
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
File: wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft (raw, json)
Hash identifier: JIf83aWai9m0Rqn6ojdxrI0rC2eF8PXGyRz8Wjx2Q8I=
Subject key identifier: 3F:07:91:1E:C7:7A:3B:08:DD:5B:C4:EE:56:D6:EB:EB:84:FC:62:69
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial: 019957C562D1AAB188CFEAB37CFBCC6F178B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
Manifest number: 169C
Signing time: Wed 17 Sep 2025 13:02:57 +0000
Manifest this update: Wed 17 Sep 2025 13:02:57 +0000
Manifest next update: Thu 18 Sep 2025 13:02:57 +0000
Files and hashes: 1: U48ecbKwcHeg61Lsn-9oJV9fZ1M.roa (hash: 4OZhDTAYRi1p6Bim6OrHHauK8Tj1XNwxbEYFfDDGDS8=)
2: W7Ly1Qh7TAF9UC5Ryue85_XQuXw.roa (hash: Mzqyt+0iiHuJ8ffJgOXtkPZgAbIE5kucHWjmbNGM61Q=)
3: rbSVHILo7KFdyfKkJiVN3ULREeA.roa (hash: +QOKE2skzry0xtqfIBGKUWUhJ09lXvKf9/a8XMywLNU=)
4: wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl (hash: p5Sx1blJA2X1ZOlxDzN53jozyhjk/ZECPi7R9yULzmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 13:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:c5:62:d1:aa:b1:88:cf:ea:b3:7c:fb:cc:6f:17:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Validity
Not Before: Sep 17 13:02:57 2025 GMT
Not After : Sep 18 13:02:57 2025 GMT
Subject: CN=3f07911ec77a3b08dd5bc4ee56d6ebeb84fc6269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:f1:f1:5a:9b:ea:f9:2c:3f:c1:98:c3:fd:
51:be:42:8d:7a:e2:d0:0e:f7:03:40:6c:dc:4c:ad:
fd:0e:bd:b0:2a:cb:73:15:d1:6f:8d:9f:fb:2d:7d:
07:73:af:6e:26:ae:72:e1:64:5a:5e:77:a3:9d:5b:
27:2a:74:28:dc:bc:6c:f9:35:d0:a5:01:d6:d3:34:
45:43:4c:bd:9d:3e:35:dc:c0:0b:ec:e7:27:b7:7c:
51:e0:82:f2:a0:b3:09:00:74:a0:ec:00:ad:aa:b6:
6d:d1:91:36:1a:43:7e:b5:e8:57:ab:07:d6:4e:be:
38:e9:0f:a9:41:11:64:21:4e:98:f4:43:ae:df:a8:
65:81:17:07:c1:12:93:6f:d0:20:b0:57:cc:69:70:
c8:97:96:d1:84:63:90:da:4f:9f:67:56:40:9b:da:
52:c5:21:f6:ad:40:4c:70:df:3a:70:66:5b:e0:73:
07:3f:a1:2c:c3:29:ce:63:50:8f:f1:9a:1a:15:62:
43:a4:ce:85:82:79:8a:02:17:f1:65:df:26:94:28:
f3:73:ec:f2:e0:ca:d7:41:ae:9d:8f:9d:23:49:d8:
64:0a:0a:f4:aa:e0:51:71:45:60:6d:a7:97:f9:23:
3b:10:b6:da:88:ad:a4:a0:71:52:27:de:4e:9f:f0:
f6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:07:91:1E:C7:7A:3B:08:DD:5B:C4:EE:56:D6:EB:EB:84:FC:62:69
X509v3 Authority Key Identifier:
keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c6:de:a8:28:09:e9:53:df:53:f2:eb:36:06:9d:66:0c:6f:
28:f6:2f:bb:c3:f2:76:6a:27:2c:f1:c5:c8:5d:27:ce:ac:cf:
0b:01:e8:6a:f7:ce:39:be:51:41:9e:a5:bd:d9:b2:6e:be:b2:
48:56:b7:b7:b6:89:63:a8:46:29:68:0d:01:b7:3f:c3:d7:5d:
aa:f7:75:cd:58:57:28:ae:38:18:b5:9f:95:99:b2:26:49:91:
4c:86:18:b9:d4:ea:fe:81:e8:f8:fd:d3:49:29:00:28:f1:1f:
19:e6:63:ac:84:3a:19:c9:a3:65:92:4c:77:63:82:80:d0:91:
14:de:0f:9f:a3:4f:d3:aa:ff:88:da:dd:71:cb:09:92:e4:b4:
52:c9:45:e4:b8:f5:80:fd:a7:7d:a3:f8:82:2b:f6:e6:be:43:
23:62:e9:43:e3:47:5f:df:25:b8:15:6c:c5:9b:e4:9f:13:89:
52:88:32:88:e4:3e:5c:48:16:8a:15:b8:a8:69:2c:24:72:bf:
b6:04:27:35:5f:77:c4:fe:bf:98:56:e2:23:68:9b:7b:b6:86:
52:92:06:fe:fe:1a:5c:0c:b4:5b:26:3f:4d:f0:67:49:3b:9f:
9b:34:81:85:65:d6:05:60:39:d4:38:22:06:f0:d4:8e:00:1e:
b2:b9:df:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 21:48:11 2025 by rpki-client