Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
File: we5gO3itcrp4VWgsorgGrA5-mP0.mft (raw, json)
Hash identifier: bnmDtYEsEmli2bLqN60V6EyQ6FMPP/eZQgX4wcKlOXU=
Subject key identifier: F5:47:0A:91:B4:04:1F:DB:A8:FA:71:2A:9A:C1:EC:8A:E1:CD:3E:02
Authority key identifier: C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
Certificate issuer: /CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Certificate serial: 0199FC8F23A7C07193BD3F0664F549C4CE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 13:01:03 +0000
Manifest this update: Sun 19 Oct 2025 13:01:03 +0000
Manifest next update: Mon 20 Oct 2025 13:01:03 +0000
Files and hashes: 1: 8P5ffqPLJKYYNJnQChMlI7ALdn8.roa (hash: HRZiFpkQQ+Nr6MCSY7lvsFCZFVTwCo1gLy31/BQbop0=)
2: we5gO3itcrp4VWgsorgGrA5-mP0.crl (hash: YuIT++52xTzlHSn6BrXTWUa4ixEGPRjDtkVXnWFYP5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:23:a7:c0:71:93:bd:3f:06:64:f5:49:c4:ce:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Validity
Not Before: Oct 19 13:01:03 2025 GMT
Not After : Oct 20 13:01:03 2025 GMT
Subject: CN=f5470a91b4041fdba8fa712a9ac1ec8ae1cd3e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:f5:e0:ec:40:ad:c8:aa:76:a9:d5:82:1b:
32:1d:2c:06:0f:d0:e3:8b:13:c2:20:f6:c2:d0:28:
25:00:f6:e3:7d:80:07:52:94:81:cf:99:ab:a6:76:
7a:48:64:2c:c5:da:93:67:7a:85:3b:0a:65:35:08:
e2:39:b2:af:b3:16:1e:97:09:28:8c:bb:b5:7f:cd:
28:9b:f1:8c:d9:25:d9:77:78:a5:f2:6b:f6:67:8e:
34:37:8d:04:4f:45:39:85:3f:3b:6b:be:a1:67:cf:
f7:58:3a:94:c3:8f:da:c7:60:e9:0c:11:75:86:23:
3d:3c:6d:c7:ad:bf:5e:e5:4e:e6:8e:a5:0f:a7:cb:
72:21:6d:eb:26:a5:ef:74:ff:9b:d2:4c:b0:bd:ef:
87:f4:8c:d6:44:f8:4b:26:31:33:ca:89:8e:12:bf:
f6:b8:a5:cd:44:48:cd:0d:49:62:29:ee:8e:9f:c6:
b5:89:e6:8b:69:00:5a:cf:be:d0:4a:69:21:4f:c7:
91:dc:6c:2b:ad:fb:02:0b:f4:08:34:a8:d9:4d:db:
f3:48:d5:ff:53:03:84:11:47:6e:e9:18:b9:c2:a5:
a1:5b:de:ba:ad:59:b6:e8:90:b1:10:76:29:81:2c:
3f:28:2f:1c:ae:fd:95:a3:7e:98:35:8c:2c:f2:40:
1c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:47:0A:91:B4:04:1F:DB:A8:FA:71:2A:9A:C1:EC:8A:E1:CD:3E:02
X509v3 Authority Key Identifier:
keyid:C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:16:50:88:6f:13:48:a8:14:0a:01:59:a3:40:40:e2:6e:5f:
bd:55:e6:66:38:fd:77:03:10:54:ca:e0:27:cd:13:3b:d0:4e:
4f:11:45:4b:13:6d:e4:70:01:6f:43:23:57:da:ad:51:a2:16:
ca:2c:2e:f9:1b:e2:e3:b4:ff:3c:56:ff:88:54:c7:17:7f:c8:
67:58:d8:a4:75:46:d5:7f:30:ff:04:0d:99:7d:cf:73:77:d2:
a3:1f:54:55:d4:17:c7:5d:6c:9d:bc:22:cf:42:88:90:54:aa:
04:e3:09:7e:79:62:0f:e6:86:78:c1:9b:b2:42:04:f6:8c:ef:
5c:ee:20:66:e7:df:8d:a2:0e:0e:94:90:57:e5:a5:02:78:6c:
c6:ae:57:9f:79:ae:11:4a:8e:f1:65:f9:2e:89:ad:24:5a:ee:
97:2e:73:58:47:3e:ff:2f:31:cc:5e:bd:b5:5c:d8:b8:1e:25:
a6:d8:ef:8a:d3:74:ce:4b:d0:1a:72:14:d7:31:1d:02:78:ee:
64:9e:84:d6:f6:da:cf:bf:8d:c3:cd:6c:07:b0:aa:d4:4e:95:
52:26:e2:75:aa:92:4a:20:7a:80:49:b9:a2:84:12:3d:c6:d7:
12:aa:3f:7e:97:9d:09:be:c6:bc:37:9c:e9:8e:e2:6d:8b:1a:
bc:7f:c2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:16 2025 by rpki-client