Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
File: wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft (raw, json)
Hash identifier: 9oEeaybvPhF30J6O+94yQ/dMSwUxeJn7qqAgT1N1ndU=
Subject key identifier: 13:77:72:B2:DA:46:0E:68:08:71:52:4D:F5:FB:CC:DD:43:7D:AD:4F
Authority key identifier: C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F
Certificate issuer: /CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
Certificate serial: 019A54884FB81DEE256466382BACC594E70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
Manifest number: C4
Signing time: Wed 05 Nov 2025 15:00:10 +0000
Manifest this update: Wed 05 Nov 2025 15:00:10 +0000
Manifest next update: Thu 06 Nov 2025 15:00:10 +0000
Files and hashes: 1: m7F8-ZMUyz1-psOjPUnaE9Me5Vs.roa (hash: HODFa2mR9I0a1zz0sbXkdYMjQ984IJTX1WYokvEP+JA=)
2: vKrZtrLO-kjlGhWVhFRrqWF3pgc.roa (hash: ve87rPmSXe7qg0yy2QR3CBV1SiCheNHcBB4z1Clsc6c=)
3: wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl (hash: f/fe492nO5Jtxt6VCj1H7gHXy1oKQA4qZnLPERW7vJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:88:4f:b8:1d:ee:25:64:66:38:2b:ac:c5:94:e7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
Validity
Not Before: Nov 5 15:00:10 2025 GMT
Not After : Nov 6 15:00:10 2025 GMT
Subject: CN=137772b2da460e680871524df5fbccdd437dad4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:1f:85:ac:2a:56:6a:11:c0:3b:8f:5f:3b:
b3:83:79:e1:88:5f:c2:ad:18:ed:2d:f4:66:6e:58:
4c:fe:91:4a:48:7d:d5:66:51:9a:f3:95:8e:1a:e0:
a0:ca:d8:db:3f:19:88:2e:73:9a:3b:88:24:16:a8:
cb:e5:21:6c:ae:b8:26:42:ba:9f:f2:5f:4d:3b:e4:
e0:b3:03:fa:5b:5c:68:85:51:dc:df:8d:cd:48:cf:
e9:33:ee:45:c2:22:1d:35:d6:b9:82:7b:81:43:33:
90:e2:91:bb:3a:d7:35:48:72:67:3a:c9:5b:b1:b1:
28:0f:8c:10:fa:5a:27:b1:4a:13:2b:fd:3a:4e:4b:
3c:2a:85:3d:55:40:ac:b7:52:07:a4:83:2b:1b:6e:
bf:c3:77:59:f3:49:a7:34:b3:89:3e:07:0a:a1:ac:
07:2e:38:8e:3f:4a:5e:0f:66:0b:26:12:0e:bc:d8:
94:bd:79:07:35:c1:2c:e8:f7:4f:09:0f:f6:f5:7c:
ea:eb:4e:a3:0e:b7:2d:3d:af:18:40:a7:80:e0:02:
54:57:37:f9:4f:94:1d:aa:31:fd:33:56:3e:39:af:
92:5f:5e:4d:b5:19:01:20:3d:ad:45:1e:7d:5f:ad:
1e:98:d6:48:88:ed:bb:4c:7c:ba:5f:4f:7c:59:fd:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:77:72:B2:DA:46:0E:68:08:71:52:4D:F5:FB:CC:DD:43:7D:AD:4F
X509v3 Authority Key Identifier:
keyid:C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d4:37:15:4d:d9:b3:bd:19:77:a0:34:c5:93:5a:30:72:8a:
51:f0:85:65:3d:55:07:5b:03:ef:13:c3:ed:83:75:ae:65:42:
03:d7:a6:fd:a7:3e:84:71:30:86:e6:55:63:4f:3a:b5:ea:e9:
f0:bd:c7:76:76:de:f1:3e:6c:04:a8:d8:9f:a3:ee:8b:94:20:
32:f3:8e:45:2d:db:96:9d:ba:94:cd:e1:87:eb:d5:4f:33:de:
20:f2:04:fc:a5:49:86:da:96:56:8e:92:26:27:2c:ca:9d:93:
ba:7b:63:4f:d8:a7:8e:76:35:cd:b2:64:38:31:93:c5:d0:16:
f2:99:06:28:ed:9a:d4:62:8a:28:18:70:89:80:ee:c2:c4:ec:
6a:b1:db:17:da:33:86:e4:e4:ab:fb:7c:c4:62:67:98:07:a5:
bb:9e:98:3f:f2:a7:5a:c6:6c:03:08:69:9d:c8:62:58:00:4a:
30:0d:ed:5a:75:d6:91:63:3a:63:5c:6c:6c:a9:80:83:64:0e:
d1:1f:0c:76:65:29:f1:72:84:8d:d4:e3:56:f5:1d:76:36:d6:
48:9d:9d:43:3d:8d:76:e2:26:19:6b:f5:5a:9d:30:6c:59:62:
99:56:f6:15:16:e0:78:cd:a3:88:87:99:bd:83:32:2c:ff:b0:
ea:b2:64:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:52:54 2025 by rpki-client