Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
File: WqWNXycSzMAES1nvp8vD6Yxfwlw.mft (raw, json)
Hash identifier: F4ctOlVc/sWmFmr6Cu/Y+LndPvPtJF2vzoqLvIWAaJs=
Subject key identifier: E7:7E:46:A1:27:D3:76:14:69:E1:66:15:E3:62:C5:9E:14:BD:40:DA
Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
Certificate issuer: /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Certificate serial: 019A73A769D5C02BDF51446DD1147D453119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
Manifest number: 0A36
Signing time: Tue 11 Nov 2025 16:02:22 +0000
Manifest this update: Tue 11 Nov 2025 16:02:22 +0000
Manifest next update: Wed 12 Nov 2025 16:02:22 +0000
Files and hashes: 1: OXwNzP8LjbH6TWcdoNaukflgQIw.roa (hash: 7FOkQ2B0o6NyuacIE5IJomlXcGtJ1C+uqMpIt2z5/74=)
2: WqWNXycSzMAES1nvp8vD6Yxfwlw.crl (hash: ZjKnSyyUsF7ZLBq+jJgCX7m5yqTZbxalZKJ5fhlyMK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a7:69:d5:c0:2b:df:51:44:6d:d1:14:7d:45:31:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Validity
Not Before: Nov 11 16:02:22 2025 GMT
Not After : Nov 12 16:02:22 2025 GMT
Subject: CN=e77e46a127d3761469e16615e362c59e14bd40da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:ad:23:64:a0:4f:b5:31:e7:f6:10:6b:fd:
9a:a6:33:61:c6:0c:85:18:a8:b8:f3:ef:67:26:f7:
71:88:43:93:b3:17:41:f5:bc:d7:14:b7:31:d3:18:
c9:0c:9d:58:25:ee:55:f4:24:7a:cf:07:90:4a:22:
8f:86:fe:41:73:29:44:90:ca:5a:58:a9:54:a9:2f:
c3:a6:36:70:da:2b:0f:3d:82:2b:a0:38:a3:05:b5:
cc:6a:91:18:07:a6:83:50:fc:73:8b:b3:25:3d:99:
37:ee:54:89:85:21:2f:1d:ab:23:e8:dd:8a:e9:f5:
bf:ca:0c:2d:b8:51:78:3e:ca:3a:ad:20:44:4f:a8:
40:3e:83:10:9c:34:35:81:23:90:ac:87:2b:17:63:
ac:7b:92:e4:45:6c:a6:4b:a5:38:e0:f1:79:58:a4:
35:2c:1d:b1:be:36:a6:9a:40:22:df:32:f3:67:41:
a8:b9:cc:c7:fd:77:fc:47:e9:30:8b:3b:cb:6b:70:
9d:59:f8:08:66:3a:55:f7:6a:e9:48:cd:51:b6:8f:
98:c7:c5:0d:e6:73:ca:4e:11:75:55:83:58:24:14:
71:7c:3a:c0:bb:f0:47:35:f2:a3:25:6e:fd:93:cf:
a3:37:76:27:5e:5a:d9:07:38:4d:d6:93:f9:3b:54:
c9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7E:46:A1:27:D3:76:14:69:E1:66:15:E3:62:C5:9E:14:BD:40:DA
X509v3 Authority Key Identifier:
keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f3:a6:de:8c:46:b1:97:2f:3c:fb:32:53:bd:e2:1d:78:2e:
54:55:91:06:b3:4a:86:f0:d6:f4:cd:0c:c7:10:db:da:3b:ac:
6d:ae:77:3e:63:88:cf:52:91:45:b0:a5:54:de:05:de:a7:64:
af:2c:c3:21:28:c4:1c:2f:06:b1:47:62:44:8f:d3:6e:0b:5f:
40:3d:0f:55:3d:a5:7b:4b:86:68:1d:cc:81:9e:f2:c8:b7:3e:
cd:bf:24:d6:a3:b8:90:a5:72:fa:2e:ba:75:c3:a1:43:e5:02:
07:45:ea:10:8b:0e:c0:a7:86:56:99:c9:09:e6:c8:ab:85:da:
e0:cb:9c:72:29:e1:66:c9:05:ec:98:28:b1:4d:ae:3a:b2:45:
c6:cd:de:39:86:9b:f8:20:95:e9:14:29:3f:7e:99:32:2d:aa:
b9:dc:b0:07:50:27:95:d3:50:39:b7:2c:d9:37:b1:5d:1b:11:
50:05:16:1a:81:99:51:03:a9:6a:e1:75:c1:62:69:1b:45:ce:
2e:f1:9d:b2:eb:e0:19:62:e0:c4:4b:e5:5e:a7:ee:15:c4:64:
8d:c6:2b:1a:9a:52:d0:4e:c6:38:90:ac:cd:40:05:2c:c4:47:
36:36:5e:cf:9e:97:6b:b0:0c:ac:fd:b8:6e:c4:3d:2a:14:06:
0b:94:d6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:43 2025 by rpki-client