Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File: wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier: 2SXUlVi8yYU1jN1IzMnYUG6J4p877a/x4/uXhwNTrXQ=
Subject key identifier: 86:00:27:74:B3:A2:9B:26:1A:CF:AD:30:D0:C6:5F:C1:79:49:F6:0C
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 019A4E18EC61892A22AC47DD19358B851D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number: 1009
Signing time: Tue 04 Nov 2025 09:00:47 +0000
Manifest this update: Tue 04 Nov 2025 09:00:47 +0000
Manifest next update: Wed 05 Nov 2025 09:00:47 +0000
Files and hashes: 1: 2if-W7_9B6ndVwa4CXKbXlfYipY.roa (hash: x6w8qlU6igwl5cXDxoZUE8Lr1i8+UZJJXlmem9XWOSg=)
2: iNIpA6NRoHEtD1Gdwv0RcZxMEOY.roa (hash: QoWSCTkZW/GH9j1mmy2Sv0c+Jd5oUQpoqRVhrzgy26s=)
3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: O7oAQSN72GdjvFieUv3kmGXSsy4i5FC3EwOYiNbULEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ec:61:89:2a:22:ac:47:dd:19:35:8b:85:1d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: Nov 4 09:00:47 2025 GMT
Not After : Nov 5 09:00:47 2025 GMT
Subject: CN=86002774b3a29b261acfad30d0c65fc17949f60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0c:df:aa:94:27:12:78:d2:11:be:c1:e9:2c:
cf:bc:99:26:21:6c:c7:1a:96:ea:57:97:73:c9:7f:
d5:c8:09:ae:19:bc:8b:84:ff:9d:2f:48:02:f1:01:
2d:b0:e2:9c:93:f1:24:99:ac:f4:14:0c:7b:85:66:
1d:49:7a:40:40:07:bb:a1:d3:d8:79:df:a4:ad:bb:
43:10:af:16:c5:e0:1b:ec:3a:a7:fd:c1:8a:a1:5d:
fe:62:fa:40:10:e6:f2:15:1d:4a:66:91:48:1c:02:
33:c2:a5:43:a1:65:5e:ab:77:f1:54:ca:29:aa:f2:
99:68:fd:cd:2e:c3:ed:4e:e5:ab:0d:92:2a:58:36:
ae:65:1c:51:90:1b:a1:68:14:84:23:63:e6:2b:91:
88:4d:be:b2:0d:c4:8c:80:8a:fc:d7:90:c7:a1:e9:
90:69:c3:cb:2d:d3:f8:20:02:cf:ef:f2:25:12:52:
fa:77:9c:1a:52:be:4c:2c:fa:3b:4a:66:0b:d6:51:
d0:90:06:3f:ab:46:25:8e:16:ed:7b:9e:11:79:7f:
6b:3b:e6:29:be:27:f0:62:6f:ba:e0:57:76:41:c7:
b3:b4:b9:d1:21:fb:71:9d:da:42:e4:a7:89:08:e7:
1c:25:11:b5:be:d5:97:ac:ec:82:50:27:bf:94:a2:
37:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:00:27:74:B3:A2:9B:26:1A:CF:AD:30:D0:C6:5F:C1:79:49:F6:0C
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a9:1f:62:e3:97:39:b1:50:66:60:7d:12:1e:1d:0d:c0:2c:
c5:d3:3d:80:2f:df:78:38:92:ee:6b:d9:c0:65:36:82:8d:af:
89:2a:a0:ed:41:9c:65:70:1d:e9:5f:91:3d:e7:9c:38:db:b4:
de:9f:5f:ff:e2:a7:12:ab:25:cd:b5:89:11:ab:26:ac:5c:fc:
05:5b:cb:5f:4b:82:28:ba:92:32:68:8c:b1:b2:ba:03:83:17:
49:e3:6a:f5:31:7c:73:3b:7f:7c:11:ff:44:d2:d6:4a:87:c1:
53:74:0b:b2:e8:c4:0c:ac:4c:e0:2e:51:35:f9:a6:9d:4a:41:
82:96:c6:fa:1e:75:30:46:0b:c9:9c:c1:d9:cd:35:41:9d:52:
a3:d7:2d:06:44:97:4b:d9:58:ec:16:19:01:2e:84:e3:fb:59:
66:dc:12:47:b1:2f:72:1f:05:9a:5b:27:49:88:cf:f7:77:93:
02:84:fc:ec:be:15:27:11:02:f3:1d:8a:8e:3a:62:bc:34:a3:
63:6a:3d:b2:70:f2:33:7a:cb:74:60:b6:c4:c5:05:fc:40:33:
5d:89:2c:0c:5b:b9:ae:b7:01:ec:6f:2c:51:e4:ea:3d:c9:63:
aa:09:14:84:71:3f:16:50:86:c7:40:e9:d6:83:c3:92:91:00:
27:46:6a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:02:45 2025 by rpki-client