Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
File: wIi1a9ngFvm8Uhr03CSebRJWsd8.mft (raw, json)
Hash identifier: inAtM1T0JH/T3rY9AB83ll9sXIyieHMMa1YQt7nwHxQ=
Subject key identifier: CE:F7:12:B0:0F:1A:D6:48:B1:2D:21:3A:C9:02:3C:0E:EA:56:97:6C
Authority key identifier: C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF
Certificate issuer: /CN=c088b56bd9e016f9bc521af4dc249e6d1256b1df
Certificate serial: 019A725C46EFB1814C10E353351928452B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:00:41 +0000
Manifest this update: Tue 11 Nov 2025 10:00:41 +0000
Manifest next update: Wed 12 Nov 2025 10:00:41 +0000
Files and hashes: 1: fc5qhRUu_bBsdB33TSVsq6f89o8.roa (hash: lZbvlThe0e2vAA/qHSYCgpP/K95jAN4HZKyoWaj+RfI=)
2: wIi1a9ngFvm8Uhr03CSebRJWsd8.crl (hash: CzIUjvGfY0+AHn0oFOHk5ibaCYcPxapUFSMA0l8jw3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:46:ef:b1:81:4c:10:e3:53:35:19:28:45:2b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c088b56bd9e016f9bc521af4dc249e6d1256b1df
Validity
Not Before: Nov 11 10:00:41 2025 GMT
Not After : Nov 12 10:00:41 2025 GMT
Subject: CN=cef712b00f1ad648b12d213ac9023c0eea56976c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:eb:09:4a:54:ee:17:ea:28:b6:8c:dd:83:14:
7e:f5:a5:96:10:b8:f0:24:d3:eb:d8:10:dc:9d:b2:
cc:1a:4d:5b:9e:f7:82:78:3c:50:72:0c:41:5d:ea:
9b:5d:8b:5a:9e:0e:f2:61:62:8a:b1:ff:c6:6d:17:
9a:db:71:f4:19:cc:87:e2:c0:f1:64:86:20:02:fa:
f1:0f:b5:d3:4c:e8:86:ac:81:a9:58:f0:19:fa:ed:
8d:d4:75:a4:ca:fd:2d:e4:2b:92:e1:f9:f0:4e:20:
71:d0:ea:89:bd:48:c5:0e:1e:e0:54:07:4e:7d:b8:
0e:c2:5a:c9:1a:41:f9:21:4e:d0:ee:35:81:f2:96:
93:a8:7c:3e:0a:68:1c:a3:98:0d:59:aa:08:30:c0:
12:2d:5a:c8:fb:b8:88:2f:cd:f6:41:e0:ff:90:2d:
ff:f6:3d:8f:eb:a0:3f:62:4b:7c:19:ab:fd:67:52:
64:dd:ae:a0:e4:be:e6:4c:d5:13:da:fe:f1:fd:62:
31:1d:6c:ac:ea:49:dd:06:d0:4d:04:cd:c7:c4:95:
81:e1:a9:58:83:39:1d:22:06:40:61:d7:47:fd:46:
dd:c8:32:29:e8:82:43:2f:d6:40:f2:e1:8b:96:70:
95:5d:ba:ae:78:ec:e3:76:b3:dd:66:65:f1:c1:83:
88:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F7:12:B0:0F:1A:D6:48:B1:2D:21:3A:C9:02:3C:0E:EA:56:97:6C
X509v3 Authority Key Identifier:
keyid:C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c4:b1:60:b8:17:66:87:57:4c:96:1c:60:15:cb:d6:d8:a5:
3f:f2:52:56:00:8a:93:be:ce:bd:a0:eb:ff:e8:9f:97:aa:45:
10:2e:7a:f6:93:ff:4d:64:8a:a7:44:b0:82:26:21:90:cd:c7:
69:e9:6c:b7:25:50:fc:a8:70:cf:9b:44:2e:bc:60:4c:29:b3:
02:ec:ec:64:bd:f5:50:bd:d1:ab:37:db:ef:21:d4:7e:07:bc:
57:cb:89:71:35:c3:22:ec:f2:af:0d:36:12:ad:b4:87:c8:99:
c1:a2:b5:60:82:4e:23:98:04:05:27:83:5e:9c:7c:9a:bd:f4:
f1:bc:38:d0:d8:3b:5d:c9:83:3b:10:c6:83:cd:41:e2:e8:e7:
e0:b6:ed:76:d5:42:a7:a8:81:cc:e4:52:d7:9b:76:46:cf:ea:
30:d0:c4:38:c6:05:30:0d:e0:1b:66:f8:cd:36:06:a0:15:19:
67:a3:fc:92:9d:96:2f:a2:42:98:b6:a4:83:87:55:31:b9:c3:
92:34:53:5b:f2:9f:d9:f3:9c:6c:84:4f:b5:e9:e6:ae:4f:51:
ec:ef:cb:9f:8c:e9:7f:1a:b6:9a:b1:9c:89:aa:f9:81:d3:5c:
4d:09:1c:ce:c6:23:d3:23:0e:47:81:14:bd:4e:56:ea:b5:47:
fb:49:11:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:41 2025 by rpki-client