Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
File: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json)
Hash identifier: F5xKXlveLxU4uTsFbpFa99EYABmJmSMv8BMBNUQN38Q=
Subject key identifier: 10:48:E9:00:C1:63:DB:07:EB:9C:A6:34:15:7E:93:8E:0A:49:CC:C8
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Certificate issuer: /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial: 019A4D3CF179804DD8A58C62CC523B17A96B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 05:00:30 +0000
Manifest this update: Tue 04 Nov 2025 05:00:30 +0000
Manifest next update: Wed 05 Nov 2025 05:00:30 +0000
Files and hashes: 1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: 9DhuU8/yGoY5uQNUDoDpvd6K9A0zUbVT+a59BX8Z39o=)
2: s9vftAOB-g2w5mpIAbtd2ux_YeM.roa (hash: vWHWtXPoZqDrxtoN/353NMnYSKtaPj8wKrdcVBwN80A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f1:79:80:4d:d8:a5:8c:62:cc:52:3b:17:a9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Validity
Not Before: Nov 4 05:00:30 2025 GMT
Not After : Nov 5 05:00:30 2025 GMT
Subject: CN=1048e900c163db07eb9ca634157e938e0a49ccc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:b1:9f:23:55:5f:ba:68:83:94:53:e6:85:
28:3f:2d:04:c3:3f:7a:e6:a2:a0:86:2a:15:b9:e4:
41:44:7f:1c:48:9d:78:40:cc:fa:9b:6f:f8:ba:b1:
80:89:6c:dc:75:5d:53:45:bb:2a:78:88:42:e8:6d:
3d:e0:4a:71:c1:83:47:e2:11:d1:25:b3:bd:f0:e9:
cf:e2:71:47:3d:f2:5a:e7:e9:cb:75:bf:1c:cb:8d:
68:48:fc:25:e5:a9:b8:33:49:4c:9b:cd:80:f9:81:
82:71:1a:41:50:8c:5b:4e:88:90:d6:06:a5:a7:ac:
22:a6:6a:f2:29:e0:53:fb:e6:35:95:01:80:ec:93:
ff:e8:1f:90:1e:af:9e:57:c2:61:00:b8:f8:3c:ef:
e3:11:a7:23:94:a1:7b:a7:2d:2e:15:7a:e2:28:1e:
70:f9:33:91:39:ce:f6:87:31:d8:3e:82:17:90:a3:
19:de:3c:66:41:2d:5e:a8:73:76:08:37:c2:d0:c8:
49:a3:cf:5a:7b:ea:82:5e:5f:94:92:34:92:8f:06:
a8:0b:62:7c:47:56:19:7e:89:0f:03:fd:da:fe:d1:
d1:13:44:2e:bc:20:8b:40:48:e3:f6:be:ef:c7:af:
04:38:9b:b8:7f:9d:3b:0f:90:27:cf:e2:28:21:0c:
e2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:48:E9:00:C1:63:DB:07:EB:9C:A6:34:15:7E:93:8E:0A:49:CC:C8
X509v3 Authority Key Identifier:
keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:71:7d:37:44:3d:88:8e:54:92:64:d0:8c:18:c9:24:2b:94:
b0:89:e2:f8:df:0d:8d:58:be:f3:c8:25:04:91:3e:ce:e4:1d:
f2:ce:67:52:70:2a:51:a6:f5:b8:a7:c3:5b:57:75:56:92:86:
45:6d:27:cf:45:a1:ad:59:49:ff:55:1f:f9:e6:5a:eb:d0:aa:
72:a2:90:21:0c:2a:ef:f4:c1:60:0e:02:d3:74:9c:c8:3f:32:
a8:b4:10:da:2b:47:9e:d2:29:51:70:c4:c4:f8:61:cc:31:ae:
0f:60:71:c7:d3:86:0d:cc:d7:6b:61:5f:74:8a:a8:3b:74:c1:
ed:3d:9c:35:72:1f:17:10:85:b2:52:a9:20:49:46:bf:03:dc:
27:39:07:b4:bf:bf:df:6f:4c:e7:a3:f4:94:a1:21:6e:dc:60:
42:26:cd:33:4c:79:af:53:b5:2c:d4:d0:f2:e4:c4:66:8e:3d:
8c:56:75:bc:91:84:ce:2f:3e:a6:bf:ed:72:7d:99:7b:b1:7e:
df:bd:72:68:ba:ee:ce:73:37:0b:6f:35:05:67:95:a3:f9:65:
45:1c:c0:9e:78:ec:23:3c:ec:97:f8:ba:1b:b7:03:0e:d4:b3:
bb:31:16:3e:8c:b5:49:b2:e6:d0:5e:fc:d3:69:86:21:22:15:
d0:d0:f5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:03 2025 by rpki-client