Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
File: wvypREWGBrEBfibDyhdDD3_5JLM.mft (raw, json)
Hash identifier: YST3mGbyvJxNEv/kcw+k9b7pdWncuKSeQQb9My1YOuQ=
Subject key identifier: 41:32:40:CE:81:26:76:BD:6F:C2:2E:9B:A0:35:0F:31:DD:B4:C2:F4
Authority key identifier: C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3
Certificate issuer: /CN=c2fca944458606b1017e26c3ca17430f7ff924b3
Certificate serial: 019A4EF483CCC7C52AF5EBDF938ED6E9D6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:38 +0000
Manifest this update: Tue 04 Nov 2025 13:00:38 +0000
Manifest next update: Wed 05 Nov 2025 13:00:38 +0000
Files and hashes: 1: hWs8BC_h3pk307welYbUg7knJ4s.roa (hash: dB9CucoPV9UQVFmYpgxFuKafR8O28SK4AMzI4d3GC5o=)
2: wvypREWGBrEBfibDyhdDD3_5JLM.crl (hash: lz02B76CeAxlL7XxdrZSdwnLATWAsXbtu58ZhSvYqj0=)
3: zsnDAUQ9OWrVKsrixNM64UubPEE.roa (hash: 8s4+Ar8E4qPe68moGEzfuFe9b4Z1MTv6KsbZ2gEaOyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:83:cc:c7:c5:2a:f5:eb:df:93:8e:d6:e9:d6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fca944458606b1017e26c3ca17430f7ff924b3
Validity
Not Before: Nov 4 13:00:38 2025 GMT
Not After : Nov 5 13:00:38 2025 GMT
Subject: CN=413240ce812676bd6fc22e9ba0350f31ddb4c2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:d8:57:ce:ed:ce:47:36:c9:70:01:e1:a1:
1f:1d:3f:86:0a:e4:d7:5c:01:04:6c:2f:e7:5e:1b:
cb:45:c0:fe:be:61:c0:ae:50:6a:5e:5a:e7:f0:f8:
47:c9:57:97:f9:3d:e1:8e:58:22:93:40:c1:8d:1d:
97:86:83:c7:42:02:82:a5:55:b7:7c:85:fb:d7:47:
65:5f:b5:a1:8c:e4:9e:e2:aa:04:1a:8b:c6:de:be:
c8:7c:ed:72:90:71:15:44:54:28:b2:6f:97:57:8d:
12:4f:21:02:2a:17:07:10:57:b4:f6:07:c1:43:68:
10:2b:e2:c2:d6:bf:68:a8:0a:16:25:3f:50:a9:c3:
a7:09:21:f3:cc:13:f3:d0:f0:8b:55:fd:97:00:d8:
e4:1a:8c:46:6b:a7:7a:63:c5:87:27:f4:68:72:ba:
ba:0b:63:d1:45:7d:e7:3d:15:dd:3c:ea:de:95:4b:
ae:9f:cd:b7:e4:db:70:49:84:35:41:31:b1:39:9c:
4b:fd:e3:9c:bd:de:76:25:1a:9c:4c:f1:a9:84:c3:
eb:d9:ae:22:1f:c5:0b:9f:46:9d:80:f1:ae:83:b9:
61:47:e0:a8:ae:58:18:d7:4a:22:91:50:22:5d:6d:
3d:87:e7:37:98:f5:33:49:25:e5:30:1c:dd:9f:28:
ad:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:32:40:CE:81:26:76:BD:6F:C2:2E:9B:A0:35:0F:31:DD:B4:C2:F4
X509v3 Authority Key Identifier:
keyid:C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:13:4e:da:4b:6c:39:62:5d:ab:77:2a:ac:0b:ba:ae:7a:d6:
be:ed:0b:dc:05:b4:c6:a6:dd:26:d7:c5:db:e3:a1:93:bf:86:
b1:b9:bd:32:97:5f:21:c8:9a:d3:61:a2:3f:13:91:6f:74:f0:
fb:cd:c9:d9:84:eb:46:04:8f:88:e2:88:18:de:14:aa:e7:6e:
c5:2b:be:15:ec:06:e4:5a:d6:c0:4d:a1:b2:f7:e0:dd:6e:4f:
32:8b:13:83:19:1e:43:26:ee:0a:6b:21:b0:52:71:1c:fc:cb:
74:db:cd:82:f5:47:ac:18:04:a8:ec:cd:40:d2:d2:36:55:f9:
50:c3:06:85:19:47:07:d1:df:29:2a:e0:61:60:ca:95:f6:be:
11:ef:d8:79:0e:68:6a:af:90:39:d0:e6:f9:01:dd:94:17:e1:
8b:65:fd:23:1f:25:ef:33:f2:65:fc:09:3b:32:ea:9a:bf:be:
1d:81:f9:eb:45:dc:8e:3f:da:bc:d5:6e:b6:30:65:47:57:d6:
2e:e1:08:a6:22:d8:cc:ed:84:cc:e6:1b:47:7e:d6:67:8a:61:
5c:fc:3c:87:bf:9c:0b:36:23:9f:32:d0:dc:40:c3:80:3a:e9:
a8:b5:bd:e1:a0:39:a9:9e:cc:fd:94:53:d7:6b:47:e6:59:b9:
d1:7a:20:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:34 2025 by rpki-client