Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
File: wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft (raw, json)
Hash identifier: /gS3X8F3RVwp2F8lZKsXPUFPCtXzt38C36XQDlrBKTA=
Subject key identifier: 35:CB:A0:88:C4:1F:49:C2:0D:68:25:A9:E7:DC:AA:5A:C3:A0:72:C7
Authority key identifier: C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4
Certificate issuer: /CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
Certificate serial: 019A7226793EE3102AF3329D6C5018E9E3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 09:01:55 +0000
Manifest this update: Tue 11 Nov 2025 09:01:55 +0000
Manifest next update: Wed 12 Nov 2025 09:01:55 +0000
Files and hashes: 1: uOmu1u-0cx95qJdb2F6OqNW0AyI.roa (hash: T1ZCPSydqXCfxYKH+M6++cGYvIdpSTMuo8K8u6PSUYU=)
2: wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl (hash: Z153l5ibsfmiBEuEeQxk1u57kZz2dboca1UqDwQcqQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:79:3e:e3:10:2a:f3:32:9d:6c:50:18:e9:e3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
Validity
Not Before: Nov 11 09:01:55 2025 GMT
Not After : Nov 12 09:01:55 2025 GMT
Subject: CN=35cba088c41f49c20d6825a9e7dcaa5ac3a072c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c7:e7:c5:43:31:ac:bd:ed:96:c7:50:ae:12:
41:6b:4a:dc:d3:3d:24:88:2e:4f:40:60:2e:c9:81:
35:f2:a7:70:06:89:80:b2:7b:e5:68:75:68:5d:ae:
44:d6:e2:44:f2:41:e4:05:3e:e6:6d:4a:86:5b:d4:
57:48:e8:78:cc:8e:f5:49:3c:6b:90:03:60:1c:a2:
bd:2f:87:30:24:47:94:fe:69:8e:91:dd:90:d4:42:
79:d7:83:43:26:0b:26:22:ac:8e:f9:ea:78:ce:8c:
4e:e9:bc:8f:a9:b3:74:bc:c7:68:b4:2a:03:12:b8:
19:0b:3e:4b:9a:a1:94:28:9e:bf:5c:31:cc:3e:92:
fc:a1:ea:07:60:fe:a5:8e:d1:d0:7e:15:85:c1:78:
15:be:75:6c:7d:92:fa:09:21:ec:e3:02:71:b8:c1:
2a:e6:35:09:32:ea:a0:d9:28:f0:a7:4f:1e:47:74:
55:4e:34:13:46:77:dd:f5:c6:23:1e:8a:83:08:cb:
67:b8:3b:78:b4:d2:ff:30:10:4f:cb:ca:d8:e5:11:
db:95:ad:6a:e0:e0:22:aa:9e:f6:e9:24:2b:92:45:
51:93:8d:21:5b:f4:b3:a1:f9:9e:f9:ce:f5:96:de:
07:3b:2a:85:94:1b:86:03:d8:65:b9:58:d6:19:2f:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CB:A0:88:C4:1F:49:C2:0D:68:25:A9:E7:DC:AA:5A:C3:A0:72:C7
X509v3 Authority Key Identifier:
keyid:C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6e:52:b4:23:40:df:5b:3a:66:ab:5a:b7:9b:f1:02:d2:1b:
f8:6e:92:33:78:6c:8e:09:13:b0:03:12:20:ee:4d:3c:cf:de:
11:18:fd:cb:95:b7:55:7d:5f:02:6e:a5:3e:41:ad:d4:4f:5e:
e5:08:60:62:23:ca:25:73:b3:91:ba:d6:2f:c1:2a:8b:7f:2c:
1b:d1:6d:72:ca:35:95:ca:68:04:cc:8d:66:3c:c5:cd:02:35:
34:ec:c9:f2:09:d6:33:f9:6e:86:f3:30:b2:94:6a:fc:f4:57:
23:96:39:65:ff:7a:ca:70:6b:58:ee:51:52:e8:3c:19:d0:5f:
d3:8a:1d:24:0f:23:ef:84:8a:7d:ac:84:14:40:6c:df:ea:57:
4b:84:e6:2f:45:ca:44:ae:6e:2c:a6:67:b9:02:26:a5:87:3d:
5f:b2:49:92:da:1c:6e:a0:fd:a1:3f:b3:07:f6:a7:68:2a:64:
a0:ba:eb:f2:32:ec:a3:98:fe:42:2b:98:26:ca:c0:c4:4b:ce:
9b:02:cc:ba:8b:f9:fb:c2:a2:b1:e0:51:a4:3c:ee:71:ac:5f:
02:c4:7f:3c:52:c9:c7:04:1c:18:bb:e4:bf:be:f4:f0:3a:2a:
83:f9:be:8b:b0:bc:6c:25:9b:73:f3:20:b3:d8:b8:75:52:17:
e7:b8:3a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:48 2025 by rpki-client