Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
File: wKqzltZQgmAnwr2KBiByEJIQnik.mft (raw, json)
Hash identifier: 3KrxVqtyJuyqmgqfQzTbqB2W0760jRIi99jCwxcLnuY=
Subject key identifier: ED:51:6D:7A:00:E5:12:45:27:A9:CE:D1:63:50:CB:88:68:49:39:70
Authority key identifier: C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29
Certificate issuer: /CN=c0aab396d650826027c2bd8a0620721092109e29
Certificate serial: 019A72CA5879AF5A861EA1B1F645721B1BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
Manifest number: 01D5
Signing time: Tue 11 Nov 2025 12:00:54 +0000
Manifest this update: Tue 11 Nov 2025 12:00:54 +0000
Manifest next update: Wed 12 Nov 2025 12:00:54 +0000
Files and hashes: 1: FQ0Z9CjauF1-N_C29EdkHs_XYtQ.roa (hash: +snXzR2/FfWDx0T5r9Nyn9CPDVn/IvcZNIPrKP0aONw=)
2: wKqzltZQgmAnwr2KBiByEJIQnik.crl (hash: i7R/BHRsbQp02Yym1kdYBqo5KpbTGiQ7ROVADnjUwl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:58:79:af:5a:86:1e:a1:b1:f6:45:72:1b:1b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0aab396d650826027c2bd8a0620721092109e29
Validity
Not Before: Nov 11 12:00:54 2025 GMT
Not After : Nov 12 12:00:54 2025 GMT
Subject: CN=ed516d7a00e5124527a9ced16350cb8868493970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:65:4d:2e:6a:cf:89:eb:b2:d2:97:05:d6:ba:
f8:34:54:fb:4f:2a:bc:39:73:3b:69:ac:64:cb:7d:
d4:ba:6f:af:03:47:af:c5:11:81:f9:44:58:56:cd:
0d:b7:41:34:85:8f:50:8f:b9:a5:14:84:8c:4a:71:
d5:8c:52:c2:9e:d1:c9:03:f0:b9:07:ef:0c:09:aa:
af:c7:ab:f5:7a:f3:8a:5c:ba:f0:92:91:73:a6:a8:
93:02:e8:c0:12:46:90:ef:6f:9a:c8:a3:54:fe:0c:
6a:b6:ed:d0:d6:e5:15:ed:01:a9:b8:45:fc:e7:3b:
7c:c5:2b:23:09:3e:cc:86:ca:b8:e8:1a:7d:f4:b6:
3c:19:ac:4f:28:58:9d:99:3d:97:37:46:b3:c0:cf:
9d:6e:28:fc:8f:1b:e4:95:b0:07:b7:42:3c:7a:0f:
58:49:6d:5c:a3:2c:da:f0:9f:39:66:b2:56:bc:1a:
79:ad:15:88:53:16:a8:07:db:ff:bf:83:95:c9:df:
5f:ac:77:f9:c2:91:3c:d0:f8:fc:96:44:14:60:96:
2e:0f:1f:a4:16:b8:88:31:b8:48:35:d4:e0:25:4a:
13:49:ab:4c:9e:4a:c1:bf:ac:ce:97:51:ae:4f:6b:
4f:86:1b:fc:9a:cd:39:40:fe:27:b4:48:a8:fa:1f:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:51:6D:7A:00:E5:12:45:27:A9:CE:D1:63:50:CB:88:68:49:39:70
X509v3 Authority Key Identifier:
keyid:C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0e:ae:90:24:b8:f4:50:46:66:cb:66:82:f4:a0:d4:33:f3:
14:c2:63:9c:63:66:2c:c5:36:06:3d:09:9c:f0:d8:55:53:46:
c2:42:56:9d:47:50:8c:dd:2c:84:90:b4:d6:08:ab:52:52:06:
cc:77:33:69:c9:c6:b8:ba:10:aa:3f:88:f3:b8:ac:11:7f:4b:
18:e8:47:bc:e3:1a:e5:f8:36:65:7e:96:dc:9f:13:08:0c:6e:
d1:05:4e:87:c4:ec:d2:bd:c9:2f:a9:8c:30:b4:65:37:2f:21:
56:31:58:ce:4d:9b:0b:0e:39:93:3e:40:65:5a:bf:67:9e:ed:
89:61:6d:11:38:99:2c:30:1a:76:07:2e:ec:5b:87:5a:d4:07:
c9:43:8b:0f:12:1a:98:e1:ce:db:4c:47:3d:b1:49:37:7b:f7:
e2:f3:3e:e1:8e:37:71:22:ca:94:a1:a8:7d:14:36:23:45:17:
9d:af:01:7e:f3:7c:0a:56:04:21:de:56:57:5d:ee:0e:8f:1b:
f2:54:a4:52:09:dd:04:97:b1:48:a1:0d:2f:14:03:ff:68:00:
31:6f:a2:42:eb:7c:a1:a5:f6:ae:ec:01:37:a1:20:d8:6e:ed:
90:0d:35:34:b1:ef:ab:ca:6a:98:f8:92:d7:8c:c4:80:cf:9e:
f9:db:fa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:40 2025 by rpki-client