Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
File: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft (raw, json)
Hash identifier: AlZe8c/95n0DDxvKmO58gurilZJtI8QrJM4+0C8iw58=
Subject key identifier: AF:C5:56:A4:A1:D4:72:55:B2:E4:88:28:BC:EB:19:32:BF:1B:A0:8C
Authority key identifier: C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
Certificate issuer: /CN=c30aef396394ea5950dc7956ab1bf491364622a4
Certificate serial: 019A4D3D1D50E3695898598E95BA6C4C9798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
Manifest number: 1666
Signing time: Tue 04 Nov 2025 05:00:42 +0000
Manifest this update: Tue 04 Nov 2025 05:00:42 +0000
Manifest next update: Wed 05 Nov 2025 05:00:42 +0000
Files and hashes: 1: rZbNK2xJ4XhKao8afy4CimeXVSk.roa (hash: DH234KafhTlCh4Rrjfu8Y3PnZSWa2Wt2QfsLpMy42vQ=)
2: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl (hash: wMgncw+scBSMZguZxuwg/HxLCuH/d4RQqodu2k73dKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:1d:50:e3:69:58:98:59:8e:95:ba:6c:4c:97:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30aef396394ea5950dc7956ab1bf491364622a4
Validity
Not Before: Nov 4 05:00:42 2025 GMT
Not After : Nov 5 05:00:42 2025 GMT
Subject: CN=afc556a4a1d47255b2e48828bceb1932bf1ba08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:d6:ad:56:59:68:f3:ef:d6:27:ff:4f:a2:
1e:67:e0:67:42:59:a7:36:97:16:a8:64:71:64:d1:
5b:dc:a4:e2:2e:f9:66:e1:27:68:32:b8:b1:4f:ed:
ae:d5:e0:0d:04:09:f9:04:78:80:0b:b9:42:37:e7:
50:ec:94:95:ca:16:a1:96:c4:7c:d2:dd:e8:4c:49:
79:b5:28:38:79:37:c9:10:d0:5b:23:c1:fe:73:3f:
74:d5:6c:20:e1:17:45:9b:94:65:fe:e8:5f:f6:68:
e9:25:7c:0f:eb:26:f9:9e:17:88:27:a9:25:4b:3d:
a2:33:d2:a3:f4:94:9f:80:99:6e:5e:44:78:b4:be:
a3:b6:eb:04:f0:05:2e:3a:0e:f9:d2:17:7b:20:6a:
a9:02:99:18:2f:02:e9:9a:a5:1d:17:3d:96:38:f2:
c4:56:6e:ce:0d:e2:37:5a:06:0c:01:d4:e5:20:cb:
84:ad:3e:44:d0:4b:00:4a:7f:dc:9a:81:52:3a:be:
ba:f1:ae:48:b4:8f:e2:68:90:e0:49:76:e3:6e:87:
bb:1f:48:d9:c5:01:21:d4:01:53:ec:33:ea:f6:95:
f6:21:db:d4:bd:9a:24:8d:48:3a:28:01:76:81:2a:
6b:f4:ce:60:d7:fd:dc:01:1e:d8:44:8b:f7:38:ec:
35:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C5:56:A4:A1:D4:72:55:B2:E4:88:28:BC:EB:19:32:BF:1B:A0:8C
X509v3 Authority Key Identifier:
keyid:C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:73:c6:f4:ee:16:d2:5c:29:73:2c:58:d3:8c:c9:2a:29:30:
13:ff:fc:c3:15:54:3d:8f:35:4e:4c:cd:0e:c7:c6:fe:ce:eb:
87:3e:95:b8:97:f7:fd:95:2d:50:3c:03:72:dc:4e:52:ed:7a:
c7:80:19:83:73:bd:12:22:0d:b1:14:48:f0:a5:c4:5a:3d:43:
d2:02:81:db:23:15:94:a2:f1:ac:a1:7a:34:53:f5:01:d9:65:
63:3e:3e:ef:b2:2c:11:4c:b3:4c:a3:ed:26:ff:5a:95:cb:0a:
57:d8:06:22:7a:32:d0:b9:eb:d9:76:db:f5:3d:7a:f9:45:68:
9f:15:f3:fc:da:f4:c8:1f:f8:9e:bb:13:f3:49:8b:bb:26:e1:
aa:38:31:22:d8:17:9f:58:9f:0c:d2:21:f7:be:cb:87:55:60:
dd:cc:4b:ae:b0:9e:7c:9d:a1:71:fa:54:fe:a3:09:b5:50:2b:
e3:87:c2:b7:ce:55:c5:a8:cd:8c:55:61:46:da:ac:f2:c6:28:
47:5d:c8:c3:a7:d2:6e:bf:35:e1:30:b3:51:ce:0f:cf:06:39:
ef:ef:ea:9b:02:c5:ec:6b:5d:ad:03:bf:63:03:99:01:df:8e:
f9:6a:39:5c:8e:d9:c0:80:f1:f5:78:5d:35:99:b6:48:c2:2e:
15:b3:5a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:04 2025 by rpki-client