Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
File: wlEKilJdybHsCxVg0JCmQmjULsQ.mft (raw, json)
Hash identifier: +g2rzEr+Yy+GyKMwJEg9LGVDF1Lnh9Za3v5zG89gm0M=
Subject key identifier: 78:AB:D2:B7:54:C8:3B:D1:DF:4B:32:41:D2:6A:DD:60:DE:37:B2:74
Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
Certificate issuer: /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Certificate serial: 019A711357A82D1C781D160FF1495C067D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
Manifest number: 16C9
Signing time: Tue 11 Nov 2025 04:01:24 +0000
Manifest this update: Tue 11 Nov 2025 04:01:24 +0000
Manifest next update: Wed 12 Nov 2025 04:01:24 +0000
Files and hashes: 1: FaPK4dABXX1JUG-DgodpiiYFyXk.roa (hash: 8EnGZIA4ScfpCaGufhHcnmIDRY1lMTTgXZqEJ9E7v2g=)
2: bYeYVYEdCXCzK3hGWezO0ZNHveg.roa (hash: UaiyZMeOYv/TRvUCkbZ9PcMP5ygVyQhx0p+DkQtZkYA=)
3: wlEKilJdybHsCxVg0JCmQmjULsQ.crl (hash: US7QlXtuJghb7t9VvHVYPUmxDPbJTp6UgXN73O72qwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:57:a8:2d:1c:78:1d:16:0f:f1:49:5c:06:7d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Validity
Not Before: Nov 11 04:01:24 2025 GMT
Not After : Nov 12 04:01:24 2025 GMT
Subject: CN=78abd2b754c83bd1df4b3241d26add60de37b274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:02:9b:3a:e7:36:cf:70:77:7b:7a:d5:7c:
42:bd:2d:cd:60:11:b1:2d:b1:c4:81:3f:18:6a:b6:
95:5c:53:a6:8d:9b:c3:f0:1b:03:00:60:40:ac:23:
5a:30:7e:50:41:4b:d3:ad:d4:a4:f3:91:3f:e5:ee:
8d:5f:27:7d:92:0a:bc:cd:95:01:ac:7c:70:e0:18:
65:73:3f:0c:4a:0e:cb:86:7e:b4:da:81:13:59:34:
85:60:9e:f9:e2:1c:90:8e:f0:41:b9:17:7b:39:cd:
87:75:15:cd:e1:00:6b:ed:f7:b1:db:d5:8a:ea:3d:
6f:d1:6c:02:29:b1:cf:2c:65:a6:78:e7:6a:e0:5c:
f9:7b:c8:c2:7b:e7:84:3a:07:21:84:39:b7:46:82:
c1:71:2e:da:15:81:75:c4:9e:0e:be:53:8c:8f:62:
4f:a3:ef:d2:77:f5:58:18:17:12:de:33:b0:70:c6:
44:d0:a1:86:ec:f2:ca:bb:34:ac:99:f8:44:f1:30:
e1:67:46:ae:eb:47:d4:aa:96:eb:66:6d:d1:3b:37:
12:cb:b0:d2:40:61:56:44:d4:83:25:ce:b8:fb:39:
a0:ad:6d:65:3d:69:6f:fe:38:11:a4:b4:22:74:8a:
71:7d:92:c5:f7:71:92:7e:9d:47:78:25:9e:6f:82:
af:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AB:D2:B7:54:C8:3B:D1:DF:4B:32:41:D2:6A:DD:60:DE:37:B2:74
X509v3 Authority Key Identifier:
keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d5:02:94:7c:52:d4:c4:9e:ef:67:df:4c:82:db:db:4d:df:
1e:fe:be:d0:fe:57:50:86:ff:77:0f:79:28:8e:76:c8:51:04:
93:92:a5:03:00:9e:da:f2:4e:46:42:73:15:07:68:b1:7b:93:
4d:ca:d8:54:ae:4d:ed:9c:6a:df:e0:57:96:04:e2:38:aa:26:
6e:d2:21:d3:e9:5e:76:73:0e:4e:53:d2:5b:35:c7:2a:11:19:
61:07:8c:43:28:46:bb:90:40:fb:1d:87:e8:96:02:ea:3c:7a:
74:d1:46:8c:21:00:8b:ec:7e:a0:63:e2:09:1b:df:54:d7:77:
b8:63:33:7f:c4:80:74:75:aa:7a:ff:ab:b5:2d:ee:b8:c3:a0:
8b:5a:7e:8f:0b:95:0b:68:10:aa:6b:47:a1:39:37:71:70:ee:
d7:31:e4:a8:5a:05:62:61:cf:cc:73:1c:4b:13:a4:48:f8:bf:
a1:7f:18:20:4f:70:bf:ad:bc:44:3e:09:b0:9d:8d:07:f9:dc:
34:65:24:f4:56:a8:00:b1:58:ab:36:ab:68:70:5c:79:bb:a4:
f6:a8:2c:c0:cf:c9:84:a6:4b:4f:c6:d7:eb:1c:a9:93:24:75:
f8:f8:d0:f9:b9:88:83:81:e5:0c:e7:af:30:64:04:b2:22:15:
2f:c0:26:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:20 2025 by rpki-client