
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
File: wesHbRZwLH2-qXLily71dqHyyHM.mft (raw, json)
Hash identifier: RvB4eenz0z/swtvgwDyGX7dxkl3fZdRZ3uUpRYjQBSA=
Subject key identifier: 63:6A:D3:31:8E:E9:1E:25:57:F3:61:EB:17:31:7A:21:2E:9F:19:5C
Authority key identifier: C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73
Certificate issuer: /CN=c1eb076d16702c7dbea972e2972ef576a1f2c873
Certificate serial: 019A72CA7C9C6E7FB0031644131807E112FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 12:01:04 +0000
Manifest this update: Tue 11 Nov 2025 12:01:04 +0000
Manifest next update: Wed 12 Nov 2025 12:01:04 +0000
Files and hashes: 1: 2UZkcfvHBD0nlLVShbBCdFbgaEM.roa (hash: HqtlmZWEJIZpNtC58lOjwfZX2SNzuDVgWAhhp7ppdfQ=)
2: R9E_qtj1VUjv3jJ8H84LoeWhd-Y.roa (hash: e3y1w4/pEQBqLE2b/SIgYWYr4YtTdvlqNQkpHYOPhyQ=)
3: frLrA0keoZHqLNQ6H6mr7HttS6s.roa (hash: Mfy5d8aC18pzCzwCyFVqYxGvs9LiQ6tdwOia7qFz85A=)
4: twmga9_E_KzkAm9sOwBfykbdGZk.roa (hash: BS47sv4rbsHbtLhVm7asDcUh2pqMrmQZsTAWkFmOWjE=)
5: wesHbRZwLH2-qXLily71dqHyyHM.crl (hash: rP7Won1MsniyJAphdzSwEDIUMPSHwowNUZG7IDjHVD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:7c:9c:6e:7f:b0:03:16:44:13:18:07:e1:12:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eb076d16702c7dbea972e2972ef576a1f2c873
Validity
Not Before: Nov 11 12:01:04 2025 GMT
Not After : Nov 12 12:01:04 2025 GMT
Subject: CN=636ad3318ee91e2557f361eb17317a212e9f195c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:da:76:b5:9e:69:8f:4d:cc:6d:0e:d6:a6:
44:28:28:ac:17:f9:cc:11:cb:83:48:97:e3:81:b1:
f7:10:a2:ba:9c:f5:df:31:3f:1f:ba:89:a2:78:2a:
42:02:95:05:eb:c1:ed:f3:75:79:96:d4:d5:18:97:
47:a8:3d:2f:e8:6b:95:7f:36:ca:0e:f0:d1:eb:4a:
39:24:5c:68:f0:9f:c9:22:2f:8d:2f:79:6d:a6:32:
41:37:15:3d:b4:74:de:29:d1:f2:f6:d2:40:e8:00:
fe:6f:af:28:83:cc:aa:9a:b3:5f:45:aa:50:c1:26:
3a:71:8a:94:bf:3d:5b:24:31:90:a3:c9:76:bf:35:
73:67:3f:08:e1:0a:72:9e:59:40:8f:23:a8:d7:ff:
87:15:0a:b9:ce:90:b5:44:6a:61:88:ab:3a:73:10:
a7:11:81:27:a1:c8:9b:12:5b:e1:01:15:93:19:74:
1b:cb:5f:b1:1f:8d:f0:80:d6:27:f5:cc:6e:cf:b5:
b3:ff:57:e3:76:54:9f:ec:e1:f4:d8:ad:21:30:a4:
29:9b:9f:a6:53:45:53:3b:0b:0d:be:dd:29:e2:61:
75:f8:25:42:85:51:35:44:ab:f7:f6:29:f9:c8:13:
4c:6c:19:36:69:f4:c8:81:4c:f8:3b:19:12:15:6b:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6A:D3:31:8E:E9:1E:25:57:F3:61:EB:17:31:7A:21:2E:9F:19:5C
X509v3 Authority Key Identifier:
keyid:C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:71:66:b7:f2:20:6a:cc:a4:07:77:b5:50:0d:63:78:47:26:
a3:28:81:9d:62:75:88:69:68:dc:d3:91:c0:ff:36:ee:5c:9e:
42:32:75:11:2d:56:65:70:7d:81:17:c4:6e:27:9a:7c:a5:ca:
48:e0:d3:13:58:ca:b8:91:40:37:e3:d0:e2:ce:b1:9a:7f:6e:
d5:5f:38:de:76:67:4b:9b:15:2f:c4:a1:4f:22:30:60:d6:1e:
59:f5:7c:61:bf:22:f8:fb:b4:15:a3:ab:10:29:5b:75:e0:c1:
67:f6:bc:e1:ff:64:0b:e6:a1:8f:b0:bd:08:28:b1:e9:7d:d6:
cb:7e:b3:5e:fd:45:f9:68:a8:a5:2a:a0:c3:ee:06:db:02:66:
26:81:30:82:da:28:96:44:90:9c:e2:24:69:4d:0c:f7:0c:23:
37:8b:ec:cc:af:91:45:e1:81:ba:2b:c6:b4:f0:cd:52:94:8c:
d0:3f:7a:a3:15:4b:d2:88:3a:6e:fc:30:ed:97:cd:7e:89:e9:
35:36:37:ef:23:5c:d4:a6:82:40:e1:bc:41:31:23:4a:4c:47:
b2:1b:fb:8a:80:3e:43:53:3f:bd:1b:15:b0:ea:20:22:6f:77:
53:98:82:4e:f7:56:f5:d2:7b:a0:d2:73:01:66:49:4d:f3:bf:
49:96:e9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:45:53 2025 by rpki-client