Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
File: wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft (raw, json)
Hash identifier: W/mdtBlMfGk7vQwxtiwaTiEwbTfqQb48rCl7i/dj5Fs=
Subject key identifier: 79:B0:8E:E1:92:B4:A8:6D:40:21:FD:75:2E:FF:2E:5B:A4:28:EC:93
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial: 019A4EF58C3A913D84043094A84375F1290F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
Manifest number: 171C
Signing time: Tue 04 Nov 2025 13:01:46 +0000
Manifest this update: Tue 04 Nov 2025 13:01:46 +0000
Manifest next update: Wed 05 Nov 2025 13:01:46 +0000
Files and hashes: 1: U48ecbKwcHeg61Lsn-9oJV9fZ1M.roa (hash: 4OZhDTAYRi1p6Bim6OrHHauK8Tj1XNwxbEYFfDDGDS8=)
2: W7Ly1Qh7TAF9UC5Ryue85_XQuXw.roa (hash: Mzqyt+0iiHuJ8ffJgOXtkPZgAbIE5kucHWjmbNGM61Q=)
3: rbSVHILo7KFdyfKkJiVN3ULREeA.roa (hash: +QOKE2skzry0xtqfIBGKUWUhJ09lXvKf9/a8XMywLNU=)
4: wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl (hash: v5igcxNxZmSdzThrognOn/2qwQtkMke7ht702GZXqFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:8c:3a:91:3d:84:04:30:94:a8:43:75:f1:29:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Validity
Not Before: Nov 4 13:01:46 2025 GMT
Not After : Nov 5 13:01:46 2025 GMT
Subject: CN=79b08ee192b4a86d4021fd752eff2e5ba428ec93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ad:4f:ba:07:53:f4:06:72:b7:11:3f:71:2b:
4a:88:e9:4e:8f:25:12:ed:13:7c:5a:b5:91:19:23:
c6:65:d4:76:5b:0e:d3:de:c7:13:41:21:77:54:ef:
6b:b0:66:ff:0e:df:9d:b7:58:14:a5:21:8d:83:7c:
d8:28:89:c0:ee:c8:ee:33:94:c6:ac:98:6f:ee:e8:
a9:17:ea:86:75:3f:e4:b3:5a:35:31:c9:43:31:2c:
5e:4e:8f:fc:f3:ee:fa:5e:d1:eb:62:3a:e4:dd:dd:
dc:fa:e3:27:c9:99:c4:91:9c:16:1d:2d:c1:9f:a6:
eb:db:68:0c:79:fd:19:21:93:e2:80:cd:bf:06:2a:
6b:c8:84:bc:da:19:a5:51:47:52:bc:f3:9d:e0:2f:
03:22:a0:61:bf:09:45:41:88:b2:00:b2:46:24:49:
e0:f9:41:9d:57:cb:d2:51:cd:56:93:33:b0:b5:a5:
fd:d9:e7:3e:55:cc:0c:77:bb:20:c0:9b:3f:5d:88:
db:d2:4a:4b:83:a4:1c:9b:bd:02:66:5f:c3:0b:f9:
b1:1b:0e:db:2e:9f:b2:b3:b6:e9:9d:9a:92:3f:0e:
f5:be:7e:66:69:e3:57:cd:be:86:7f:67:36:4e:99:
af:1b:9d:ec:5b:26:53:5a:c2:18:e4:27:1a:f7:4a:
39:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B0:8E:E1:92:B4:A8:6D:40:21:FD:75:2E:FF:2E:5B:A4:28:EC:93
X509v3 Authority Key Identifier:
keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7b:d6:52:17:a1:27:9e:ed:02:56:f4:27:f1:ba:6f:93:d5:
60:c5:08:22:14:fd:99:54:27:ea:80:da:4e:8f:30:e1:74:e1:
2c:a6:3a:4b:80:39:c2:67:7c:ed:e0:ff:41:58:29:20:53:23:
ca:c9:a2:a4:1d:0b:41:cb:b1:79:42:b6:ec:94:09:e0:0d:6d:
c8:b0:a3:c2:9e:ce:cc:e0:0a:e0:dc:e6:23:24:71:11:2d:4f:
36:b7:a7:b0:63:a8:9b:ea:67:78:37:28:55:4b:65:f9:5f:cb:
f8:53:70:df:38:bc:49:09:a9:ae:18:6a:db:72:98:3d:4c:fb:
fe:6d:62:3a:83:36:a4:25:46:67:84:3f:e5:0d:af:27:1b:82:
82:fe:72:10:ad:83:60:bd:b8:42:7b:59:aa:85:bb:b0:a5:75:
85:b2:3c:0b:e6:fd:31:3d:de:02:6f:9f:13:1a:47:a6:6c:0a:
f9:8b:aa:c1:8f:33:74:e7:26:57:53:49:27:b3:86:dc:f8:a6:
55:89:94:2b:c1:66:c5:08:bc:3a:81:63:b8:8f:ed:e6:b7:f9:
9c:88:54:e4:55:86:d4:34:00:fb:62:05:d6:c1:be:2a:8f:74:
ce:8b:17:ef:58:f2:35:b3:ee:d0:62:65:b2:9a:e0:11:7e:b6:
1c:ae:e3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:45 2025 by rpki-client