
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
File: wXLnuWJS7qhzJjPTulGpsFWDp7M.mft (raw, json)
Hash identifier: ace7tsAeAkQ5uynFBT0KKCxhRFdX+8b7M+pcwUCDCrg=
Subject key identifier: 96:CC:F6:E7:B0:90:75:DE:34:BF:C9:D5:4A:8F:76:9F:B5:D7:9E:ED
Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
Certificate issuer: /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Certificate serial: 0199FBEC1835E8DFC9364537546593352A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
Manifest number: 0DC4
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: W1KkGv3sjtsEadnyDnbZKiSJ0W4.roa (hash: Hwc+g3pqAXEzqdnTsf6BwWsSvsLJSB5kNUhL8qZNZ1g=)
2: wXLnuWJS7qhzJjPTulGpsFWDp7M.crl (hash: VQf51ZL5n5zup7i29q9RrPyKmeFLQyb6/RJ8LtAGXaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:18:35:e8:df:c9:36:45:37:54:65:93:35:2a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=96ccf6e7b09075de34bfc9d54a8f769fb5d79eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:26:78:00:43:ca:40:ea:d4:fe:ee:03:58:bf:
b4:4c:d8:7e:75:26:30:72:70:90:79:4e:35:95:f4:
bc:cd:74:bf:7e:5e:b8:ab:57:d2:78:e4:80:c0:8b:
c2:3a:f8:3a:c4:ec:cb:d9:12:a3:bf:66:73:d5:ae:
89:e1:b6:99:d0:b0:95:88:9c:47:74:ef:0b:d0:1b:
18:fb:03:1c:77:6f:ce:be:4d:6a:3b:aa:6a:d7:a1:
d2:59:8c:f6:f6:a9:aa:b3:e9:1d:b1:c7:97:ee:23:
f0:81:d4:35:86:5f:b0:d0:19:34:78:df:39:f4:8f:
d3:68:11:e9:05:02:58:7b:2a:55:d1:41:6a:8f:25:
9a:d8:18:dd:96:67:f9:44:00:54:71:e5:f6:f3:9e:
61:42:fd:9e:8a:cf:e3:e3:9e:33:e6:37:68:a5:31:
df:39:46:08:ee:67:49:70:89:a5:36:fd:f3:c1:c1:
55:c4:91:89:89:e1:fa:4e:a5:73:5e:fb:b5:af:a6:
be:1a:6d:6d:82:d8:5f:f6:07:30:89:f0:b5:4e:20:
97:22:f2:2c:57:6f:dd:2d:b4:ab:7a:c1:72:de:57:
51:e4:49:8f:d9:93:35:6e:c5:6f:89:f4:a8:88:57:
92:12:af:b7:00:44:4c:ce:e7:4e:c4:09:b6:30:47:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CC:F6:E7:B0:90:75:DE:34:BF:C9:D5:4A:8F:76:9F:B5:D7:9E:ED
X509v3 Authority Key Identifier:
keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1c:ad:e6:f3:a6:45:39:25:87:f2:62:37:09:10:39:62:bf:
d8:2b:32:4e:55:8a:8d:22:87:64:67:8c:77:da:a9:0a:06:2d:
47:74:2f:51:f3:72:5e:33:a2:2a:74:41:b7:f4:f9:39:e1:d0:
8d:3e:db:87:f7:c1:24:7d:8c:af:2b:78:87:62:30:e9:29:61:
c7:57:09:a7:44:5d:a7:bd:ba:b8:cc:79:78:ee:7d:7d:97:1c:
95:18:25:10:75:fe:94:d2:7f:c5:9c:70:e0:97:2b:cc:d2:dc:
41:5d:ae:bf:30:c1:7c:18:ee:3f:6c:b0:db:aa:11:8b:60:4a:
e6:7f:3e:66:a8:a8:7d:19:29:3c:cb:9c:11:b9:01:76:fc:fe:
57:bb:fb:76:16:bf:67:0c:f9:af:ff:43:6c:33:d1:b8:48:f6:
ac:1a:d8:f5:37:90:3b:1c:87:37:f8:f5:f2:2d:9c:32:75:17:
65:a0:7e:3c:26:01:eb:78:a7:e2:77:11:49:58:11:5d:65:81:
7a:ca:36:1d:76:ff:b0:71:89:d8:8c:8b:1a:e1:63:5f:a6:b7:
be:de:37:e2:84:b1:4c:49:cd:f1:7c:24:9c:d7:15:fd:36:af:
f7:b9:aa:65:bd:e9:81:2a:81:01:28:7c:6e:75:38:63:d1:15:
ce:22:65:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:34 2025 by rpki-client