Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: pvwVDFbYusRH6RpRzDq8jOYP18R+ZVCXVqOhFn3uIt8=
Subject key identifier: C2:83:19:2A:8A:56:D8:99:DB:9A:97:01:43:58:CB:D3:19:89:EC:0C
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 0199FBEB2C0AC1107DD7163E23B006E238E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:01:57 +0000
Manifest this update: Sun 19 Oct 2025 10:01:57 +0000
Manifest next update: Mon 20 Oct 2025 10:01:57 +0000
Files and hashes: 1: Dojs8PEQnvulcYqgM4rdKOxunu0.roa (hash: dLJI4qVjVKlBypD5DT2hbIXIp/KqABCIFpos5VZ0K94=)
2: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: A11PmY7rcQ/+CnkNZbt4vCPgZI8mzCuBaTtHpXeuInc=)
3: ZHpRRkh9oiRLBNkKdSMUtdYZ7o4.roa (hash: G5aCOLk/4QhatU9joqPbjeRwSGccuFt7GUatcEniztQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:2c:0a:c1:10:7d:d7:16:3e:23:b0:06:e2:38:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Oct 19 10:01:57 2025 GMT
Not After : Oct 20 10:01:57 2025 GMT
Subject: CN=c283192a8a56d899db9a97014358cbd31989ec0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f9:df:c4:cb:75:52:48:ff:ce:47:48:69:cf:
98:7d:1c:01:2b:21:2a:16:d9:6f:d3:5a:79:94:9d:
10:4f:4b:38:0a:aa:82:6e:0b:f7:f3:1c:8d:6b:de:
a9:fa:56:8e:25:27:42:1a:f6:30:1e:7f:5b:39:59:
ba:20:65:9d:89:39:62:8d:a2:a4:45:81:e8:36:64:
ab:a6:7f:92:6c:b7:94:1f:b7:18:4b:e4:c6:1b:e8:
15:5e:e2:8d:a4:85:25:d1:0d:dc:7e:0f:e8:99:4a:
4a:a0:0f:be:eb:d9:f9:8e:71:8a:12:70:7e:59:27:
c6:76:28:42:ff:57:c9:bf:e7:fb:c0:9e:6e:c4:fa:
7e:a3:09:a8:65:af:f9:1d:a9:68:73:42:bd:75:df:
c2:3e:28:b5:d3:0d:7d:e6:d4:d7:40:f8:24:b5:85:
89:a7:bd:1d:5e:9f:22:59:4f:bf:80:c2:32:7a:db:
cc:4d:49:98:27:33:ac:d6:46:84:51:ea:29:4e:48:
4b:9d:51:5a:2b:30:cc:df:12:6d:79:6e:3a:41:86:
2f:4d:43:c7:54:e0:0a:16:63:86:23:f5:02:61:7e:
36:bd:cc:5d:a8:29:f3:bc:78:a1:c6:58:0f:e5:7d:
61:43:40:a3:f9:75:24:e5:5f:75:db:73:33:c7:71:
4f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:83:19:2A:8A:56:D8:99:DB:9A:97:01:43:58:CB:D3:19:89:EC:0C
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:10:55:df:6c:4c:e7:a7:cb:14:d1:5b:97:da:0d:32:4a:cd:
5e:6b:c7:bc:94:10:25:1c:38:17:98:b9:f5:67:e7:f9:19:e6:
65:03:ba:65:ed:35:19:6e:93:3f:20:0f:30:61:5d:c6:62:80:
5f:c4:05:a8:f5:f7:7d:a2:bb:d1:de:4b:35:18:80:10:d0:0a:
1b:42:e5:a3:65:cd:d7:aa:5c:56:d4:1c:5a:90:37:9e:2c:5d:
33:b6:eb:6b:c4:af:d3:ac:84:b4:5a:fd:ef:b0:d7:f7:b4:7e:
90:6a:06:74:e0:34:71:d0:43:93:d0:e5:74:81:f5:b6:b1:c7:
17:8b:ad:9b:3d:90:3d:e9:6a:7a:07:45:5e:4a:89:af:4b:73:
26:05:3f:4f:8d:79:a7:8d:c0:cf:cd:54:91:90:d3:8c:40:f4:
ba:95:df:d4:cb:f2:d3:65:30:22:04:38:fc:a1:79:dd:43:2f:
ac:c1:19:0d:c5:dc:df:07:8d:91:cb:0a:d5:32:25:87:91:cf:
fd:69:d5:d8:16:4e:96:22:a8:14:09:9c:46:e3:33:d7:05:d2:
16:c4:53:22:86:7d:79:60:c7:bc:67:06:55:ec:a6:00:03:4c:
bc:de:e4:3d:e0:9e:c6:94:97:70:47:3a:5e:a6:d2:37:3e:21:
f7:2d:2a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:33 2025 by rpki-client