Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
File: wFB0h3942_Sb03ohVJHmmg-LbkM.mft (raw, json)
Hash identifier: lEziLvPr5XZWGg3X/2ybMbqa+Ucr2EHgR3gxsVq+YhM=
Subject key identifier: 8D:83:30:A4:D9:0D:F9:17:2B:C8:2D:46:39:19:71:98:B1:E7:45:58
Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
Certificate issuer: /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Certificate serial: 019A00357192A79462014CAFBED73D894250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
Manifest number: 0D45
Signing time: Mon 20 Oct 2025 06:01:33 +0000
Manifest this update: Mon 20 Oct 2025 06:01:33 +0000
Manifest next update: Tue 21 Oct 2025 06:01:33 +0000
Files and hashes: 1: NleuP1D5q1HYCx1bniu7S0UGnKU.roa (hash: ZHCVqddSwzrZ5jTMPPMLkCEjlBptOTx+uNZ09AcVm1s=)
2: wFB0h3942_Sb03ohVJHmmg-LbkM.crl (hash: /VSY0B7VtVvET1Pc5EOfEmhdsShy17qTmtV9X7AZ61M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:71:92:a7:94:62:01:4c:af:be:d7:3d:89:42:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Validity
Not Before: Oct 20 06:01:33 2025 GMT
Not After : Oct 21 06:01:33 2025 GMT
Subject: CN=8d8330a4d90df9172bc82d4639197198b1e74558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:cc:b3:3d:52:74:7f:ca:ef:a8:f4:de:1e:
d2:b5:1d:20:e6:60:ab:54:5d:88:92:df:a8:38:e4:
f1:e0:74:ed:90:7d:07:46:8f:e8:5a:23:3b:b2:79:
a6:6a:14:71:f3:ef:bd:b3:f4:22:f2:da:7f:ee:8c:
3b:c8:3c:5d:d3:95:1e:aa:16:38:bc:f1:c8:52:a5:
c8:4c:ea:3b:7d:28:83:98:9b:6c:1a:1b:4b:2f:31:
24:d0:bb:da:01:72:29:6b:8b:50:ea:4c:2c:eb:50:
2a:4d:ed:e5:4b:90:a8:26:9c:d5:3b:17:e3:2a:17:
10:08:56:29:b8:b1:d6:dd:8e:61:25:7a:12:55:8c:
ec:8f:2e:f3:0a:db:a6:08:c6:ed:88:52:df:fd:6c:
ec:24:c0:fe:09:fc:f5:c1:a6:01:ce:4b:bf:97:79:
c0:83:28:a3:63:16:fc:00:f5:4c:4c:34:97:5d:6f:
cb:eb:d7:38:6e:7f:4e:6f:50:3e:da:11:82:da:e2:
88:df:b2:6b:21:b7:83:a8:ce:45:20:50:1c:36:10:
f8:25:42:28:b7:e6:7c:ac:60:50:dd:6a:0f:30:42:
d6:0e:e2:a8:c5:39:a4:6c:00:f8:3a:44:57:91:9a:
ed:d9:07:53:9a:53:d0:17:7e:7d:5e:bd:67:07:42:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:83:30:A4:D9:0D:F9:17:2B:C8:2D:46:39:19:71:98:B1:E7:45:58
X509v3 Authority Key Identifier:
keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a0:eb:15:95:86:9b:c3:c9:58:14:8f:c9:59:7f:a6:73:2c:
28:1c:dd:9f:e3:2c:89:a7:f2:a4:b2:6c:c8:ad:ec:42:24:ae:
c7:05:ba:8a:0b:6f:29:e5:ed:0e:45:33:9b:00:e1:2c:4c:b0:
f7:b9:11:76:36:81:e4:5e:2a:8a:05:5d:ae:a9:3e:cd:61:b5:
08:1b:7f:c7:bc:c6:7f:7b:7c:d3:71:04:f6:eb:f7:30:a9:6f:
86:11:4e:15:ad:3d:b7:10:63:2f:99:76:a0:6c:91:6c:e5:d4:
c3:9c:60:9c:53:43:55:c3:72:ef:32:20:79:cf:75:ca:f8:35:
f8:4f:21:6e:ea:8f:28:ed:76:61:24:bc:60:fa:02:d9:e5:51:
a5:62:3a:9d:65:04:35:c6:b3:29:65:e3:af:66:fc:f5:4a:4b:
39:e4:c0:49:7e:29:92:6a:a5:a2:c6:d3:fe:e6:80:f1:57:40:
72:ff:b8:1a:0e:8d:70:de:34:a3:57:98:e5:0b:01:5a:85:8c:
b4:6b:f8:2e:e9:c9:1e:7f:5d:6d:ca:29:21:1b:b8:06:4d:5c:
a4:d8:95:ca:6d:57:f3:71:42:61:72:74:b0:54:4b:1a:63:1d:
f5:8e:b3:af:10:03:16:64:9d:73:9e:18:b3:88:fe:6b:7c:16:
ea:0e:97:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:58:47 2025 by rpki-client