Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
File: wLjiV5ep3EPC5GOUsMixsQirQ7k.mft (raw, json)
Hash identifier: G0spN8N/Ol+Yk1vT2RnSoSM9b52x8zPv8OB6jB07No0=
Subject key identifier: C4:A1:E1:DC:0A:57:1E:32:73:B1:56:5D:40:F6:24:72:47:E5:55:BA
Authority key identifier: C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9
Certificate issuer: /CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
Certificate serial: 019A01B5F8455E5ACA3347730F554F4F9157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
Manifest number: 0575
Signing time: Mon 20 Oct 2025 13:01:33 +0000
Manifest this update: Mon 20 Oct 2025 13:01:33 +0000
Manifest next update: Tue 21 Oct 2025 13:01:33 +0000
Files and hashes: 1: 3oLf6nYLu-Xr7qpLQICeS2w7Tus.roa (hash: XtsupCW4EVcqvMqJHKb5yPLyEGcRcTQPpgXjTIHJ3Z4=)
2: wLjiV5ep3EPC5GOUsMixsQirQ7k.crl (hash: SI39fFmzodl9ikLMxXkil5TrtgA/nVVlwphx5su3AE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:f8:45:5e:5a:ca:33:47:73:0f:55:4f:4f:91:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
Validity
Not Before: Oct 20 13:01:33 2025 GMT
Not After : Oct 21 13:01:33 2025 GMT
Subject: CN=c4a1e1dc0a571e3273b1565d40f6247247e555ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:d2:12:33:ea:60:9a:c9:79:d4:97:e7:ca:
5e:76:56:75:ee:d7:e8:bd:8b:02:ba:d5:44:2a:a9:
1a:3a:81:a6:32:2b:6d:c8:45:6c:c1:a3:71:5a:86:
79:38:eb:79:09:0d:67:03:69:20:45:af:75:48:2e:
b9:19:7e:40:6a:59:77:88:67:99:70:74:96:f1:70:
a1:b0:1f:d8:80:98:73:79:e4:b1:9c:2f:0e:4c:7a:
63:52:19:cb:c1:d3:2a:d5:ff:21:31:a7:2f:4d:d4:
fa:8d:bc:25:9a:24:7c:1c:2f:8a:7d:bf:3f:b1:6c:
45:ea:c1:66:0d:fb:7c:4c:82:e8:a8:55:51:25:ce:
7d:bd:e6:09:b5:95:0e:ff:0b:74:ee:f6:c1:34:90:
00:0c:78:ea:84:19:6b:c2:9e:84:a7:0f:d1:35:68:
b5:d3:a6:47:9c:ed:d7:79:fd:e9:94:28:30:6e:9a:
1b:e3:59:8b:12:64:cb:4a:cc:ed:e7:76:2b:41:89:
42:78:30:e0:84:be:d4:96:72:98:75:3d:2a:d0:76:
6a:0d:a9:f9:92:91:91:6b:11:8f:0e:36:81:59:9c:
2a:aa:d1:57:de:ec:53:28:0e:a4:5f:35:0a:df:da:
54:f5:91:a5:1c:55:fe:17:9a:f3:03:3e:fb:e1:17:
d0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A1:E1:DC:0A:57:1E:32:73:B1:56:5D:40:F6:24:72:47:E5:55:BA
X509v3 Authority Key Identifier:
keyid:C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:69:93:e8:27:c9:08:87:71:b9:16:85:c7:cc:46:dd:f9:8b:
f3:24:7b:3c:3a:70:9f:5f:bd:f6:b6:83:0d:50:c7:70:4f:3e:
91:bf:76:f2:ac:29:ed:fb:15:8b:1d:68:ab:7a:6e:40:c8:ff:
d1:21:f6:ce:a7:ac:5c:ed:1e:33:13:1c:db:c8:6a:c4:c7:db:
3a:66:78:a3:9f:dc:80:0f:18:52:08:22:9d:92:54:20:e4:75:
37:40:b4:1b:49:09:06:41:37:c9:9f:65:ec:ca:b5:bb:c7:40:
9e:c4:47:66:58:7f:60:96:71:6e:e0:bd:16:4c:6c:b0:3c:86:
82:03:d1:af:c0:c1:0e:08:1b:7a:5b:82:23:dc:92:b7:62:ee:
1a:09:92:d8:18:41:44:cc:db:75:7e:68:60:34:ba:34:75:63:
f3:46:a2:92:c6:d5:4a:11:af:15:a1:a6:ac:29:bc:68:df:95:
99:24:fc:59:f2:63:0b:e9:92:7b:50:88:cf:82:fe:fa:b2:e7:
8f:a6:bb:d8:37:10:c7:b9:ef:05:bc:62:38:6e:a5:8a:d8:cf:
5b:74:4b:04:60:b7:f0:04:36:be:10:21:09:13:9f:44:24:1a:
47:e6:9c:09:53:22:c5:db:34:0c:6c:e0:17:8b:28:93:58:3f:
b8:85:ab:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:42:05 2025 by rpki-client