Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
File: wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft (raw, json)
Hash identifier: AEtITGo53s8YROTr+ufiYG5rJDSHnWEyX7PMoPApe2k=
Subject key identifier: 9E:26:88:CB:4C:8D:93:37:BB:FC:B9:41:3C:02:73:64:12:52:1A:9C
Authority key identifier: C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC
Certificate issuer: /CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
Certificate serial: 0199FE476B089F34B654EA10F99B3B82694B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 21:01:57 +0000
Manifest this update: Sun 19 Oct 2025 21:01:57 +0000
Manifest next update: Mon 20 Oct 2025 21:01:57 +0000
Files and hashes: 1: BN13x-ZjA4mHaBlOmgwvor1JO1c.roa (hash: Uuj6BFZWiA+duiDnobx+mZ0HHXgVtqFptRYnRQ3IF9I=)
2: wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl (hash: N59k4r+Se1E9lRNcWGnwA0raff3uK0O4GBDHlEhYVwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:6b:08:9f:34:b6:54:ea:10:f9:9b:3b:82:69:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
Validity
Not Before: Oct 19 21:01:57 2025 GMT
Not After : Oct 20 21:01:57 2025 GMT
Subject: CN=9e2688cb4c8d9337bbfcb9413c02736412521a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:50:ad:2b:7c:dd:19:d4:45:8c:03:fa:70:b7:
41:86:94:f8:fe:28:58:b7:fa:07:f0:2d:96:f8:ce:
cd:e5:00:b0:7c:76:e2:14:9d:a4:93:62:98:bb:0e:
09:c2:f2:a1:78:0a:a6:b0:f5:c8:39:6d:05:bf:06:
95:e4:a7:fd:8b:73:dc:fc:85:61:d1:f2:ae:90:4a:
a5:50:20:65:e1:02:d4:d9:04:7c:1b:13:e8:ea:7d:
90:4b:ec:d1:eb:f5:1f:2d:04:b7:7c:19:13:e7:c9:
91:32:f7:89:8e:b8:db:a4:d2:a2:04:b7:9c:b7:86:
e6:00:70:03:f1:e1:79:5e:82:fe:ed:87:0b:44:0b:
19:b1:15:e2:3f:e0:5a:fe:78:2d:17:f0:d1:ca:04:
9f:58:43:b2:69:6e:b7:d1:90:79:8b:a1:fd:0f:15:
89:29:80:48:ef:d6:83:65:cd:8e:be:10:b4:35:af:
1b:90:12:69:23:dd:9e:dd:1c:ca:22:9a:ee:b8:bc:
8d:c8:d6:6d:26:6d:4a:47:1a:64:e9:14:13:5b:64:
16:6d:9d:8d:5c:47:05:8f:21:ac:30:a4:d5:01:dd:
a4:36:11:ba:cb:0c:80:97:93:18:80:2d:5e:fe:67:
21:6d:0a:ce:74:29:41:d1:2c:3b:49:49:4b:2b:20:
d5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:26:88:CB:4C:8D:93:37:BB:FC:B9:41:3C:02:73:64:12:52:1A:9C
X509v3 Authority Key Identifier:
keyid:C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f0:f3:5e:36:e3:e1:7b:51:4b:0e:a5:07:0b:48:04:f5:36:
31:f0:ed:d8:96:b2:e4:8a:10:a8:6d:0e:78:d8:5d:91:50:d9:
a4:d5:4c:a1:8e:ee:a8:3d:68:cb:2f:9c:90:da:10:25:8c:02:
51:d0:74:f3:7f:02:5f:41:17:13:24:1e:6a:35:5e:55:88:37:
2a:e8:51:05:f9:1d:a6:cf:b9:51:30:5b:e5:ec:e6:ca:8d:fc:
52:a4:80:13:9d:f7:81:aa:54:8d:f2:50:df:3b:10:33:3d:ef:
8e:57:7a:2a:21:79:46:a9:47:8a:19:3a:10:4c:40:2c:d3:53:
64:03:2a:b8:69:12:2c:e3:b3:84:76:fc:c0:eb:94:a8:74:df:
bc:eb:5e:97:c9:f8:f4:e7:df:73:e4:92:46:5a:c0:cf:09:a7:
1e:2d:dd:41:7c:fa:d7:98:42:f3:e5:99:6b:79:52:1d:e3:4c:
53:1c:1c:8b:e2:50:3c:f5:5b:a2:34:c5:b0:d0:ed:a5:b5:22:
bc:f9:31:d5:bf:ff:0d:b2:3b:e6:b6:38:c0:10:94:bd:97:c0:
a9:76:d6:f2:5d:9f:71:e4:90:a6:fe:0a:62:e3:57:db:e5:2d:
44:e5:f6:e7:ea:40:e8:29:3e:12:56:3c:3d:bc:3a:c9:19:7d:
b5:6e:95:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:40:26 2025 by rpki-client