Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
File: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft (raw, json)
Hash identifier: 8WZnFztG0oZJRUk/bI9LZAjXb3OM12nfUEIHqh9tjpo=
Subject key identifier: 10:63:9F:1A:6F:59:ED:EB:D0:F2:D6:34:B4:38:D9:38:5A:8F:0E:B0
Authority key identifier: C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
Certificate issuer: /CN=c30aef396394ea5950dc7956ab1bf491364622a4
Certificate serial: 0199FC2186B5B698F243C465BB4BC047CC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
Manifest number: 163C
Signing time: Sun 19 Oct 2025 11:01:19 +0000
Manifest this update: Sun 19 Oct 2025 11:01:19 +0000
Manifest next update: Mon 20 Oct 2025 11:01:19 +0000
Files and hashes: 1: rZbNK2xJ4XhKao8afy4CimeXVSk.roa (hash: DH234KafhTlCh4Rrjfu8Y3PnZSWa2Wt2QfsLpMy42vQ=)
2: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl (hash: mxRxr9qkaToHFeW3nhDmtToqvjM8jcc9+BHJutKKxwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:86:b5:b6:98:f2:43:c4:65:bb:4b:c0:47:cc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30aef396394ea5950dc7956ab1bf491364622a4
Validity
Not Before: Oct 19 11:01:19 2025 GMT
Not After : Oct 20 11:01:19 2025 GMT
Subject: CN=10639f1a6f59edebd0f2d634b438d9385a8f0eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7f:54:0c:01:b8:86:b4:bf:67:8c:83:3d:5a:
6e:df:61:30:20:86:93:6f:ac:f8:9f:8c:7f:0f:e7:
21:62:16:4d:56:b2:0b:38:32:76:f0:7f:5a:4c:29:
23:3d:12:d4:0e:16:d5:9c:53:68:d4:8f:50:73:7e:
69:11:81:aa:2f:cd:43:d8:49:40:f3:b2:83:c2:50:
d8:53:6a:2c:b1:df:66:eb:01:b3:59:0f:b2:b8:63:
01:a5:07:69:69:20:41:4b:b7:bb:a7:b8:b5:75:b2:
92:a2:cd:48:c5:e0:2c:a7:dc:df:23:59:b2:aa:f0:
3f:ba:3e:eb:67:55:bc:18:37:37:b1:da:0a:38:0c:
07:fe:00:2d:4d:28:7f:fe:f5:81:26:40:f7:7d:83:
80:01:87:0c:04:f0:5f:a8:cc:26:65:ab:51:f0:30:
31:96:dd:d2:78:e7:a7:b3:6d:b8:48:22:86:19:e0:
37:a0:1f:13:0b:01:41:cd:d5:ee:7f:67:dd:9c:0f:
0d:2b:ee:39:60:28:b9:e9:e6:51:b9:5b:b0:c0:76:
48:ed:1c:d4:b5:37:09:5d:78:7b:d1:cb:45:d5:63:
79:ce:6e:07:73:1d:6d:fa:20:0e:ba:9d:d0:cb:8e:
55:96:2f:78:28:39:ce:b6:c9:7c:31:62:43:e5:de:
34:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:63:9F:1A:6F:59:ED:EB:D0:F2:D6:34:B4:38:D9:38:5A:8F:0E:B0
X509v3 Authority Key Identifier:
keyid:C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:55:37:5b:7f:a0:3a:16:fc:84:d0:bb:ca:dc:0f:9f:26:15:
6e:42:a1:bb:bc:68:11:bf:c8:8d:46:11:56:e8:fe:5f:a4:8c:
20:aa:93:34:6f:32:67:09:fe:2e:96:db:b7:49:6f:a1:61:84:
2e:28:0c:b2:d3:4d:a5:ee:6b:23:16:6d:7f:d7:af:b8:ff:4a:
12:3b:c1:25:da:77:b1:28:c0:72:2a:38:85:66:7d:f2:7b:6e:
d3:b9:0b:f8:b1:f5:63:13:30:dd:e0:cd:66:39:c9:90:37:26:
3b:46:30:0c:10:c0:d5:87:f0:fa:72:f4:cf:a8:fa:de:88:ca:
bf:97:07:b9:66:43:32:de:37:3c:9d:ad:10:54:e4:c9:1a:50:
75:43:46:1e:80:eb:a7:20:d7:a0:ed:0f:c5:aa:44:89:ab:d8:
fe:96:42:30:fa:aa:de:41:18:c8:6b:2a:55:e6:7c:66:7f:ee:
f1:33:8e:b0:d0:9b:3e:8c:7a:1c:44:3c:30:f5:c0:e8:97:11:
39:c9:6c:d9:e3:9f:c9:cf:f1:02:05:0f:92:8b:77:d0:e5:4b:
5d:6c:56:84:73:77:bf:33:4d:20:94:20:d7:72:18:d2:e6:6a:
04:11:fc:ca:35:76:b3:fb:82:9f:95:12:b8:c4:58:20:76:c3:
7c:a6:4a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:33 2025 by rpki-client