Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
File: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft (raw, json)
Hash identifier: ntAV9+/uId36I21HNYsrm2PpPGB163/thwRxzUSa6Aw=
Subject key identifier: FB:73:08:9C:AB:D9:EA:A7:37:3E:E4:19:99:90:C1:C7:4E:B6:7E:31
Authority key identifier: C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
Certificate issuer: /CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Certificate serial: 0199FBEB8440115D9D1CCB7C95D3FB663D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:19 +0000
Manifest this update: Sun 19 Oct 2025 10:02:19 +0000
Manifest next update: Mon 20 Oct 2025 10:02:19 +0000
Files and hashes: 1: sNmSuLPwop12596I--vLe1Fw_L8.roa (hash: rnnFcpfS8qT33aKuf/kRcr+W7tCgIM7nW6QVvMfILWQ=)
2: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl (hash: KX6ijJc2z8wyF0zhoC996pZkfI+Mgn+EFv7vSlVGBy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:84:40:11:5d:9d:1c:cb:7c:95:d3:fb:66:3d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Validity
Not Before: Oct 19 10:02:19 2025 GMT
Not After : Oct 20 10:02:19 2025 GMT
Subject: CN=fb73089cabd9eaa7373ee4199990c1c74eb67e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:26:62:d0:08:e8:16:96:0c:a7:27:65:f9:
50:64:38:cb:99:42:1e:80:8a:10:92:63:e2:b9:5a:
7b:d8:f0:ac:a2:63:43:3b:32:a3:04:fe:0e:99:b4:
89:2b:b2:aa:e7:50:16:9c:1e:95:a4:ac:4c:52:a7:
ab:c8:01:18:69:66:78:e1:5f:b5:e7:44:85:64:24:
2f:71:87:60:a1:e9:c6:90:ce:2e:2c:a3:77:8a:59:
de:55:2b:98:df:64:16:19:9e:86:ef:de:f0:7e:99:
0f:77:b9:62:48:e5:4e:a3:40:cf:37:54:72:70:3b:
f8:47:ff:e9:a3:73:97:85:41:bb:a8:27:fa:88:71:
ca:a4:25:a4:96:0c:29:e5:d1:1f:63:70:be:d8:2d:
f2:43:6c:e3:fd:32:f2:f7:48:99:48:92:74:2f:34:
54:3b:6b:fc:ba:c1:41:2e:28:06:fb:27:3b:4d:e1:
61:0b:9d:23:0e:05:c1:d7:70:5d:df:77:01:e3:86:
18:44:b2:6c:94:88:b1:2a:c5:54:e3:3a:ad:4f:62:
f4:8a:b5:a7:93:a7:c5:92:46:02:d7:97:8f:f5:b7:
0c:0c:f7:52:d9:bb:b8:7f:e0:ed:4c:54:ad:ba:6a:
7b:e1:e2:25:73:9c:9f:29:07:7d:3f:d4:62:55:6d:
c4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:73:08:9C:AB:D9:EA:A7:37:3E:E4:19:99:90:C1:C7:4E:B6:7E:31
X509v3 Authority Key Identifier:
keyid:C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:91:9b:aa:79:75:28:a8:4a:a3:1e:09:2e:df:fb:e6:61:17:
fc:68:a7:5f:ac:cf:db:99:7d:37:b5:21:53:5e:2e:05:2a:7f:
ed:0a:c6:b7:aa:77:cb:7a:79:fd:3c:68:3d:fd:71:ad:be:a6:
cf:ed:d6:70:05:4a:ec:01:b2:fb:c9:c1:41:af:c9:7b:ae:6b:
a8:f5:97:2b:74:36:2c:2c:e9:0b:c8:80:24:67:5a:13:81:73:
4b:b0:a7:f5:62:67:7b:82:44:b1:bd:b6:97:00:8b:ee:fc:53:
7f:7a:aa:d7:cf:1b:a3:2a:78:07:73:fd:01:8d:ad:0f:06:ce:
dd:4f:3a:b4:03:53:85:26:c2:c7:33:bc:f2:26:a1:80:4b:56:
b4:ea:03:f4:cf:03:84:fe:d4:35:a5:01:43:f6:ec:f3:e4:f4:
81:72:6b:98:7f:61:c0:b0:db:ed:91:c0:6b:66:83:3b:23:09:
bd:b2:5c:ac:50:f8:b1:01:e7:69:ff:f1:7e:e8:6f:96:7f:69:
48:98:c1:4e:38:af:19:7f:9d:bb:60:5c:2c:5f:9a:b6:f8:29:
78:1e:24:87:37:3d:03:a0:9e:c3:57:db:07:a2:21:7d:34:f1:
89:0e:12:2d:b4:1e:fa:b1:0b:b7:75:c3:0d:48:77:ad:af:c8:
cd:70:89:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:58 2025 by rpki-client