Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
File: WxweBiQDm9HxqUbLUTyTOG-raxk.mft (raw, json)
Hash identifier: uwfotOAwEPRKUurPpQnq9oFT2w4/ZPzYE/nMZSiiIwo=
Subject key identifier: 41:34:08:E1:D9:28:2A:94:0F:D6:D1:8B:8B:55:DD:93:7B:72:65:1F
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 019A533EE5447C7506128AB3AFA86133C9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
Manifest number: 0D0F
Signing time: Wed 05 Nov 2025 09:00:21 +0000
Manifest this update: Wed 05 Nov 2025 09:00:21 +0000
Manifest next update: Thu 06 Nov 2025 09:00:21 +0000
Files and hashes: 1: J8g7cZ3te-XjH4vB99S63bY5jw8.roa (hash: kTqC/5LOxbM1zdbO1odgPNoINkirS3IzV43BF84XudQ=)
2: WxweBiQDm9HxqUbLUTyTOG-raxk.crl (hash: HwWkD6Ea4kC7j9a8HI5HaVz6z9ba/l26k6LlnFbQJoM=)
3: n6GsozsAIUsV5q_nwqboXGBIS0o.roa (hash: SV+wqJcEFOa4P82VjIfU8axnoITYl7V615IXuKpHvcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:e5:44:7c:75:06:12:8a:b3:af:a8:61:33:c9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Nov 5 09:00:21 2025 GMT
Not After : Nov 6 09:00:21 2025 GMT
Subject: CN=413408e1d9282a940fd6d18b8b55dd937b72651f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:60:b9:40:ca:91:d8:d5:ed:66:7e:b4:3c:
99:ad:8f:b3:91:7a:59:62:7c:9a:a4:11:ea:a2:3e:
d1:b1:fe:fc:6e:7a:e0:64:96:a5:5f:d5:b2:ae:6f:
12:ed:80:bf:9e:16:26:a5:c1:81:c0:88:a4:46:03:
58:ec:8a:dc:d4:51:41:77:05:02:15:a3:44:c3:3a:
64:fb:68:4a:e4:ac:57:3f:bd:70:f5:bf:e8:83:74:
a9:26:91:e2:95:31:8d:5c:27:78:11:df:90:5a:e5:
73:28:be:2a:00:fa:00:a5:ad:6c:a6:c8:1f:47:eb:
9d:2c:68:66:73:0e:7c:12:5e:15:98:a6:a3:1a:12:
85:0a:e7:02:c2:c1:b6:01:a4:68:22:23:d8:87:78:
29:39:33:44:f7:00:e7:fc:fe:62:03:86:b3:74:2b:
f0:ee:25:ac:2e:ef:06:ea:32:a4:1b:c0:28:8a:ce:
32:e6:a5:d8:04:76:53:46:0d:cf:c8:1f:44:48:30:
df:f5:93:ef:d7:b8:61:b3:b2:0b:7c:df:a7:b6:b4:
f1:c3:b9:bc:b3:99:37:06:7c:5c:61:7e:70:8a:8a:
61:fc:6e:f7:49:f5:43:b4:6e:73:eb:f3:96:2f:df:
88:d3:e2:fa:6d:93:f2:e2:41:79:55:a7:80:5c:9e:
29:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:34:08:E1:D9:28:2A:94:0F:D6:D1:8B:8B:55:DD:93:7B:72:65:1F
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a4:fc:9a:0a:09:a7:2b:50:5f:89:09:b8:31:ae:41:86:9c:
8f:46:d5:3b:f1:f5:e1:3c:46:ec:ef:8f:31:d0:3e:e0:fc:a3:
f1:10:a3:c8:c5:f8:7b:4b:02:a5:80:93:c7:f3:12:bc:05:72:
3d:e1:ad:c6:ce:d8:a5:bb:3b:de:9c:60:78:b1:1c:e7:48:28:
f8:9e:57:ba:04:92:c2:fc:cb:d1:45:8e:47:87:d9:27:2c:38:
52:02:b7:f8:bb:4e:9a:02:c6:0a:9f:44:8d:65:a0:2b:30:ea:
78:7f:fc:70:3d:6e:ef:b4:e4:b4:83:38:6a:69:d2:86:2a:1d:
2b:a2:0e:2d:a6:7f:91:c5:dc:5c:c6:51:37:ca:4d:a7:fc:04:
cb:1d:38:dc:3b:d1:90:02:e3:dc:94:6f:e3:32:7b:f3:46:15:
ef:f9:47:8f:34:e8:12:fe:33:4b:76:f1:5e:92:fd:3e:58:88:
20:e1:c1:86:cc:9c:7d:49:6b:10:0e:df:66:ca:6f:98:cb:d2:
f0:73:f1:24:fa:79:e8:94:c7:b3:65:ef:a9:9a:70:b8:4b:e1:
c9:05:d5:93:1f:c8:2d:89:cf:a0:24:a3:03:6d:ae:c0:3b:f4:
29:2a:9f:52:a7:23:9f:c3:f9:79:99:1c:57:f4:a8:69:16:7e:
2f:84:0b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:23:09 2025 by rpki-client