue 04 Nov 2025 15:00:26 +0000
Manifest next update: Wed 05 Nov 2025 15:00:26 +0000
Files and hashes: 1: _WNpJxttE6au3Koj67KeKbeWpGs.crl (hash: vyXtofI6wJK5ZsRP0sFKuPri4WDlZ/g4lv/Vbe2pDR4=)
2: jJZ2HGBh9sf4zKvFBoawkCSE36M.roa (hash: /j0hgJuEgbh9wJPPT5skbRnDVTk4N5FaC35FuOjVz1M=)
3: lhJ5RbjQbCIcx6Snzw8-3JVMgGE.roa (hash: VcH6B7wbqshRYaE0Py9Bav3UnTpHMEOSu603CVWuDjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:30:f7:57:23:58:1b:79:b0:48:b3:2b:f1:18:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Validity
Not Before: Nov 4 15:00:26 2025 GMT
Not After : Nov 5 15:00:26 2025 GMT
Subject: CN=f941995dee89ee3611cdfdde3eb0e5933e1014b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:9f:3d:d9:fe:e7:66:43:8f:af:e3:f4:9d:
5d:58:c7:15:04:b6:8f:41:11:50:f1:94:f7:a5:69:
74:b6:9a:c4:a0:21:a9:fc:ad:0d:dc:f7:68:97:07:
e1:49:62:d7:85:eb:81:e8:85:8c:8c:8b:fb:96:5c:
08:c8:8b:1c:be:e1:78:8c:b2:bc:b5:a4:58:bf:d5:
22:5c:4f:18:ac:e1:30:84:a8:10:57:88:08:d8:11:
1b:a4:22:b6:ad:b5:75:9c:4d:40:9d:f3:26:01:8d:
df:5a:c7:5b:7c:73:69:1d:c2:73:31:c9:d7:c1:5b:
af:f0:4d:b7:79:14:ab:05:2d:16:20:2d:19:fc:0d:
f6:d8:04:bc:7e:fe:9d:e9:89:0f:d5:cd:85:b5:65:
7f:70:f5:73:ad:e8:40:94:22:d4:96:e2:62:93:e0:
04:06:21:ec:21:b8:f2:e7:b5:26:2d:8b:70:3f:c3:
24:1f:29:a6:a3:a9:24:c7:2f:a4:3e:3a:01:48:81:
2e:c0:dd:25:a4:08:e6:86:54:86:08:c9:e6:19:6b:
0b:68:04:81:04:c3:f4:83:80:3d:55:f0:cd:69:bc:
6c:cc:05:d3:ae:e0:e5:aa:40:8a:1b:77:97:6d:ad:
be:5a:70:d8:07:33:7e:68:8c:1d:0b:4c:1c:7f:df:
66:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:41:99:5D:EE:89:EE:36:11:CD:FD:DE:3E:B0:E5:93:3E:10:14:B7
X509v3 Authority Key Identifier:
keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:45:92:7d:c8:a9:fb:a1:7b:24:fb:89:ea:f0:2a:d9:fb:e6:
f1:e0:2a:85:77:11:7b:f5:b5:8c:31:4e:46:65:48:70:5d:1b:
c4:92:8c:56:9f:cd:70:5c:d5:34:30:8e:52:58:18:c5:6f:51:
b1:18:9b:02:d1:7f:17:ec:80:eb:dc:bc:c7:c1:97:81:f8:2a:
b7:ff:2a:0e:79:67:58:ae:60:11:9a:29:75:9a:e2:40:d8:18:
6f:00:14:74:96:f6:5a:1c:19:d4:00:0a:44:2b:ab:e8:c5:8c:
c3:e2:e2:8a:30:91:de:40:c7:d4:88:a5:e6:35:77:4b:a8:7b:
ac:de:e3:4b:22:ce:fe:6e:4d:47:32:80:ff:90:a0:42:b8:26:
a9:bb:97:e8:be:d5:ae:43:5e:e1:ed:34:a8:7f:12:f4:c9:d4:
9f:09:45:cb:72:e9:94:e2:d8:1c:60:b5:5c:ee:1e:fa:8a:ba:
e6:18:01:0e:4f:37:05:32:90:41:43:a7:46:b2:3d:1e:92:bc:
cf:3e:14:de:4c:9d:21:19:93:da:91:77:fd:fb:9b:5f:6a:80:
5f:bb:21:5e:7e:f2:da:bf:ba:99:2d:99:b1:90:24:23:70:c3:
60:32:c9:34:4e:1f:77:8c:8a:ad:8b:1f:70:a1:4c:74:87:75:
81:a4:2a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:24:11 2025 by rpki-client