Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
File: wBekqCFysgav7hwT0pbuJgOFtXE.mft (raw, json)
Hash identifier: vjIwKmJOnlWM5lUBNooIVAa3m333feFVIrm18yBJbk0=
Subject key identifier: A4:AA:CF:2D:3C:75:1A:9B:7C:A4:0D:09:7B:8B:7E:12:DA:64:28:43
Authority key identifier: C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
Certificate issuer: /CN=c017a4a82172b206afee1c13d296ee260385b571
Certificate serial: 0198D6CDEAE4D6D86B91A784FCCAEC7967EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 12:01:15 +0000
Manifest this update: Sat 23 Aug 2025 12:01:15 +0000
Manifest next update: Sun 24 Aug 2025 12:01:15 +0000
Files and hashes: 1: dCiNIBkWF2RsTfBzLCoJZdfeZWw.roa (hash: YbTpFGUkZZd0ope4WSof9klg7VlGCuc2kGLkcWvVqI4=)
2: wBekqCFysgav7hwT0pbuJgOFtXE.crl (hash: hjinDHYFWul/FAvLsNWOgvrHnyosYCwvhGVH9P/5aGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:ea:e4:d6:d8:6b:91:a7:84:fc:ca:ec:79:67:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c017a4a82172b206afee1c13d296ee260385b571
Validity
Not Before: Aug 23 12:01:15 2025 GMT
Not After : Aug 24 12:01:15 2025 GMT
Subject: CN=a4aacf2d3c751a9b7ca40d097b8b7e12da642843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:94:15:40:0d:af:f3:4f:d6:14:39:a9:1d:
41:08:ad:36:cc:11:aa:1d:9d:13:51:4d:68:62:1e:
7e:d0:63:6e:e9:5b:61:50:c3:04:57:b6:75:7f:d5:
76:c9:8d:67:0c:27:8e:ac:fd:bf:71:ad:ae:02:2c:
ed:00:68:29:68:68:55:f0:58:b5:f0:dc:0d:2a:52:
bc:30:fa:b7:66:1d:97:80:5b:9a:28:77:56:c4:e4:
3d:1e:6d:ca:60:10:6b:9b:33:7d:39:a5:51:5a:c9:
31:39:66:df:d9:4f:a2:a4:d2:87:13:76:c9:71:e3:
fb:72:b5:b2:30:cc:85:37:b5:26:97:9b:ab:2a:92:
2e:b0:43:1a:4b:29:a1:93:b1:ee:c2:b1:a7:fe:25:
98:b2:f6:56:fd:8d:d1:7d:3f:c2:38:c1:6d:b2:4e:
f5:b0:5a:cd:11:e6:2d:65:81:d7:27:07:32:9a:5a:
3a:fe:be:d1:d3:b6:ce:72:d6:bd:6e:36:32:3b:b6:
e5:71:a7:c4:ad:cb:3e:0c:87:be:54:17:c0:51:52:
2e:b3:54:f7:20:a5:4d:b0:ac:76:ff:6a:39:3b:2b:
59:c5:cb:0d:30:8a:b9:27:17:95:b5:36:a9:85:a7:
85:40:c6:f2:cf:de:a4:9c:83:57:d6:e3:e7:f9:4b:
c3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AA:CF:2D:3C:75:1A:9B:7C:A4:0D:09:7B:8B:7E:12:DA:64:28:43
X509v3 Authority Key Identifier:
keyid:C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a2:5b:f5:15:27:f3:05:57:55:e4:54:ae:4c:60:d4:83:9b:
1a:17:93:f4:74:23:a6:60:c4:76:f3:13:05:3b:42:f4:db:ad:
57:c9:83:10:19:9b:3b:b9:a6:24:7b:26:ec:20:70:2c:c7:ee:
37:9a:e3:b5:8f:7b:7b:df:d9:52:5c:bd:65:8a:d1:32:87:03:
20:cd:80:81:1e:f7:d8:85:73:25:d9:bf:85:cf:22:39:5c:1d:
73:62:1a:e3:2a:10:f6:12:5b:23:bc:c7:3c:9c:aa:5b:06:e4:
b8:7f:cf:05:10:99:00:cf:26:f6:5a:e1:7b:ae:5a:4c:6c:39:
e3:7c:dc:0c:25:86:dc:b2:cd:d9:fa:e1:d7:9d:f2:83:a6:2f:
02:32:75:15:63:77:f2:a3:10:1d:b1:b5:5e:f4:4a:5c:02:5b:
3f:8b:d1:29:fc:93:53:3d:f1:44:74:44:58:f3:21:84:92:e6:
d5:46:0d:c6:3e:70:00:bd:ed:53:7a:08:f3:5b:18:f6:c8:6e:
5a:8b:dd:d6:7e:75:65:7e:34:b3:fd:d6:c0:df:f1:a7:4e:8a:
25:27:23:f9:ad:6b:e4:a7:a0:2b:95:d3:23:a9:68:80:d9:4a:
f8:00:16:fb:5e:12:65:42:29:f1:29:5e:3b:aa:80:ab:d9:2e:
81:b0:02:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:35:03 2025 by rpki-client