Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
File: wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft (raw, json)
Hash identifier: 62yqVvt+PpZlIfwnn4RHmqQ6HZjT870NY0MqAvz1oZg=
Subject key identifier: 40:84:A6:1F:AE:7C:82:DD:10:53:C7:17:74:83:C2:54:80:3F:22:5A
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Certificate issuer: /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial: 019A72933AFA434F70F4CFF1E45D2E044D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:00:42 +0000
Manifest this update: Tue 11 Nov 2025 11:00:42 +0000
Manifest next update: Wed 12 Nov 2025 11:00:42 +0000
Files and hashes: 1: E0oPYTANwX4SVfmo4G4Bb_Ffflc.roa (hash: POCopGH4Sf5gshG/ai7EpgPCh9X9MivwqlQ7wpM8V2Q=)
2: wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl (hash: eRPHsJiKgpu56XH9DA/p8nWFY8dcNVGrdwQynB2fmuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:3a:fa:43:4f:70:f4:cf:f1:e4:5d:2e:04:4d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Validity
Not Before: Nov 11 11:00:42 2025 GMT
Not After : Nov 12 11:00:42 2025 GMT
Subject: CN=4084a61fae7c82dd1053c7177483c254803f225a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:fe:54:87:a7:57:d3:9d:c6:5f:7d:1a:dc:
c5:39:b1:e5:19:d6:26:21:d2:88:69:e8:28:18:ac:
0c:8b:d9:96:bd:72:e8:bd:ba:74:27:99:79:bf:c8:
20:46:ac:33:fb:4a:53:64:c8:7b:89:5c:e3:70:07:
03:49:ae:4b:1d:49:2a:9a:55:51:19:ab:6e:85:5c:
50:a5:c5:fb:f6:be:aa:a2:0c:7e:cc:a7:0e:9c:89:
1d:1f:6e:77:b9:7e:90:95:24:d6:46:3f:ea:17:fb:
39:0a:2f:1d:5e:8c:32:dc:51:44:b4:8d:d1:36:52:
ee:f8:c2:51:56:f9:b4:18:79:bb:8b:13:20:2b:7c:
35:60:fc:c0:1e:c9:ce:3d:0d:63:ea:2b:5d:b1:29:
63:fd:bc:63:85:5d:af:58:c6:c7:a5:83:9b:a5:e6:
f6:51:c1:0e:48:50:1d:33:b2:ad:b2:c8:b7:a0:80:
1d:a0:16:61:f9:e9:84:c7:cb:5f:47:c4:b4:f2:9f:
19:1f:12:a0:af:4c:3c:39:95:a5:ec:31:cd:db:e3:
d4:59:e5:db:75:b9:bc:56:1a:01:95:a8:be:89:5f:
49:b7:5b:89:2e:f9:32:c9:6b:13:cb:8f:1e:f3:df:
33:1e:2f:c7:2a:e1:bf:96:0f:fe:31:78:03:6e:69:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:84:A6:1F:AE:7C:82:DD:10:53:C7:17:74:83:C2:54:80:3F:22:5A
X509v3 Authority Key Identifier:
keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:28:78:03:fc:9d:f1:df:c1:c8:83:40:db:b4:d0:6f:0a:2e:
01:5d:93:2f:50:96:1f:51:19:67:2b:07:1c:79:a6:4e:f5:c7:
53:0b:49:8a:42:a7:69:61:12:b9:e4:1d:54:c2:54:1e:69:c1:
61:9a:fa:4a:a5:99:23:0b:51:84:4b:0a:c7:41:8e:4c:99:9c:
16:32:2e:3c:2f:d4:40:c5:0f:d7:b1:34:20:80:e4:7b:1e:64:
04:92:9b:ac:2b:e9:ac:10:10:df:bf:12:5b:3a:b8:d9:40:71:
98:3e:75:a5:1a:9a:32:da:be:84:1e:c9:e3:cf:29:55:18:f6:
30:4d:3a:7f:33:2f:2d:27:7e:d8:f8:ca:41:0d:a5:a5:52:1d:
65:c5:04:3d:06:5c:21:cd:f1:f0:17:51:40:1c:ae:29:c2:65:
d0:b3:1d:eb:86:0a:fe:7e:d8:f6:0c:b9:77:1b:70:7a:95:af:
e0:3b:2d:8e:dc:52:f2:72:61:72:8f:6d:6d:79:17:36:0a:d9:
ec:48:69:ca:96:a9:d4:45:a7:cf:dc:de:a3:5c:58:41:f3:b3:
39:52:2e:59:bc:b6:b3:88:a9:e7:83:2b:92:2a:a5:a2:ef:e6:
44:22:c7:e0:55:af:10:a5:93:2f:32:e4:d7:b5:3b:c7:91:7d:
90:a5:37:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:50 2025 by rpki-client