Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
File: wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft (raw, json)
Hash identifier: OZIEb8K/cOyeU6wG8ODe6tIjTWfEyLTpL+L1h8ZWqQI=
Subject key identifier: CB:92:93:D8:1F:E7:E4:57:E3:F4:E9:A7:83:D8:09:B9:6D:66:CB:89
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 019A4D73ACB1BD61CF1276C0AD1C563A5C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
Manifest number: 1717
Signing time: Tue 04 Nov 2025 06:00:17 +0000
Manifest this update: Tue 04 Nov 2025 06:00:17 +0000
Manifest next update: Wed 05 Nov 2025 06:00:17 +0000
Files and hashes: 1: DIDvdbb3GKHM4R0fThp87ONTKIg.roa (hash: PpLadHjUjIbh3z8TdW7x9p2zKoB60tTFsLSNrfKJGP0=)
2: NiiYntce0l2g8rM0crSiQd9ju9Q.roa (hash: dXNA4zFEqgeMGWVbP7xCDHL9Yv22/YkYEyRq1Xgq0Qk=)
3: TKLzQ3aUn5r9wRqdWWY_X3np5Nw.roa (hash: FHEE5b54dYwOgG8q4mFeJQWJCBG47+yi4U4T7p61+TU=)
4: UwTNWro9evVq9A2tmjUi9EC7e1U.roa (hash: blbaLMvxLnOeS1jYks60LVjVa40KZBXbFkM1K6NYTsw=)
5: YD46-wu1gX9Rfc3-h0IJxr5M_6I.roa (hash: eydJEhyuH7mmIcl4Z67qIv5vGkaTb2dD7M7gIFncDbg=)
6: awX-yLV9QhTtYIRH8dzM3NZ-YyE.roa (hash: cUBeWKNk+8N9DHilcnVglMXRUVzQzFqcjW7BKF+It/4=)
7: hXz87hx_B-hbL3xb1XWOpeq_ghU.roa (hash: qgegZ0Q4MVtx4Pfhi+QnSP0PfWput13BxQSPM+9zyGM=)
8: nGG-OUODAxwLxi6jNHbpt8RGNb8.roa (hash: CE5MyGR9lb1V5N4ocRK2ocMWINjBM6Y8ecSTUiTujPU=)
9: wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl (hash: 9PqA2picHDJaqJ7fHKSa0i+ovys8UG5a3jvmImKYbPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ac:b1:bd:61:cf:12:76:c0:ad:1c:56:3a:5c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Nov 4 06:00:17 2025 GMT
Not After : Nov 5 06:00:17 2025 GMT
Subject: CN=cb9293d81fe7e457e3f4e9a783d809b96d66cb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:52:ae:ac:10:67:37:1d:51:96:d7:ad:d4:
12:d1:c0:e7:d7:67:ec:4d:60:16:bd:bc:bb:9a:c6:
b3:39:00:8f:08:ef:a4:49:59:17:1d:b4:7f:f3:0b:
a6:33:51:b5:22:83:07:66:70:ba:ab:96:46:aa:46:
ec:95:2b:3a:20:cd:a3:74:50:33:ae:82:69:46:63:
7b:67:fe:2a:75:1c:14:75:3f:2c:6e:d3:69:51:a8:
76:5c:79:cc:ab:a0:55:c0:9a:23:b0:d5:0e:84:cb:
43:af:26:7b:ed:d2:6c:10:8d:39:ff:04:17:40:58:
a3:d6:ae:ef:4c:e0:ff:41:5e:2f:fd:f6:b4:a1:9a:
dc:0b:10:5d:5c:e1:47:94:fe:70:ed:54:22:48:8f:
ef:a5:de:c7:0e:98:00:27:57:5c:b8:7b:50:8e:31:
35:0a:e2:75:e9:d1:56:e0:05:d4:10:7d:27:8f:8f:
65:47:85:54:b5:0d:15:f4:7f:97:7c:f3:47:cc:6c:
0a:10:e3:d9:15:da:41:45:0b:92:b1:a5:52:c3:3e:
01:92:f1:29:5a:11:66:55:5c:8b:7f:86:ed:03:f1:
f8:e1:24:73:33:56:b6:7d:8f:fb:f7:e2:e4:1b:e0:
47:d1:be:fc:f0:b6:f6:67:3a:15:bc:01:cf:95:b3:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:92:93:D8:1F:E7:E4:57:E3:F4:E9:A7:83:D8:09:B9:6D:66:CB:89
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c3:b0:99:9b:33:c4:d6:82:b6:51:14:54:ce:8b:0c:6a:5e:
2f:1b:2a:e6:76:71:a8:fd:6a:f0:01:f1:fb:e2:89:5a:9b:8e:
92:1b:84:32:c5:90:47:06:dd:22:8c:2a:ad:7d:84:eb:4e:df:
55:8b:23:f6:4f:12:5e:84:ba:f7:2c:bd:bd:be:c5:22:a4:c7:
3b:56:8e:b0:8b:bf:7d:10:67:c0:87:84:75:cf:52:15:43:d2:
23:e3:41:8b:db:3e:61:79:4b:a1:7c:d0:58:6b:4a:59:6d:0e:
3c:13:2d:e6:74:97:f7:0e:20:c6:19:b5:9a:0d:6d:18:42:43:
55:6a:ad:15:6a:dc:2e:84:c5:7e:5b:bd:8b:83:5d:01:14:93:
b3:ad:32:ff:d9:3f:d0:42:ed:48:da:68:23:e5:b2:3c:e9:bc:
a6:42:00:6b:2b:7f:9a:2c:6e:42:28:53:89:da:ec:b5:b3:c1:
cf:a1:b8:08:40:2a:69:dd:37:5f:49:50:b4:4d:2d:45:0d:0f:
5c:de:0d:9c:38:94:6e:c5:49:16:fb:eb:6e:58:2c:b8:13:ea:
b1:9a:ef:64:24:e9:4f:02:42:52:7d:42:86:3a:d6:5a:85:ae:
2a:ae:b1:9c:b0:eb:25:63:ce:7a:d5:43:fb:66:a7:13:11:df:
05:47:de:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:28 2025 by rpki-client