Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier: EECKtNUCAbglqFI5uJjIp8YzSjtAXnDfM2fWcpY6ZMM=
Subject key identifier: 00:C6:92:9D:1B:84:E0:44:CD:65:B9:A7:81:B5:9E:22:AC:62:19:78
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 019A1A2ADEC91B291A49FF62ACB5120C2A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number: 092C
Signing time: Sat 25 Oct 2025 07:00:08 +0000
Manifest this update: Sat 25 Oct 2025 07:00:08 +0000
Manifest next update: Sun 26 Oct 2025 07:00:08 +0000
Files and hashes: 1: oXdvfaAw2HX5k9hgoYRskK2gnZ0.roa (hash: RsMteruai2QKgImCyNPBir6yRcbFaU5c9mP5yO+ruyE=)
2: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: 01NbvACoWYv6K4YwYjdh42mK3RSbd2+wN5e8T8OPM/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:2a:de:c9:1b:29:1a:49:ff:62:ac:b5:12:0c:2a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Oct 25 07:00:08 2025 GMT
Not After : Oct 26 07:00:08 2025 GMT
Subject: CN=00c6929d1b84e044cd65b9a781b59e22ac621978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:9e:e7:df:62:82:05:0d:38:46:0d:f8:e5:
3d:b7:06:b0:ef:32:12:ff:34:24:be:7b:1b:3a:d7:
3d:0e:d8:14:db:90:69:a3:3d:ad:8c:cc:2d:39:bb:
13:ec:2a:bc:55:58:00:b2:e5:bc:08:b9:39:3f:56:
7a:4c:a5:19:95:25:de:63:24:f9:ee:32:c9:c0:82:
18:5a:28:0a:45:2d:51:0c:92:b9:18:cb:5f:cd:ea:
f4:3f:d2:ec:60:00:02:68:21:8f:33:93:8d:0b:f7:
92:70:7a:25:ae:d2:b5:5c:ae:a5:39:6c:31:b9:65:
6c:bf:84:2f:85:37:94:83:dd:51:52:8f:d8:b1:b4:
20:6c:14:e3:8a:a2:e0:e5:af:85:fe:6d:e2:06:42:
e2:c8:b3:0e:3d:6a:7b:c3:e4:8c:cf:8b:0d:f7:f4:
c6:bb:bd:09:8e:07:cf:b7:b2:1b:f3:78:a3:1e:d5:
f5:d8:88:1c:4a:e9:f3:90:57:90:2c:b1:4b:bb:a5:
a1:f1:0c:38:04:7a:9e:34:78:59:0b:e9:a6:c7:f8:
e7:71:36:a5:4b:ca:11:fa:54:dd:9a:9d:23:35:cd:
63:8d:31:f8:a1:17:6b:9c:38:6a:1f:51:f1:64:39:
e3:f9:ec:34:9d:8a:f1:38:44:f7:5f:b9:e8:aa:14:
7d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C6:92:9D:1B:84:E0:44:CD:65:B9:A7:81:B5:9E:22:AC:62:19:78
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ae:de:36:8a:2b:03:ce:36:34:b6:92:1a:57:60:0a:22:ec:
f3:e8:eb:f8:e1:9f:1d:41:c1:d8:9d:d5:87:30:cc:bd:2b:79:
3a:a6:31:cf:9c:4f:8c:87:f2:0c:94:d3:9e:d0:9c:cb:c4:27:
9f:06:bc:d2:4b:37:31:65:b2:dc:b4:e4:a5:27:54:52:8f:0e:
68:db:76:f1:5d:3d:ca:af:91:d7:db:ee:69:24:75:77:15:47:
05:58:7c:01:5e:42:1e:dc:33:a9:c9:a8:20:28:76:1a:43:d3:
6c:02:4e:2f:08:eb:8c:48:3d:bf:98:c3:c1:5f:4e:6d:79:c8:
f6:66:8f:46:ea:89:ec:59:00:13:67:1b:56:58:d2:5c:e8:bc:
e6:51:3e:f7:03:8d:12:98:49:d2:ba:68:9e:b7:c2:77:68:03:
c4:36:56:7b:88:a8:ff:c5:ea:85:9b:c8:57:b9:e2:db:82:b0:
96:15:fc:b0:6e:fe:e1:ee:1a:9a:79:14:3d:72:4d:67:30:50:
a9:8f:19:6e:99:b7:b7:d9:bb:97:1a:34:92:90:b6:94:eb:fd:
88:76:3f:ba:ec:72:a5:18:8f:94:af:be:d3:c9:14:29:5c:29:
70:b1:e9:b1:b9:c9:b4:d0:ec:e6:31:ac:df:c6:ec:f4:6f:dc:
a0:6c:11:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 08:21:07 2025 by rpki-client