Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
File: wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft (raw, json)
Hash identifier: kiipwlyJKBQuLftJmRa4kXYcrmW9E/sVg66FqO1Jbmw=
Subject key identifier: 81:82:F5:3C:B9:87:1D:E0:AC:F8:39:F0:E8:67:6E:A3:5C:3C:44:E6
Authority key identifier: C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
Certificate issuer: /CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Certificate serial: 019A5307E2083FBD6E591F721A3D1780D254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
Manifest number: A9
Signing time: Wed 05 Nov 2025 08:00:16 +0000
Manifest this update: Wed 05 Nov 2025 08:00:16 +0000
Manifest next update: Thu 06 Nov 2025 08:00:16 +0000
Files and hashes: 1: HZihVFJ3txZ3OW6s1qo-blP1Efk.roa (hash: N+ZzWONseQF5HNODvYH9OIzGzY5Yo+h2JcqNwXkMfQE=)
2: wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl (hash: jxZhMVXIafB5R2fL/v5B0rrDF0md36GJAhiMivIw+T8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:e2:08:3f:bd:6e:59:1f:72:1a:3d:17:80:d2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Validity
Not Before: Nov 5 08:00:16 2025 GMT
Not After : Nov 6 08:00:16 2025 GMT
Subject: CN=8182f53cb9871de0acf839f0e8676ea35c3c44e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8e:80:b5:e1:dc:e9:38:69:95:d3:e1:c1:c9:
18:ca:4a:2c:dd:66:e1:46:04:9e:7b:6c:fb:11:ec:
cb:b2:3f:4f:09:60:06:74:56:2e:99:96:77:3f:f2:
d8:9f:fd:85:a1:8e:00:b7:46:8b:b3:94:2f:54:cb:
3d:a5:98:ea:26:c1:d0:b6:da:c3:f3:df:ac:45:46:
45:ef:89:3f:d2:74:45:22:2f:ab:61:c7:65:c4:11:
ee:5d:e4:0b:77:c4:b0:5b:de:24:ce:62:93:39:ce:
38:ff:52:e2:a0:67:d7:65:58:bd:77:e5:46:14:8c:
85:30:35:e0:c6:8d:cb:99:3c:d4:e7:a2:71:5f:e6:
57:33:81:68:c5:12:65:9a:39:e1:89:48:69:a7:2d:
04:1f:cc:35:3d:66:9d:5d:87:04:b9:bb:0a:d7:b5:
0b:3d:e5:13:77:71:eb:6f:aa:68:3a:b8:17:4c:58:
e9:ab:a5:a7:9c:e2:42:3d:bf:1d:d7:bb:78:50:58:
50:4e:9c:9e:d1:cf:0b:99:da:f5:a6:2a:79:a7:9c:
25:f6:b7:08:a0:e1:cc:20:de:79:b9:c1:0b:1a:91:
e3:a2:05:50:99:ad:1d:3a:f3:7d:80:3c:d8:d1:3c:
fb:63:4c:d7:66:d7:2c:3a:9e:1b:c6:79:a8:94:23:
77:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:82:F5:3C:B9:87:1D:E0:AC:F8:39:F0:E8:67:6E:A3:5C:3C:44:E6
X509v3 Authority Key Identifier:
keyid:C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:88:17:69:b4:f8:d6:10:86:d2:89:95:1a:d4:e3:1f:be:08:
83:98:44:d4:df:83:a8:bf:e1:a7:07:7f:a3:19:c7:d5:56:4c:
9f:2e:5f:94:0d:48:e4:7a:96:e6:20:78:fc:a0:e4:96:a6:aa:
b0:9f:ab:1c:a9:25:37:70:2c:c3:8a:dc:60:d7:a9:51:37:ce:
7f:12:93:31:b3:ef:4b:ee:d8:6f:7e:3b:f4:46:1d:b0:6b:92:
7f:c2:06:99:20:2a:fa:ba:40:4e:9f:7f:9c:cd:91:5b:90:79:
32:9d:39:e5:94:96:ef:98:76:da:d9:5b:70:50:26:66:d2:9a:
1d:06:85:0a:49:24:85:1b:95:1a:04:21:84:70:01:eb:dc:fa:
83:88:04:79:2b:60:f9:07:09:ca:40:05:a5:1e:dc:59:9e:bd:
f0:60:31:e9:e0:d2:35:3e:aa:50:55:fb:b3:7c:a0:72:39:09:
24:13:97:fe:ab:ad:ac:0b:eb:43:b3:14:79:37:b2:e1:77:ff:
eb:d2:55:98:1c:2b:69:49:01:37:bc:00:ea:dd:cf:5a:b2:97:
66:15:28:2c:ee:e6:c0:39:95:f6:03:88:3c:25:49:a0:a9:49:
45:0f:55:39:69:0c:41:95:24:b1:4a:f2:d3:a4:90:d3:b1:7c:
d7:e7:0a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:30:27 2025 by rpki-client