Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
File: wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft (raw, json)
Hash identifier: Fs1rlAgkocGLxZ9mCj/UcPKmE6ELP/daVMUUIWSKQvs=
Subject key identifier: C0:63:16:9B:15:8D:F5:B6:6B:78:FE:3F:ED:B9:AF:A1:E2:7E:A6:BA
Authority key identifier: C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC
Certificate issuer: /CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
Certificate serial: 019A7225E7B098A3A8360CC876BDB1729F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:17 +0000
Manifest this update: Tue 11 Nov 2025 09:01:17 +0000
Manifest next update: Wed 12 Nov 2025 09:01:17 +0000
Files and hashes: 1: BN13x-ZjA4mHaBlOmgwvor1JO1c.roa (hash: Uuj6BFZWiA+duiDnobx+mZ0HHXgVtqFptRYnRQ3IF9I=)
2: wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl (hash: On66GuccNzRm6TYvZ6n/rhBcY21zl1DsZusnx9jcIzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e7:b0:98:a3:a8:36:0c:c8:76:bd:b1:72:9f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
Validity
Not Before: Nov 11 09:01:17 2025 GMT
Not After : Nov 12 09:01:17 2025 GMT
Subject: CN=c063169b158df5b66b78fe3fedb9afa1e27ea6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e9:0a:fc:03:66:e7:96:07:48:01:8e:5f:ec:
37:b4:20:5a:6a:8e:06:f5:11:aa:b9:bb:b3:0f:39:
85:16:46:6f:b7:32:9d:fa:bf:54:27:e5:9c:f0:5f:
16:e7:d0:e3:0c:96:37:75:ff:30:f1:4b:c9:6a:78:
99:15:51:de:4f:1a:42:50:14:a4:68:d9:8d:78:39:
db:43:91:c9:b9:3c:81:3e:26:73:72:c9:5e:01:f5:
3f:b9:c3:b2:2a:ad:1c:47:e0:fe:dd:1a:67:51:6c:
7f:4a:f4:77:4f:04:9c:d4:7e:26:3d:f7:38:98:7f:
71:94:e6:59:53:71:6b:72:1d:78:8f:4a:ff:f0:0e:
49:f6:58:1e:71:a2:4c:7a:d5:16:22:ce:04:3f:9e:
1e:95:d2:c2:3f:7a:cb:1e:e1:d2:cf:6c:1a:0d:61:
ce:bc:26:9d:55:c9:3c:f3:4c:57:8a:4b:e7:37:33:
c1:ee:ae:62:34:3f:dc:4c:4f:27:69:e7:b1:17:4c:
a2:d2:5b:5a:fe:b7:7e:57:4e:87:cd:bd:83:58:d8:
b1:17:01:f2:02:79:9f:77:35:71:b6:65:bf:49:c2:
e5:ad:60:f0:9e:14:78:c6:ce:82:d8:be:d6:97:ef:
ab:24:02:33:16:37:70:bf:e5:9e:1d:b3:47:3c:e0:
1f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:63:16:9B:15:8D:F5:B6:6B:78:FE:3F:ED:B9:AF:A1:E2:7E:A6:BA
X509v3 Authority Key Identifier:
keyid:C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4e:39:b1:65:ab:01:bb:75:c2:d7:09:b1:22:0b:37:ea:ef:
4d:ca:ea:45:32:70:ed:d4:10:ee:48:8a:63:a4:a1:9c:45:66:
cc:08:72:5b:09:ff:ca:9b:19:0a:c9:7f:9e:08:0f:cb:c1:7b:
b4:22:b1:65:ca:52:21:f0:6f:56:a3:2b:85:ef:5a:76:93:fb:
31:24:33:a0:04:9d:e6:55:2b:09:b8:ec:80:50:80:de:90:2a:
36:16:2a:b4:18:38:54:a9:09:a9:57:85:30:52:66:d5:98:90:
fa:82:65:49:0e:8d:de:22:f4:6c:63:5d:20:d3:65:3e:d4:55:
63:59:14:34:0d:ac:84:49:2d:b0:7c:18:ae:0b:07:f5:05:17:
e5:15:a0:3c:77:d2:b1:ab:20:b9:09:c7:98:d2:75:9c:5c:23:
cb:48:96:52:7b:b5:17:c4:2e:0e:48:f4:56:78:a7:b5:28:ab:
88:d4:b1:8b:58:5f:f7:79:b9:8f:fd:35:d9:27:be:ed:20:32:
7b:a0:45:7c:87:15:d6:aa:67:d7:17:76:2f:fa:18:1f:f7:80:
aa:7e:9f:62:80:77:40:b6:fc:df:2b:ef:c5:ee:54:33:da:4a:
8a:e8:72:81:0c:e9:aa:34:86:9b:83:e5:36:62:61:90:b3:d8:
f8:8f:13:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:46 2025 by rpki-client