Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
File: WyWQnzuU5V9e8zaifSdKff0NlrI.mft (raw, json)
Hash identifier: gT9dPf8Nro30ejkS7t5qliaxf/VtSnpFAKN9hYn3MLg=
Subject key identifier: 65:3C:74:E8:79:5B:F9:1B:0D:96:A4:5A:03:1A:BE:40:A3:BF:26:7E
Authority key identifier: 5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
Certificate issuer: /CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Certificate serial: 019A4E86B3EB4785FFFDA584E41D7C7A6959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
Manifest number: 15C2
Signing time: Tue 04 Nov 2025 11:00:42 +0000
Manifest this update: Tue 04 Nov 2025 11:00:42 +0000
Manifest next update: Wed 05 Nov 2025 11:00:42 +0000
Files and hashes: 1: FEdxURaOUkYL0WbDVp9BT5YoCGg.roa (hash: V1bhzQdOv21eP2L8drvzUoPqsAJ8/f8TJjg7qCBB23Q=)
2: WyWQnzuU5V9e8zaifSdKff0NlrI.crl (hash: A180b8XAcotUj2K4dp2oDGJKs/J/TO9uJ3nSdvgq1y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:b3:eb:47:85:ff:fd:a5:84:e4:1d:7c:7a:69:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Validity
Not Before: Nov 4 11:00:42 2025 GMT
Not After : Nov 5 11:00:42 2025 GMT
Subject: CN=653c74e8795bf91b0d96a45a031abe40a3bf267e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:43:f0:1b:66:43:a7:37:d3:10:0e:7e:f7:
b4:74:4c:cf:ab:95:6b:0e:a6:52:ac:dd:04:71:44:
d2:9c:79:9a:f2:53:4f:11:88:63:a8:b2:92:c0:d0:
7d:e6:5b:8d:9d:b5:03:04:ab:85:34:7f:92:98:44:
9c:3a:c9:1d:fc:76:25:4c:e7:e4:21:b2:d0:76:a4:
ef:c9:85:31:49:10:21:25:e4:7c:13:69:02:8a:55:
45:9a:b6:20:60:76:57:aa:d4:9c:2c:b6:e3:16:06:
f2:1d:96:8d:da:6c:0f:25:16:39:78:0d:d2:69:35:
5f:da:e4:14:be:a2:91:89:b0:e5:49:75:04:6a:a7:
ab:c1:03:24:5b:85:d9:ee:32:51:32:af:82:f7:d9:
67:05:54:4d:29:ab:a3:f7:a0:e3:c3:17:50:f8:61:
ae:aa:9c:62:8e:c0:ee:91:b9:2b:f1:95:5f:03:8c:
01:e0:5e:b8:9f:4a:eb:cc:78:93:5a:83:83:db:5e:
7f:40:12:b2:ec:d0:68:b3:de:87:d1:d3:6f:31:17:
db:63:e2:c9:2f:5b:22:f0:4a:c5:a9:79:9e:6d:26:
7f:ef:a4:e9:ac:08:ce:9d:ad:de:9a:4d:81:3e:31:
4a:b9:0d:19:d3:fa:37:44:8c:0c:29:c0:8b:0b:d4:
cb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3C:74:E8:79:5B:F9:1B:0D:96:A4:5A:03:1A:BE:40:A3:BF:26:7E
X509v3 Authority Key Identifier:
keyid:5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4c:21:13:25:9c:f6:3a:d4:1c:dc:62:c6:80:d0:c5:94:5f:
a7:67:43:10:bf:fa:6f:cf:80:1a:60:3f:4b:2b:f7:a8:1a:6c:
3e:8f:b2:1b:29:38:dd:cd:cf:9b:8e:35:67:a1:0b:4e:4c:01:
51:37:d6:80:6b:d9:e1:15:a5:db:fa:60:94:c6:90:5d:81:f5:
78:c4:31:c6:b2:bb:70:09:15:14:d4:ae:8c:5e:c5:4b:3f:0b:
e7:a8:17:84:b0:7f:b2:7d:5b:4c:51:fa:bb:d7:27:fd:34:4d:
08:52:4c:73:5b:89:15:b9:58:51:97:44:7d:2c:f0:b3:e1:f9:
f3:54:38:06:43:4d:03:d3:22:ec:96:e7:8f:2f:02:67:ef:e9:
dd:96:3d:d8:fa:11:9b:b1:20:1d:f7:7f:7c:32:34:cb:9d:6f:
ce:47:c4:d6:a9:b8:64:66:9b:3b:0e:c0:ff:6f:71:10:34:82:
d0:91:64:90:d2:b5:a8:d7:c3:76:65:9e:71:66:b0:a0:c6:19:
b9:f7:c0:10:f5:57:22:f6:73:b6:67:f8:1a:8f:b8:c3:98:79:
b7:4b:8f:cc:6f:cb:d3:da:58:65:53:ee:01:15:40:63:8f:61:
24:3b:a8:a2:c2:42:9c:44:08:14:bc:fc:00:56:e6:63:6d:02:
7d:bd:0e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:11 2025 by rpki-client