Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
File: wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft (raw, json)
Hash identifier: j++TW5LlSW5xOGRQNHk8JuAmJhNihak94CMTi8J3a0A=
Subject key identifier: 11:BE:84:CC:81:BF:45:52:87:AC:92:A1:3A:1E:40:0D:23:0F:15:8B
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019A4D744055607A09FE7C16366CE16C6CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
Manifest number: 0BA9
Signing time: Tue 04 Nov 2025 06:00:55 +0000
Manifest this update: Tue 04 Nov 2025 06:00:55 +0000
Manifest next update: Wed 05 Nov 2025 06:00:55 +0000
Files and hashes: 1: ICJFcNTwvBoTxR73h6RFC09rjcE.roa (hash: xTLqPPxBhdwsAxy9x/9cuJE08DZBHQ351Kx0d+iQE1E=)
2: MyqYBnhuQWC6jBgr6LglN2EYGOA.roa (hash: Di9sEIDs+wFzdjcM3rM7YUWhcIoWp5vrG4QyfmG810k=)
3: XrIe3RxS0PfS1KQwk38a9UzdLbU.roa (hash: TAdXiNpnMI8M4W6FRb8OCRV5yipTVzRnXpEPH/f9GFs=)
4: eM9eBjal4_y1POkPGbCQnwiZoSY.roa (hash: K0YjjeAMEyPylhZxZo/IupUyAhS45lKcJpo4UDpKlMI=)
5: sxZhzxshG4iLVLbCSoDb6rUQtZY.roa (hash: R1ZlZu84C6XGwKU+59ocGLP/4NsYVwyR2vdR/42i2m0=)
6: te98bJGGUvJI2dvVEFniebRE2-Q.roa (hash: YFZNKLPi4G/NTA6BGaRrsOjmLUpnVxIljNwYkPRZo1o=)
7: vMfdW02jbLqHp-27brKBsBhbgHY.roa (hash: oHK3CDonAtcVu8dAAlZMcFQZnOMNxTDFalDW/2pvfts=)
8: wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl (hash: PubA9fMOy091cfzoGtjudgqbOnxVYZzKu0/K2NxRcqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:40:55:60:7a:09:fe:7c:16:36:6c:e1:6c:6c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Nov 4 06:00:55 2025 GMT
Not After : Nov 5 06:00:55 2025 GMT
Subject: CN=11be84cc81bf455287ac92a13a1e400d230f158b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:f9:5a:88:52:77:20:56:57:bd:81:7f:03:
22:16:51:cf:ea:fb:88:0c:b6:5f:e8:f4:08:8a:4c:
fe:86:7f:61:03:64:7e:df:12:f3:26:a2:b6:79:76:
95:2d:60:7f:f8:8e:1c:f0:86:8b:c1:b3:af:b0:bf:
58:46:02:08:a0:60:32:85:06:2a:e5:c6:51:9d:9e:
21:d1:21:7b:b5:12:49:a1:3b:31:a8:6d:73:8a:8b:
6d:38:fc:6b:84:12:04:f7:f7:d6:de:61:2a:69:c8:
b6:b4:b4:a6:0d:f5:0a:f3:7c:f2:30:e3:4d:e1:69:
31:25:57:e1:21:68:7c:01:98:3c:ee:95:e5:0f:49:
5f:b4:db:2a:65:78:ab:5c:6d:73:9d:05:0b:c2:c2:
97:05:bd:96:d3:8b:3c:77:8b:94:d1:c2:c4:56:af:
81:b8:85:29:61:5b:be:87:c3:00:f8:d3:7b:df:72:
d8:f6:38:80:d7:2c:b0:7a:22:f5:6f:37:d9:db:d4:
62:09:cc:00:d9:52:49:71:f1:14:8b:a5:b5:cf:e0:
13:a8:31:77:e1:2b:d2:a9:2e:77:db:f2:c0:5b:0e:
37:90:7f:75:6b:4f:b9:56:5c:6d:c9:cb:a8:a5:35:
0f:77:55:ce:41:fc:bf:8e:5d:22:cb:b5:34:e7:c6:
17:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BE:84:CC:81:BF:45:52:87:AC:92:A1:3A:1E:40:0D:23:0F:15:8B
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8a:03:7c:18:50:0c:09:44:4c:b3:fa:fb:dd:c8:0d:5e:56:
3a:3c:2d:6d:e4:6d:fd:a7:4c:86:46:d7:35:02:b0:84:b3:3a:
cb:ff:83:8f:f8:07:64:03:89:89:21:81:35:34:3c:8e:f6:ba:
22:17:59:6e:91:c7:0c:e0:7f:63:96:c4:7d:41:8d:04:4d:2f:
46:15:26:ec:fb:88:c0:11:50:98:e3:6b:d9:3e:ab:64:c5:81:
4e:68:8e:50:ca:0b:78:8a:06:85:e5:d5:66:89:3a:20:30:03:
1f:48:bc:01:d6:a0:77:d9:cd:fa:de:d7:6d:e2:ac:2a:6f:f9:
7c:13:6e:1b:b0:14:68:cc:5d:8c:ec:a4:c3:b4:27:27:58:84:
5c:7b:78:1c:21:f4:5f:93:1b:94:4b:e0:67:ed:e7:39:20:9c:
88:1a:0d:65:23:a4:3a:0f:f3:50:14:98:b7:58:17:08:99:b1:
ae:31:93:7e:fd:9d:93:ad:3f:d1:51:8c:99:2e:4b:34:ef:4e:
c5:07:5e:02:27:88:8b:ac:4c:0e:49:42:a4:09:9f:7a:e4:c3:
ac:f7:60:b9:dd:56:9c:9e:35:5c:6b:2a:f7:47:32:a3:cc:b7:
a5:75:17:e9:74:69:76:b4:b9:10:7b:cf:43:b8:71:f1:7a:00:
2e:e9:91:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:34 2025 by rpki-client