Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
File: wei4jx4wVzoOIOR51boAtOkYJ7Y.mft (raw, json)
Hash identifier: lblFj3iDC7nWpFfJ1hyn0/+BCEYe3pgRynxQWjZ0m+Y=
Subject key identifier: 6D:27:02:37:37:3C:A0:6A:5C:C9:20:B2:8A:31:2E:08:26:EA:64:6A
Authority key identifier: C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6
Certificate issuer: /CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6
Certificate serial: 019A7149A505B5E13A3C40A4DEDBA593E05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 05:00:43 +0000
Manifest this update: Tue 11 Nov 2025 05:00:43 +0000
Manifest next update: Wed 12 Nov 2025 05:00:43 +0000
Files and hashes: 1: X1Gl7pI0OMRR6ajfA3cvno5vstw.roa (hash: zVVJwLgXELHLdhQ+YSrbw1EHdsK7mWsiuWthVrRspkM=)
2: wei4jx4wVzoOIOR51boAtOkYJ7Y.crl (hash: 8k8UBEK3mOsOn2GU5/qeKF81K0pAUHxLSAgIaXznXPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a5:05:b5:e1:3a:3c:40:a4:de:db:a5:93:e0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6
Validity
Not Before: Nov 11 05:00:43 2025 GMT
Not After : Nov 12 05:00:43 2025 GMT
Subject: CN=6d270237373ca06a5cc920b28a312e0826ea646a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6b:15:92:e0:0d:4c:f7:7d:5c:2f:f6:09:0e:
29:da:07:0c:1d:44:ca:62:fb:77:1c:87:f5:d6:dd:
0a:51:c6:f4:b3:9b:7c:bf:a6:33:5e:a7:f2:b2:c8:
83:d1:21:36:0b:de:54:a6:06:3f:ea:93:c2:49:dc:
67:b5:a8:2a:c0:fc:32:a8:df:c8:1b:9f:39:a6:c1:
8b:7f:af:4e:2f:4c:7c:94:01:c1:08:3d:80:2a:80:
4e:a2:74:9b:76:cd:c3:18:9d:27:88:ca:c7:c0:62:
59:7c:06:6d:20:d8:d0:11:4f:64:92:c2:54:39:8b:
0b:58:d6:9f:2d:84:77:74:f8:11:76:f3:09:5e:f3:
fe:85:fa:3a:67:8f:bc:66:84:5e:fa:d6:b5:89:87:
b7:39:8d:1b:b7:0a:9d:1f:31:5d:ae:73:b6:ca:32:
d4:67:3c:07:59:ba:f4:ae:34:29:56:f9:70:1f:b4:
85:70:38:76:2f:8e:05:0b:5d:97:03:1d:f0:af:e3:
23:41:76:c8:5e:ee:42:7e:c0:d9:bd:f8:c3:f9:e9:
15:33:8e:d7:cf:f5:5b:f8:7c:b1:e5:86:07:86:29:
c1:1f:5a:ea:f1:c8:40:d3:13:4f:d4:89:58:b5:e7:
dd:b0:cf:4a:80:0f:3a:2c:d5:7b:19:cd:fd:b7:4d:
4d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:27:02:37:37:3C:A0:6A:5C:C9:20:B2:8A:31:2E:08:26:EA:64:6A
X509v3 Authority Key Identifier:
keyid:C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:44:cf:83:95:2b:88:47:1b:28:fc:a5:3d:bb:0b:a6:ed:a5:
f5:78:c3:37:cb:d4:a3:a0:72:07:63:bb:c9:44:14:73:92:9a:
b3:82:6b:17:b5:96:5a:b2:e9:bc:a0:ea:8c:3a:5f:87:6b:79:
04:e1:92:8a:ef:ae:fe:2b:68:82:a0:52:c8:a6:89:05:62:c3:
38:06:e9:6c:38:30:1f:c1:91:52:53:e3:f2:22:08:26:69:80:
dc:d9:c0:d6:7c:a6:85:c2:c2:2b:33:dc:07:f0:66:7a:5e:bb:
36:6c:c7:11:8e:96:18:57:21:39:40:f9:99:6c:0e:31:1b:f2:
23:ac:48:eb:34:c8:32:ec:af:ab:63:2c:2d:ef:45:41:05:45:
b0:96:c9:78:08:89:cf:09:8c:48:80:82:41:9e:2c:80:99:63:
f1:6f:74:28:59:71:44:7b:62:d6:82:bd:40:b2:86:c7:9b:ac:
5e:33:ce:91:19:48:56:57:9f:c8:9c:30:eb:cf:a2:af:d7:c5:
52:c4:a9:71:d0:c5:2c:f4:1d:9b:5b:f3:08:37:17:bd:bb:c0:
17:63:a4:40:84:de:75:ef:2b:4e:02:17:03:c7:b9:c7:bb:8b:
5f:8d:20:35:a2:c5:20:06:55:a0:52:cb:6b:53:1d:ea:12:d9:
1d:69:cb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:42:57 2025 by rpki-client