Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
File: wvypREWGBrEBfibDyhdDD3_5JLM.mft (raw, json)
Hash identifier: 7r+NR2MxkZtpx0qUat78lw1L9uVL8pYYN+O43JXsQDQ=
Subject key identifier: F8:64:AB:C2:5F:79:45:AA:2A:E0:7C:DC:7C:53:B4:79:27:B6:5B:47
Authority key identifier: C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3
Certificate issuer: /CN=c2fca944458606b1017e26c3ca17430f7ff924b3
Certificate serial: 019A71B8124505334D4A302B25960A4BFB4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:19 +0000
Manifest this update: Tue 11 Nov 2025 07:01:19 +0000
Manifest next update: Wed 12 Nov 2025 07:01:19 +0000
Files and hashes: 1: hWs8BC_h3pk307welYbUg7knJ4s.roa (hash: dB9CucoPV9UQVFmYpgxFuKafR8O28SK4AMzI4d3GC5o=)
2: wvypREWGBrEBfibDyhdDD3_5JLM.crl (hash: aWnUboeD9f/r5dpKs6mP0toiEdLiZTuvCwuGRoQEJcg=)
3: zsnDAUQ9OWrVKsrixNM64UubPEE.roa (hash: 8s4+Ar8E4qPe68moGEzfuFe9b4Z1MTv6KsbZ2gEaOyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:12:45:05:33:4d:4a:30:2b:25:96:0a:4b:fb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fca944458606b1017e26c3ca17430f7ff924b3
Validity
Not Before: Nov 11 07:01:19 2025 GMT
Not After : Nov 12 07:01:19 2025 GMT
Subject: CN=f864abc25f7945aa2ae07cdc7c53b47927b65b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:84:c1:ee:8a:ee:19:4c:e7:5b:e1:97:87:a5:
5f:c8:80:e6:e8:61:a3:09:74:ce:cc:91:9d:fd:a5:
27:68:41:06:4c:dd:00:c9:71:14:b0:6e:86:aa:fc:
d0:23:29:dd:bb:16:c9:bc:71:85:e2:73:62:15:f0:
e5:db:5a:34:e3:dd:14:0e:cb:f4:46:df:78:5d:8e:
fc:cb:f3:3c:4e:e3:f2:b6:ff:4a:d2:74:a6:30:ff:
cf:b9:fb:3a:82:0a:9a:2f:7e:89:3c:5e:ec:05:a2:
62:14:92:60:3c:0b:b9:19:6a:59:87:3e:43:6f:3d:
c7:8b:5d:01:1e:ef:ad:91:b1:fd:36:b9:76:a0:cd:
78:bf:df:d8:7d:59:9f:b4:92:9e:e1:24:6b:5f:88:
5c:2d:2b:c0:a7:12:a4:63:2a:ec:ef:86:01:f5:6f:
08:70:85:c7:62:41:01:6f:1e:04:b5:e1:18:5f:9d:
b6:1d:b4:60:c2:f7:98:ea:c0:df:0b:05:32:cf:00:
0b:57:a4:64:b8:a6:2e:e7:05:5f:d0:ed:da:2d:54:
01:a1:02:3d:41:76:3f:84:5f:65:90:f3:d1:19:12:
7a:d6:af:7b:6a:99:04:61:a7:b7:bb:a8:db:af:e3:
a2:90:d3:05:c4:a1:d5:a1:b5:db:56:4b:3e:49:84:
c8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:64:AB:C2:5F:79:45:AA:2A:E0:7C:DC:7C:53:B4:79:27:B6:5B:47
X509v3 Authority Key Identifier:
keyid:C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5b:55:b0:6a:b0:af:d5:c7:c4:69:1a:f2:55:39:61:3c:7d:
2f:5e:8a:f9:26:4a:dd:ac:2b:c2:77:fb:69:09:e5:2e:29:38:
9a:83:1c:91:b5:bf:56:e9:ec:28:f4:fc:70:3e:ab:38:eb:97:
61:82:0a:c5:4f:57:43:c8:4b:29:71:e0:a5:e5:3a:52:0a:60:
67:54:6b:d1:1d:9c:2d:68:fa:a0:7e:b8:ec:cb:bc:71:aa:a4:
2c:48:b7:30:5c:fa:7a:e8:79:a7:ae:b4:7e:2f:32:7f:c4:2c:
a4:50:65:d4:18:72:33:20:2f:4d:9b:58:6c:71:cd:0e:5a:e1:
05:e8:5d:cb:28:fe:d1:91:90:bf:01:76:ec:9d:e9:20:9a:a4:
27:88:25:ce:69:65:27:a0:a1:3e:6a:88:ff:08:c4:bc:19:23:
75:ba:fd:11:fa:e0:af:51:8c:a9:89:9a:24:a3:e8:16:74:47:
4b:e6:ae:14:aa:6b:63:d5:17:f2:33:eb:b8:b0:0d:51:34:92:
3e:a2:55:e0:c2:e7:f9:fe:ff:30:76:65:3a:08:8a:03:d5:de:
1d:f6:8f:c2:bd:24:c1:6a:97:36:3d:7e:0e:59:1b:ac:4b:12:
e0:c2:cb:10:11:2c:99:ca:9b:95:30:91:d1:1a:b7:e2:2f:b0:
f1:34:8c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:27 2025 by rpki-client