Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
File: wHCBpvcho3qeHXmTFbs-onWLiHc.mft (raw, json)
Hash identifier: uNnnSfKbdw2y8s89RZmPGSH2QlZCMvZHNEF6Zo7THQ4=
Subject key identifier: EF:24:ED:C8:00:DC:A5:96:09:B1:9F:52:5C:FC:7F:10:A7:10:47:66
Authority key identifier: C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
Certificate issuer: /CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Certificate serial: 019A73011C9E46A58BCD1D135300AD8687B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
Manifest number: 0674
Signing time: Tue 11 Nov 2025 13:00:43 +0000
Manifest this update: Tue 11 Nov 2025 13:00:43 +0000
Manifest next update: Wed 12 Nov 2025 13:00:43 +0000
Files and hashes: 1: iBvouIeGNb-tETlrG7R7kd8KLJk.roa (hash: ZFh8TKmia8sW44WOw2BVZ15xBNpA9QpJzWskGjFsYMo=)
2: wHCBpvcho3qeHXmTFbs-onWLiHc.crl (hash: oB7ouQW1o4t+EJ6zzg0D2F1JFJX/Svc+fIbFBGWUzuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:1c:9e:46:a5:8b:cd:1d:13:53:00:ad:86:87:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Validity
Not Before: Nov 11 13:00:43 2025 GMT
Not After : Nov 12 13:00:43 2025 GMT
Subject: CN=ef24edc800dca59609b19f525cfc7f10a7104766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:22:ba:0f:3d:f1:9e:3d:96:24:29:15:ae:
3b:9f:58:c8:e4:7b:31:cf:52:1d:5c:4a:07:84:d7:
12:1f:3e:9f:65:c4:ac:33:fa:df:54:4e:20:59:16:
ef:d8:de:32:fb:ac:9e:c8:79:c5:af:7d:95:32:13:
36:a3:21:49:d4:8c:2d:cc:f6:b5:b3:15:22:18:23:
ee:72:d3:1a:c0:c3:ca:c3:5a:21:3d:47:d0:95:af:
8c:db:2a:f5:60:0e:d8:69:9d:b2:40:d7:b1:5e:ca:
9b:a7:d0:0c:d7:38:b0:1d:3d:5c:54:e2:5b:51:eb:
5f:be:17:88:5e:3f:46:34:29:c2:a4:7b:12:46:74:
09:4c:c0:c4:6b:7c:59:ef:b8:a4:a3:00:68:15:b2:
2a:30:5e:02:d1:5d:85:d0:d9:92:d9:a6:49:72:44:
fd:26:3f:e2:80:7b:49:ae:ab:69:a3:c1:8e:f7:1b:
3d:02:72:5c:3a:9f:86:1e:a5:a2:7d:6d:1c:30:40:
9e:41:cb:f8:46:e8:a4:df:0b:07:32:2d:35:ec:11:
40:47:9b:97:c1:31:71:d2:e5:dc:4e:46:67:38:96:
ef:be:82:ce:e1:7d:68:33:8e:70:ba:79:55:c8:d9:
05:8e:8c:e2:a1:fd:0a:ad:76:f5:b0:9e:96:93:47:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:24:ED:C8:00:DC:A5:96:09:B1:9F:52:5C:FC:7F:10:A7:10:47:66
X509v3 Authority Key Identifier:
keyid:C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:40:22:41:43:ae:b0:cd:81:64:e2:7a:12:73:12:5f:ca:6a:
37:5f:7a:81:cb:ff:80:9d:3c:47:d9:8e:bc:7b:1f:a5:16:01:
ad:b3:22:9b:2e:0d:d4:ee:f3:b2:4d:3c:50:0f:08:67:09:7c:
e4:89:5d:26:9a:55:59:e9:8a:a5:2f:a7:1e:df:33:e0:5b:96:
bf:f9:34:43:85:46:43:70:cc:b2:61:5b:e4:8e:a4:7a:7f:04:
0c:dc:fd:b5:80:aa:7c:da:e1:57:12:f7:74:e2:84:ba:90:aa:
20:6c:42:81:cc:db:a2:3f:38:e8:7c:7a:27:5c:32:42:be:e5:
2a:93:85:1b:ed:89:89:e1:4b:2b:bc:75:de:53:4a:ca:70:11:
8e:5b:de:1a:3b:60:ac:46:94:27:0b:ee:51:bf:82:66:bc:03:
c2:9d:35:83:26:fa:2f:29:e6:56:7b:06:19:d8:31:63:2b:0e:
58:dc:21:6c:92:b3:63:76:4f:b3:52:03:77:62:09:aa:8b:15:
cf:03:56:ee:5d:56:39:e0:aa:52:37:22:3a:32:49:d5:02:cc:
a4:a3:89:29:1f:17:b1:06:7a:17:b3:89:f5:25:52:21:0b:88:
2e:61:50:6b:a3:1f:4b:9d:13:0b:5f:8a:b3:30:92:95:e7:bc:
46:bc:92:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:12 2025 by rpki-client