Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
File: wlEKilJdybHsCxVg0JCmQmjULsQ.mft (raw, json)
Hash identifier: NIKx+negbKrJgP713ZpEPRspFPAZWeW+bZVrTHaILkI=
Subject key identifier: B1:82:0D:49:29:FF:B3:51:9E:0C:FE:DD:B4:EE:08:0C:3B:D5:FA:CF
Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
Certificate issuer: /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Certificate serial: 0199FD33EF20D0F40EEC9F3D9F6C20D05DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
Manifest number: 168D
Signing time: Sun 19 Oct 2025 16:01:03 +0000
Manifest this update: Sun 19 Oct 2025 16:01:03 +0000
Manifest next update: Mon 20 Oct 2025 16:01:03 +0000
Files and hashes: 1: FaPK4dABXX1JUG-DgodpiiYFyXk.roa (hash: 8EnGZIA4ScfpCaGufhHcnmIDRY1lMTTgXZqEJ9E7v2g=)
2: bYeYVYEdCXCzK3hGWezO0ZNHveg.roa (hash: UaiyZMeOYv/TRvUCkbZ9PcMP5ygVyQhx0p+DkQtZkYA=)
3: wlEKilJdybHsCxVg0JCmQmjULsQ.crl (hash: pVT2rG9nLi+r+QUTBAqnOZZd6XfeIfoqOhb3Lr5lPnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ef:20:d0:f4:0e:ec:9f:3d:9f:6c:20:d0:5d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Validity
Not Before: Oct 19 16:01:03 2025 GMT
Not After : Oct 20 16:01:03 2025 GMT
Subject: CN=b1820d4929ffb3519e0cfeddb4ee080c3bd5facf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:ac:74:c6:5c:45:f9:4b:8a:c5:93:7e:d7:
52:08:fc:90:98:76:68:7b:58:f0:51:aa:b4:85:4a:
7c:1a:5a:11:a6:b0:0c:f6:23:5f:2e:4f:71:c4:38:
d3:ff:63:18:08:56:73:02:58:4e:00:26:b8:22:f7:
9d:fa:bb:90:ac:25:77:d5:94:fa:b5:f2:1c:f5:95:
5e:d7:9a:4d:0b:7e:56:e9:a2:1b:b5:a5:08:d4:a7:
07:ff:89:04:1d:c5:67:da:03:36:d8:cd:13:71:f1:
ec:51:b2:fd:16:dc:8d:6b:98:13:df:21:76:4f:a1:
e0:69:24:f7:5c:4a:df:ec:9a:41:bb:a4:12:51:c1:
68:cf:d2:95:c5:bd:cd:84:67:fa:f2:f9:03:21:d4:
2f:f4:0c:6c:6a:88:7b:20:b5:28:af:83:26:ea:67:
83:3a:d2:8b:6c:92:78:e6:d3:34:70:76:5d:f6:c3:
6a:8c:ab:12:ff:22:45:e0:cf:40:36:fd:7f:42:55:
ee:94:47:b5:fd:89:f2:33:6a:72:e0:2e:ce:9c:cc:
23:8a:0a:8c:35:f1:5d:cb:f1:03:67:50:ff:12:e9:
e9:65:19:6c:b1:9b:6a:e9:17:ca:8c:8f:e2:55:79:
4a:bf:46:8c:26:5c:84:43:19:ab:da:2e:9e:3e:91:
70:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:82:0D:49:29:FF:B3:51:9E:0C:FE:DD:B4:EE:08:0C:3B:D5:FA:CF
X509v3 Authority Key Identifier:
keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ec:c6:bf:25:a5:03:c9:c2:b3:13:93:a0:1c:01:96:08:53:
70:25:3f:b9:8f:8b:86:ba:e8:4c:77:49:8e:1f:c7:2e:1f:71:
db:57:9a:fe:ee:ec:00:50:f6:ed:f9:7b:47:b6:06:df:e8:08:
d7:e6:62:dd:41:79:98:02:5b:1f:2f:ae:53:1d:7b:f1:92:b0:
99:9f:c5:42:ca:10:99:fe:0b:5b:dc:ce:9b:9c:14:5a:d9:87:
cf:5b:b7:1a:1d:1b:43:31:ec:e7:a0:7d:9d:af:3f:c6:d8:4b:
62:bf:e4:92:fc:02:01:fd:38:48:e9:74:ea:a7:76:40:8e:c9:
5f:8c:c7:bd:f8:5d:ab:58:4b:7e:16:8f:fa:f8:e3:a6:0b:02:
24:f6:69:a7:ea:e3:fe:6c:fb:07:1a:69:7f:10:e1:29:e6:4d:
6e:a5:e5:63:02:54:8e:7b:33:ce:25:4c:ad:96:a6:f4:e1:6b:
da:64:04:41:3e:43:eb:b7:1e:34:70:20:8e:a2:1f:94:85:22:
cb:94:36:f5:3e:c7:90:78:53:44:0f:d0:12:5b:95:7e:7c:b8:
33:3a:3d:3f:31:0f:e8:fa:0e:4f:7c:2e:ad:ec:c9:ed:34:dc:
e5:cb:1d:59:74:14:21:63:44:0a:9a:68:62:b7:03:56:23:a0:
eb:33:5a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:17 2025 by rpki-client