Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
File: WxweBiQDm9HxqUbLUTyTOG-raxk.mft (raw, json)
Hash identifier: KwMuG2t2/fvESO9PI5jAM1CDMVg2ZpxPniq1phy2fz0=
Subject key identifier: 81:39:13:57:C6:B4:98:13:43:2C:4E:24:79:27:59:E7:74:6C:23:08
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 019A7225AA594B98AE7E866A33820B8A6F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
Manifest number: 0D1F
Signing time: Tue 11 Nov 2025 09:01:02 +0000
Manifest this update: Tue 11 Nov 2025 09:01:02 +0000
Manifest next update: Wed 12 Nov 2025 09:01:02 +0000
Files and hashes: 1: J8g7cZ3te-XjH4vB99S63bY5jw8.roa (hash: kTqC/5LOxbM1zdbO1odgPNoINkirS3IzV43BF84XudQ=)
2: WxweBiQDm9HxqUbLUTyTOG-raxk.crl (hash: NHFteH+heS92kpVP7WhTspIk0DokbqVWVLSltQgy0uY=)
3: n6GsozsAIUsV5q_nwqboXGBIS0o.roa (hash: SV+wqJcEFOa4P82VjIfU8axnoITYl7V615IXuKpHvcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:aa:59:4b:98:ae:7e:86:6a:33:82:0b:8a:6f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Nov 11 09:01:02 2025 GMT
Not After : Nov 12 09:01:02 2025 GMT
Subject: CN=81391357c6b49813432c4e24792759e7746c2308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5f:3a:fb:87:e2:89:4a:e3:c1:83:17:30:c6:
b9:f9:54:3c:e1:0e:f5:54:92:f2:9b:4f:a2:02:c0:
41:e4:be:3b:61:af:b3:2a:1a:a2:53:ad:d1:fe:cb:
f9:ae:1f:75:48:9f:da:9a:b2:71:40:5c:50:84:7b:
a2:aa:be:34:3d:8b:f9:f1:1a:de:db:48:11:e9:3f:
10:0a:67:d9:a8:a3:ea:ae:cc:84:72:72:db:a6:1a:
ca:cc:1e:a4:cb:9a:96:b4:a8:86:60:75:3a:d4:7f:
0f:93:38:19:e5:60:db:ea:bc:28:b7:72:a2:ac:ac:
3b:64:bd:74:20:a1:78:e8:29:6d:10:d2:5a:2d:5d:
5f:c4:ed:58:05:dc:89:71:d1:e9:20:c0:7f:52:b1:
f0:91:52:3a:e4:c2:07:12:08:55:ea:38:f2:24:b3:
44:f9:ba:54:66:9c:46:b6:79:b6:56:f9:22:2a:ab:
83:c9:61:b9:7d:07:d6:e9:a9:2a:a3:50:da:59:83:
ad:77:d3:e8:d5:06:94:54:8e:65:13:89:7b:c7:ec:
99:e2:44:d0:e7:70:b7:03:99:87:ba:00:4e:54:ff:
92:46:c4:fd:ac:02:20:5c:9a:75:06:80:31:a8:0c:
91:55:3c:9f:2e:c2:2b:7d:ce:ee:d1:6c:2f:bd:d7:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:39:13:57:C6:B4:98:13:43:2C:4E:24:79:27:59:E7:74:6C:23:08
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d3:87:8b:03:2a:23:8a:86:d2:d1:13:57:87:4e:94:21:84:
3e:89:81:c7:37:9c:9f:84:ee:2d:3e:a9:f0:24:bd:da:d7:bb:
e2:2e:bb:e4:bd:a6:26:1d:4b:b1:a9:71:54:97:1b:62:a9:68:
41:e9:d4:a9:b9:8c:9a:24:8c:df:1f:7b:6f:28:4b:d8:1a:4c:
99:bc:84:63:c0:f0:93:64:15:8d:7a:89:9c:69:b5:21:44:c6:
ad:cb:83:88:83:07:0a:60:a5:fa:8d:66:74:c0:8e:b5:55:ec:
44:b0:b8:20:98:c5:ca:1f:4b:e7:af:f5:16:05:09:0a:4a:9b:
ba:c8:bc:d9:b2:3c:df:bc:bc:ba:79:1b:87:8a:1c:56:3d:c4:
b4:a4:0a:00:b0:17:0f:cd:65:76:d0:fc:69:3e:92:61:6f:e1:
3f:eb:94:3f:53:5b:3d:23:a3:2d:50:12:0f:05:89:57:9f:bf:
6b:1d:9c:61:15:b5:0d:dd:b4:cf:be:5c:d3:4e:a0:5c:70:13:
ee:e7:51:0c:1d:9f:6b:79:6e:b2:b9:d3:3d:0e:d8:b0:03:e2:
d7:a6:4b:37:01:24:56:00:8a:71:48:46:90:88:f3:de:68:2b:
54:e4:5d:e7:af:a9:81:66:50:72:85:8c:ac:97:30:c4:61:3a:
7b:92:c0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:32 2025 by rpki-client