Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
File: wOG4t6HaZANISTucb06tSW44Yc8.mft (raw, json)
Hash identifier: SQCW+JC7QHxn7OiDPvSXgBQs0McngagJIAubiw2RYQQ=
Subject key identifier: C7:8D:43:1E:52:B6:34:EE:8B:57:36:D9:04:28:ED:90:D2:7F:86:09
Authority key identifier: C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
Certificate issuer: /CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Certificate serial: 019A0FA7CFA636E727DA850B2F295B3C157F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
Manifest number: 0165
Signing time: Thu 23 Oct 2025 06:00:47 +0000
Manifest this update: Thu 23 Oct 2025 06:00:47 +0000
Manifest next update: Fri 24 Oct 2025 06:00:47 +0000
Files and hashes: 1: nIGj6cCRVPA1M2NrgdI3HuOdqrQ.roa (hash: AYOfi9knKrYVyGkEyMV/F9b+beX1mBx79YurnuuMQBs=)
2: oKnLHsgLuH19r9Kfwt5hP8Ci_1c.roa (hash: DmQXUdH++x8Jbt+xahGEKKK2c4WHJ1zAXd2QztzCTFI=)
3: wOG4t6HaZANISTucb06tSW44Yc8.crl (hash: Dkist8WQvTEZ65eWrPkOD2lH5PSZIESZZNIJqRbpON4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:a7:cf:a6:36:e7:27:da:85:0b:2f:29:5b:3c:15:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Validity
Not Before: Oct 23 06:00:47 2025 GMT
Not After : Oct 24 06:00:47 2025 GMT
Subject: CN=c78d431e52b634ee8b5736d90428ed90d27f8609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6a:fd:7d:66:42:20:b8:b8:9b:6e:5d:be:01:
f6:a4:02:9d:8d:a0:1b:ed:6a:02:5e:61:c5:f4:c7:
c6:c1:8b:80:27:3e:44:eb:f6:86:4e:85:ae:1c:ea:
be:2f:6f:c4:eb:50:11:64:e5:d4:60:e8:95:42:e9:
41:c5:bd:b8:58:33:60:2f:35:00:22:33:1a:43:0b:
0c:56:16:db:f5:b5:d9:7d:1a:8a:17:f3:f3:0c:24:
a9:dd:19:00:70:a8:0c:02:e9:f1:d7:0e:e1:35:35:
93:18:59:f2:a1:35:55:7f:81:7f:2f:f3:5c:85:24:
c8:bc:6e:3f:73:bf:91:13:3d:54:6c:7f:8b:78:b3:
99:94:44:52:d7:a6:10:2b:85:ed:93:21:82:fb:2e:
4e:43:08:9b:92:87:82:77:54:d5:67:f7:a3:10:43:
1d:72:3f:c6:1d:49:36:e2:25:c8:5b:77:b7:12:5a:
85:84:7a:00:27:4d:09:33:56:0d:9b:a0:3e:e5:d5:
81:8d:f5:32:28:11:1c:52:60:6d:71:2f:f2:dc:53:
b8:d4:98:bf:c0:f0:b1:19:ab:04:32:26:8e:ed:b9:
dc:d0:2e:4f:8c:b6:5f:67:cf:73:31:4a:b6:d1:37:
e1:6b:94:a8:91:1a:91:96:ca:da:c6:26:e1:93:3a:
21:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8D:43:1E:52:B6:34:EE:8B:57:36:D9:04:28:ED:90:D2:7F:86:09
X509v3 Authority Key Identifier:
keyid:C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5f:69:12:04:7a:a3:02:c9:6e:4f:da:62:47:17:3a:ff:23:
c2:89:b1:7c:da:a9:b3:ba:09:a2:6a:42:15:e5:17:0a:73:e6:
2f:d6:ed:1d:a8:d0:6a:1c:8e:70:0f:4d:cc:ae:2c:b8:d3:d4:
62:a8:5c:a1:bf:69:02:87:77:0d:8f:eb:bc:95:01:70:47:a9:
5a:94:7d:6e:ea:9a:42:7b:81:a2:a7:c5:ef:9c:69:70:5d:cf:
05:01:35:bb:7a:a3:1f:ab:b3:1d:d0:83:63:25:77:9e:40:dd:
26:a3:46:f1:e6:45:c5:d5:89:91:6e:c1:ae:4b:28:41:ec:0c:
f3:0b:e3:3b:1a:d7:94:d2:6a:75:c0:cf:8b:c1:0b:a8:1d:f2:
d7:ea:ce:25:d7:c1:39:c1:0e:c7:60:a7:bd:e5:dc:d8:03:7f:
6f:28:cc:51:24:d4:6f:2b:5a:6a:eb:23:8b:81:0b:e4:f0:63:
39:e2:fc:83:5f:48:d6:ab:53:fb:27:08:2b:82:0b:2e:c7:ba:
2c:a7:ae:00:3b:8d:ea:30:20:10:23:b2:81:fd:5f:54:ed:e1:
61:f9:5a:bd:7a:10:aa:19:d9:eb:dd:bc:c7:bc:92:63:78:8d:
ad:7b:4e:eb:4b:16:c1:ca:d7:11:be:5e:c5:9f:2a:45:a4:26:
ad:3f:31:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 09:35:51 2025 by rpki-client