Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
File: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft (raw, json)
Hash identifier: qQrfxt9MhNHb+l3qJHWMlWcUNXP6fu9kKbKIp99mwK4=
Subject key identifier: E8:65:D0:43:E1:CE:61:17:31:BE:41:A7:5E:E8:AB:F9:D9:5A:47:FB
Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
Certificate issuer: /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Certificate serial: 019A4C97DE17439AA0939FBFAF92B430D2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
Manifest number: 0655
Signing time: Tue 04 Nov 2025 02:00:12 +0000
Manifest this update: Tue 04 Nov 2025 02:00:12 +0000
Manifest next update: Wed 05 Nov 2025 02:00:12 +0000
Files and hashes: 1: g5yuydF4Poe4QOJQ8dgMQtQLFlA.roa (hash: ztDU3PoyCa7wU7AjEFCTcvzcTrmXKsTMTZ/tLyZjIE8=)
2: nPjV6lYXInJfXl86tbhvs9WXUa4.roa (hash: asKBhySwit3PBxbedsUA8HTRnekoYKrc5tk7Wn5QFGc=)
3: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl (hash: Ie0GLGKz9jtaFutEmkDEPcts81JXHl4X7tC287tFcTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:de:17:43:9a:a0:93:9f:bf:af:92:b4:30:d2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Validity
Not Before: Nov 4 02:00:12 2025 GMT
Not After : Nov 5 02:00:12 2025 GMT
Subject: CN=e865d043e1ce611731be41a75ee8abf9d95a47fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:55:b6:bc:da:6d:c5:99:3a:c2:a8:51:57:e0:
a1:e4:7d:1d:e9:9d:7f:8a:23:3f:db:cc:8c:89:ad:
77:7e:b5:62:36:41:4d:d5:b6:42:5f:06:1a:58:f5:
e6:28:fd:fe:6d:7b:d3:70:c9:45:04:db:97:f6:65:
55:42:e0:fa:38:bd:db:1d:c2:c4:f0:d9:75:96:0a:
07:d1:ac:0f:3b:02:28:3a:38:33:4f:bb:62:81:9c:
c0:0b:e8:8f:c3:7d:64:8b:b6:c5:bf:13:f5:92:79:
5a:be:59:b7:0d:55:55:7e:f7:60:f4:7a:04:98:bb:
37:6b:29:78:c4:a7:ed:37:b6:f4:81:f0:36:85:65:
91:eb:6e:06:1f:3b:81:57:f7:55:52:3a:68:7f:f3:
1c:ec:89:76:af:77:ad:3e:f8:f0:f0:e3:6a:f5:dd:
f2:9b:b0:a5:cb:c5:ad:b6:af:7b:57:dd:9c:55:65:
e2:71:49:dc:86:10:48:01:fa:95:12:af:be:99:92:
31:67:4b:80:88:f2:a1:3d:d9:91:b4:5a:28:75:8a:
06:d5:80:11:91:9b:a1:32:0a:87:ff:96:ef:49:d0:
ee:6a:3c:9f:12:9d:8e:a5:77:f7:e6:e3:ab:84:1f:
7e:08:dd:26:5c:4d:ca:68:af:54:cb:f7:a2:0d:13:
57:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:65:D0:43:E1:CE:61:17:31:BE:41:A7:5E:E8:AB:F9:D9:5A:47:FB
X509v3 Authority Key Identifier:
keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:cd:81:75:c7:6f:17:97:b3:cc:ac:ef:0e:e9:ae:fd:c2:f4:
f9:5b:58:7d:f1:17:4a:8d:5f:33:d9:80:0a:bd:4b:63:3c:3d:
bf:d5:fd:8e:82:74:bf:80:5c:46:64:40:6c:8a:eb:62:c3:77:
af:eb:cc:67:b1:0a:a4:45:20:b6:b8:49:19:5d:e3:ef:0b:cf:
a6:b8:ae:98:b1:45:e6:02:73:69:38:4c:4f:36:bd:04:f3:5d:
68:47:0b:78:cf:20:f8:bb:07:dc:dc:77:f2:5a:10:43:63:2f:
27:8c:91:3b:69:6e:57:8c:9b:18:17:dc:8b:85:eb:8f:cd:8b:
18:ac:ab:30:0d:c2:82:c8:dd:38:c2:2b:76:05:39:d8:ad:c4:
c5:61:59:55:f9:77:91:19:b1:22:d6:e2:bb:84:2c:53:07:1c:
5b:9c:0a:97:1e:3b:cf:06:3f:64:43:97:02:b0:9f:89:0b:5d:
02:be:b3:e5:9e:d7:2b:cd:91:1c:67:80:78:fb:9c:83:22:35:
03:8d:d5:4a:5b:77:6b:07:50:2a:ae:b6:e6:10:e4:65:d5:4e:
55:0a:2a:b3:b9:ca:b9:62:63:57:1b:e9:5c:6a:73:a6:74:1d:
db:f5:da:25:19:a3:00:97:45:1d:4e:67:cb:63:d9:79:58:f1:
a7:04:57:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:48 2025 by rpki-client