Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File: WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier: LsReXZbma/4AgvyxOtrYT2xfgp+9QrtgcQM4NI0FkBc=
Subject key identifier: 8A:E7:3A:F5:A2:57:43:EA:75:22:CA:16:BB:E1:2D:8E:73:A2:75:C2
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 019A4BF3142F8DA2EB682B6612AB2F3D258B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number: 1466
Signing time: Mon 03 Nov 2025 23:00:12 +0000
Manifest this update: Mon 03 Nov 2025 23:00:12 +0000
Manifest next update: Tue 04 Nov 2025 23:00:12 +0000
Files and hashes: 1: 0D01ZS927DpHThbFhFQ-_hFWxII.roa (hash: W9Yn7dxHb0Wn1s2QKfIJNqloaSt38wuy4qDOcPmUhfU=)
2: KZZiPS9ZeOzzb7Ol0GU3vdesmec.roa (hash: vFZw/xYafILFh9yVo7+bAnIUSWqHvFS5F2SG90lZkR0=)
3: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: hYn+rz1SoGcUrahkpoHhgmiJKo2NA4LdmZBnwmJu1iw=)
4: Xo3ldLDsIsZwGbJ3VdetX-GULwc.roa (hash: 81La9U37EUF9V2tnd1e+qs0cFhZ17T44E32Wc8vicAU=)
5: _WlES2eSPPAcdb99IjbgTsc5Xro.roa (hash: EOl3gK+o3EL4dSF6oUVZ6VSDAeYTaurQvmfArpGviOI=)
6: sBlJ4mJbmZ7QPuvf5LufFr5BMyU.roa (hash: i/AotRsBPnt5Nf8geU1CUYhpvrjw/c5dfcC4n774/K4=)
7: wcZznbX9VosJP0oVFOMR9sEtRTM.roa (hash: z/i6QSkFVh2Ed4/qc7yxip/ox8LwcslNmjsXdqJkdo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:f3:14:2f:8d:a2:eb:68:2b:66:12:ab:2f:3d:25:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: Nov 3 23:00:12 2025 GMT
Not After : Nov 4 23:00:12 2025 GMT
Subject: CN=8ae73af5a25743ea7522ca16bbe12d8e73a275c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:d3:d5:3c:fc:6a:b9:b0:89:51:c4:2b:0d:
98:36:ea:20:2e:ac:7e:89:78:f5:a0:a0:b3:3c:ee:
74:4b:15:7a:b0:9f:84:84:0e:93:df:f5:08:a3:53:
0c:f0:c0:11:d9:9f:b8:57:e1:17:4e:18:86:97:c8:
32:f5:c9:eb:2b:ae:d4:f6:d4:62:c5:e6:c4:a6:00:
65:75:ea:4b:1c:d0:e0:d8:70:70:80:53:1c:b3:eb:
2a:85:52:f0:98:df:6e:ff:80:c4:01:30:83:41:b4:
39:d9:67:f4:09:00:d8:96:f2:f9:89:56:5e:b1:1a:
53:cf:5a:ee:a2:9b:f1:a0:9e:5f:0e:3b:dc:3d:53:
83:13:bc:0b:b1:33:6b:1c:52:83:f4:01:dc:20:d1:
9d:26:26:5a:9e:a6:30:f9:9a:26:38:96:5e:5b:c9:
0b:94:b6:cc:b4:a2:c3:a7:58:5c:43:d6:e3:90:eb:
99:a4:2e:a6:8d:79:5c:43:41:7c:bd:4a:63:14:dc:
87:7e:6a:ef:6e:92:c9:26:cf:b9:4f:4d:af:2d:4f:
b8:b6:c7:48:62:a4:62:cb:b3:48:21:30:71:bb:42:
cf:4c:f2:f7:1b:d9:33:f3:8f:d4:2c:82:8c:65:59:
1b:f6:a6:c6:73:f3:4c:25:9c:f5:53:93:e3:f1:0b:
a8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E7:3A:F5:A2:57:43:EA:75:22:CA:16:BB:E1:2D:8E:73:A2:75:C2
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6f:6a:38:f4:45:81:53:52:a0:20:3a:c2:be:7d:fa:1e:d1:
14:bd:50:99:ed:93:0e:a0:b8:44:dc:79:a9:44:f7:b6:8a:c8:
a7:33:19:c0:da:13:ff:cf:10:fb:f1:be:4b:67:92:43:10:ba:
76:19:d0:fc:7b:b8:e9:bd:21:1f:80:ed:34:32:fa:83:dd:6a:
55:8f:96:9e:1a:81:50:cd:32:e1:c0:f3:29:94:d5:7e:28:44:
28:a6:07:2a:09:30:1b:05:0b:d0:3c:c5:5b:d5:6a:e5:09:39:
98:7c:44:19:37:b5:bc:74:8b:99:14:93:25:e5:2d:3a:e9:7a:
ce:49:3c:dc:cf:96:b2:45:89:ff:6b:78:a8:64:d9:12:80:69:
f0:20:96:a5:9b:e8:6c:de:63:02:b2:12:c6:2c:42:66:8a:e3:
d6:63:64:68:71:d8:3d:b3:bd:58:21:d0:ec:f6:52:41:6a:e9:
8d:70:d3:ba:9e:c1:c2:64:ae:98:b4:30:ee:9b:81:cf:8c:d7:
a6:7d:75:8a:0f:c3:7e:18:3d:89:e6:2d:ff:94:87:47:17:d0:
2f:d8:34:bd:0d:5c:a7:b7:47:d0:2f:fd:8b:9a:05:5c:9e:b6:
6e:da:80:1c:e2:2a:44:08:67:8e:d1:ef:66:c1:2f:1f:e6:56:
b1:65:d6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:02:39 2025 by rpki-client