Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File: wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier: OZ3xJYGbiMM8ggEMwXNi8HxfJbm2lUMNA1X9hnMRM2g=
Subject key identifier: 5F:73:1F:8D:DC:56:DE:1E:66:37:C5:9D:BA:7C:4B:B4:2F:C7:75:A6
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer: /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial: 019A53ACBF426ED82DF93296BB11A524ECEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number: 052D
Signing time: Wed 05 Nov 2025 11:00:21 +0000
Manifest this update: Wed 05 Nov 2025 11:00:21 +0000
Manifest next update: Thu 06 Nov 2025 11:00:21 +0000
Files and hashes: 1: jQ35y5JqdtG9WdmH02jLEjnZC4E.roa (hash: FipHH6QD7PJQoRtOLX5VjgWSjY2BOLQCjuClzQsUWi8=)
2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: HLsS5uvQCGJnZXgp3bZt90ESD2/WanRTkVkEwXnEndg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:bf:42:6e:d8:2d:f9:32:96:bb:11:a5:24:ec:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Validity
Not Before: Nov 5 11:00:21 2025 GMT
Not After : Nov 6 11:00:21 2025 GMT
Subject: CN=5f731f8ddc56de1e6637c59dba7c4bb42fc775a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:69:f7:86:93:c3:ec:a7:17:cd:ae:6d:2b:
bd:a5:d0:c1:37:6c:90:ea:bf:90:3e:3c:d2:fa:69:
5d:46:78:eb:6c:7e:4c:30:1d:c9:81:0d:3f:bc:f4:
f7:f9:4d:a2:88:db:09:c4:a2:f5:72:2e:2d:24:6d:
d4:66:4d:0d:7f:cd:d4:90:cf:11:89:25:b7:1d:c3:
21:aa:73:c9:8f:78:e8:37:52:c7:9b:11:24:7c:33:
83:32:e3:19:8d:cc:b0:fb:c7:72:ff:5c:f5:cd:67:
52:a4:38:00:b0:f6:cd:8c:bc:80:a5:d7:a2:11:94:
98:d1:61:fc:3a:37:7b:b1:03:72:b4:6f:00:d2:a4:
36:b0:3c:d3:ac:2f:ce:4d:2c:bc:0a:52:c6:0f:f4:
42:f0:06:0c:d8:e9:aa:cd:13:02:49:18:b7:e6:1f:
39:e5:5c:df:b4:80:c9:de:f5:90:83:12:87:5e:68:
61:e4:5d:31:f6:de:ff:00:aa:c8:70:c1:bf:f9:8d:
4e:c0:6b:f4:d4:88:3a:37:1d:f6:16:11:d3:ec:5f:
04:21:57:7f:b5:8d:30:f4:96:82:ec:a1:bf:11:ef:
1e:e0:77:a6:27:a2:e1:44:dd:17:e2:7d:c3:ec:04:
1b:7c:b2:28:fc:d3:09:f0:98:fc:6d:85:2c:24:67:
67:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:73:1F:8D:DC:56:DE:1E:66:37:C5:9D:BA:7C:4B:B4:2F:C7:75:A6
X509v3 Authority Key Identifier:
keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b5:f9:1a:a2:e7:e3:af:b1:59:dd:ff:65:3b:f4:a9:6a:f7:
d8:61:32:d2:f8:64:19:73:ed:47:2b:12:9a:45:38:c2:13:f8:
6d:99:84:27:3e:c4:c0:f2:4c:cd:2f:62:35:65:f7:f0:5e:7c:
f8:13:79:f9:53:a5:c3:8a:22:18:22:14:1b:11:74:58:50:ea:
6b:cc:b5:68:74:36:86:c7:29:8a:7c:fc:1f:5c:db:46:41:dd:
09:9b:16:28:23:63:c1:ab:db:b5:f8:4a:d3:6c:29:e7:b6:91:
0e:14:4f:53:4f:d7:62:18:09:f8:c8:b4:94:6e:8f:3f:91:3b:
1d:b8:37:8d:d2:28:87:75:af:d0:9b:ef:05:02:06:9d:c9:01:
ce:30:8c:0a:8f:08:f6:8c:08:69:b6:c8:14:12:b0:2d:a9:21:
ce:ae:3d:74:e5:07:b4:49:08:a0:18:cb:bb:c7:e7:ee:11:b4:
c2:81:d6:c7:87:c7:96:ec:53:fc:a3:4a:95:86:91:a3:1e:58:
a2:4e:19:d3:d8:77:0e:12:88:ce:55:c6:44:13:59:1c:da:f1:
2f:2a:c8:44:2f:40:eb:ec:d2:fe:08:0a:5d:80:d7:10:17:c8:
3e:52:97:47:0d:e3:79:24:60:ed:65:14:25:16:fb:e1:eb:3a:
6a:fe:50:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:09:19 2025 by rpki-client