Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
File: wv0sdK1vri3dD26cOf3oMYk65vk.mft (raw, json)
Hash identifier: GEydbygUGJoiEvmWk4U/i5ZRiPGnCCbpWmGix/Y6HMQ=
Subject key identifier: A1:4C:0B:7C:6F:6E:46:C9:EC:8D:D3:EB:E9:B5:B9:71:E9:AA:37:5D
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Certificate issuer: /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial: 019A24AF05E1D2A8518AD305302A26C13939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
Manifest number: 0CFB
Signing time: Mon 27 Oct 2025 08:00:41 +0000
Manifest this update: Mon 27 Oct 2025 08:00:41 +0000
Manifest next update: Tue 28 Oct 2025 08:00:41 +0000
Files and hashes: 1: g0tJ6HAhOEXfRw9hpwjv9qGtrPM.roa (hash: zh4s24WsuFFY5gPWDTRufukEWHpAkIbH1s15tmhjBvk=)
2: vJU7TYTNdrKazsGkyXHeqona0Pg.roa (hash: iL9E8+h90/3EbQ79KJw98Dj0cUBdo61gLVaVCxN/WHk=)
3: wv0sdK1vri3dD26cOf3oMYk65vk.crl (hash: E1uaisWoOqIN6qt7Zo6sgIg2hetTRE1ykwfMqaqhpwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:af:05:e1:d2:a8:51:8a:d3:05:30:2a:26:c1:39:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Validity
Not Before: Oct 27 08:00:41 2025 GMT
Not After : Oct 28 08:00:41 2025 GMT
Subject: CN=a14c0b7c6f6e46c9ec8dd3ebe9b5b971e9aa375d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:46:6d:06:4a:d1:20:5a:ee:dd:34:3c:55:
92:d7:00:46:60:fe:03:67:54:c0:00:6f:2e:24:cb:
2a:6f:44:47:6b:e1:15:5d:ad:a2:d0:5d:b9:d0:50:
c8:98:44:50:23:e4:e4:80:a9:65:e0:aa:e1:7b:69:
8f:65:9a:2e:52:87:7f:77:f6:85:c8:0e:22:4e:81:
65:d8:93:b8:c2:98:90:8a:76:5c:7b:2d:65:f3:5a:
19:52:30:7e:33:be:dc:0f:06:1c:08:ed:14:d1:8a:
54:65:37:76:7e:6c:b6:3f:55:b8:8d:15:6e:2a:1e:
9d:50:3e:47:e6:ac:1e:fc:d0:b4:e5:8d:7a:2d:57:
23:c1:66:25:09:73:ac:cb:95:3a:91:fb:fb:cc:5b:
33:18:19:55:29:e7:19:0d:74:a5:ff:1b:fc:e6:3e:
90:15:17:8c:ac:fa:02:c7:36:67:14:68:f3:7e:81:
da:56:00:d2:28:35:82:d2:fe:ee:57:1f:4f:9f:91:
ef:76:5c:41:6d:9b:0e:49:0b:df:34:b5:9a:14:5f:
91:bb:9e:39:42:17:d5:5e:64:15:e2:5a:b8:f5:e1:
59:29:71:21:ea:87:27:7b:b7:d0:fa:2f:b1:6b:de:
d8:e7:0f:8b:1f:c3:7e:90:80:51:5b:90:1e:92:2f:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4C:0B:7C:6F:6E:46:C9:EC:8D:D3:EB:E9:B5:B9:71:E9:AA:37:5D
X509v3 Authority Key Identifier:
keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:10:9d:ee:8f:bd:95:82:7e:b9:10:4a:df:25:f5:e4:22:c5:
85:92:fc:11:b1:7e:a0:cb:3b:c6:59:d1:95:04:87:c1:de:9e:
f7:1d:ef:93:8c:bf:13:33:8a:b3:93:2d:b2:6f:a2:b7:d8:be:
97:bc:42:aa:8e:fd:7a:da:09:69:6a:71:07:b6:75:01:e9:c9:
31:97:18:1d:f8:4e:68:0f:ff:74:2f:82:1a:0e:fe:92:7a:e5:
66:95:99:2d:1b:00:09:56:23:d7:5f:47:18:c4:6d:ac:67:cc:
9f:97:d5:16:5c:36:7e:91:25:48:9c:18:2a:9f:02:45:e9:be:
f4:5c:50:91:e7:1c:f9:da:53:69:fd:75:f6:20:47:0a:ff:80:
96:0b:d2:17:27:4b:a2:74:22:71:1b:09:65:be:cb:7a:21:76:
2c:43:63:84:77:08:ea:06:fb:18:ab:3a:65:53:60:16:3b:cd:
8c:73:5f:63:52:60:81:19:eb:1b:fb:6e:ad:83:89:87:03:95:
10:c4:28:98:53:0f:94:1d:0c:35:ec:8f:3c:f6:76:ac:c0:88:
dd:88:a0:13:12:d7:42:a3:48:ac:2c:e7:d8:7e:a5:eb:96:4b:
ea:69:0f:ca:2c:98:c6:34:e0:3d:49:f7:1f:6d:b7:b7:2c:29:
6b:fb:4e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:25:20 2025 by rpki-client