Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
File: wHCBpvcho3qeHXmTFbs-onWLiHc.mft (raw, json)
Hash identifier: 3CABYYWbc2XHpSqwPywr0Qro5t2c1a/nDcj3ozhzhQs=
Subject key identifier: 25:85:16:F5:0E:A7:13:8B:24:0D:47:95:07:24:78:96:5C:31:F8:82
Authority key identifier: C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
Certificate issuer: /CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Certificate serial: 0199FB458D4843B6CE825247098ADDB0D13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
Manifest number: 0636
Signing time: Sun 19 Oct 2025 07:01:03 +0000
Manifest this update: Sun 19 Oct 2025 07:01:03 +0000
Manifest next update: Mon 20 Oct 2025 07:01:03 +0000
Files and hashes: 1: iBvouIeGNb-tETlrG7R7kd8KLJk.roa (hash: ZFh8TKmia8sW44WOw2BVZ15xBNpA9QpJzWskGjFsYMo=)
2: wHCBpvcho3qeHXmTFbs-onWLiHc.crl (hash: zQEsJErWQABUaFW8e13R8UwgQmUei81VHUpqha9SJk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:8d:48:43:b6:ce:82:52:47:09:8a:dd:b0:d1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Validity
Not Before: Oct 19 07:01:03 2025 GMT
Not After : Oct 20 07:01:03 2025 GMT
Subject: CN=258516f50ea7138b240d4795072478965c31f882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1f:24:ee:b2:f0:94:d2:cf:24:63:ef:04:48:
5e:51:c8:32:47:25:23:90:a4:39:76:28:43:a9:cc:
e2:55:b9:0b:d5:0f:b1:14:f8:42:5f:24:07:22:38:
50:48:0e:f3:a0:10:12:e7:67:1b:a9:f8:f0:ce:a8:
18:f5:45:de:e2:bb:83:93:cc:dc:8e:d6:8e:39:df:
2e:65:53:78:0f:b1:98:05:e0:77:75:3b:2c:6d:fd:
6b:a0:55:fe:6d:50:37:c7:31:10:df:ca:e3:11:d1:
52:5b:f2:63:ce:c9:60:fe:e5:23:b9:de:48:22:bb:
c0:b2:ee:b6:92:11:0f:37:20:5b:93:13:53:67:82:
95:07:37:1c:04:f3:fc:34:c2:21:0a:49:3a:0b:26:
57:ce:7a:7a:c8:51:b0:54:fa:a2:26:e4:ac:91:44:
bd:73:50:42:4a:c2:40:b8:31:68:27:5b:46:0b:a5:
2d:c5:f3:b7:28:8c:ca:68:71:66:70:50:a4:f2:8c:
ff:dd:99:9c:fb:23:43:79:e2:82:76:bf:c6:00:ba:
c9:8e:f3:02:6e:80:b3:31:a2:cb:9f:8e:27:28:0c:
f9:9f:6b:10:e1:8e:2d:5c:5e:ae:1c:36:27:ab:a3:
0a:b2:53:a0:3c:cb:a7:b5:ce:b5:5d:4f:1e:29:1e:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:85:16:F5:0E:A7:13:8B:24:0D:47:95:07:24:78:96:5C:31:F8:82
X509v3 Authority Key Identifier:
keyid:C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:62:26:4d:ad:f0:9b:e2:2a:10:0d:df:2e:0b:25:cd:5d:c7:
49:1f:22:65:29:41:52:92:7a:73:6f:d7:44:d0:b8:b5:cf:03:
93:1f:a7:a2:39:a6:c0:da:64:a6:66:f2:32:bb:27:f7:bb:b6:
94:3d:cd:bc:b2:e5:c2:81:50:22:e3:44:60:74:3d:a7:74:b1:
6b:ef:51:b2:78:ee:6e:3d:b1:d4:59:d2:28:d1:1e:62:40:ac:
2e:b7:5c:2e:fc:0f:6c:94:55:70:2e:54:ab:1c:73:42:34:ba:
23:49:1a:2d:62:0b:c9:97:be:90:26:0c:37:26:f2:ac:07:29:
7a:60:c5:9b:ad:97:82:01:41:d8:0b:06:5c:65:bb:63:13:09:
19:13:71:51:bc:be:40:fe:97:2e:27:3a:a0:5e:3c:2e:33:58:
0b:a9:43:46:49:d5:38:4c:02:51:b6:57:0b:56:65:48:82:29:
b7:f2:24:48:e9:a2:bd:ae:c0:5e:17:8e:63:2c:fe:77:b4:0e:
35:9f:fe:17:32:a5:9f:27:dc:ef:22:9d:4f:73:80:c1:48:0d:
26:00:06:12:2b:eb:9d:2d:56:bf:05:96:97:02:b5:0f:4a:bc:
51:88:77:69:4b:8d:7a:45:a8:c2:08:56:85:ae:d6:2b:ed:f3:
b9:22:2d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:00 2025 by rpki-client