Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
File: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft (raw, json)
Hash identifier: 2TM+bNhfbdoN2e9n+RXZAyHKfyA7TDLHp67oX2Ca2aE=
Subject key identifier: 21:A7:EF:F1:1A:8B:E7:33:A2:7E:19:5B:C8:98:C5:E2:6B:44:B5:EB
Authority key identifier: C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
Certificate issuer: /CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Certificate serial: 0199FCC6ADA16D35D12D138D66EE54CB637C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
Manifest number: 095B
Signing time: Sun 19 Oct 2025 14:01:42 +0000
Manifest this update: Sun 19 Oct 2025 14:01:42 +0000
Manifest next update: Mon 20 Oct 2025 14:01:42 +0000
Files and hashes: 1: U3hg_F1n66wHfUJa1B5AwM1jPe0.roa (hash: P69ebvhq55UOViQWYuaYwNEg2G9WcwEDt0JaOwktWKA=)
2: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl (hash: koFo+l4DOx7AgIEOOgR0mlK6Fuihrvrm27Ginro3XR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ad:a1:6d:35:d1:2d:13:8d:66:ee:54:cb:63:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Validity
Not Before: Oct 19 14:01:42 2025 GMT
Not After : Oct 20 14:01:42 2025 GMT
Subject: CN=21a7eff11a8be733a27e195bc898c5e26b44b5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:5c:30:87:0d:72:cd:72:d0:d8:c2:0a:b0:
0f:7c:45:83:b2:5f:9a:3b:dc:4b:8b:13:8c:85:66:
e6:e4:da:02:b6:9b:59:9e:49:4a:c2:a7:fd:bb:0d:
66:9f:dc:32:42:e8:50:50:78:9e:55:51:7c:a7:25:
cb:d8:4d:19:73:0f:3c:7a:c1:08:99:30:33:01:4d:
f0:4c:7c:6e:4f:05:d2:ea:97:b7:1e:2e:a8:43:d0:
5c:b5:36:50:b0:13:c2:ae:53:dd:8b:5d:b4:59:cb:
32:d1:ec:8e:4a:ee:cb:ef:d0:aa:93:9c:05:94:3d:
bb:cc:6c:b4:6c:5c:db:7a:c6:41:1e:14:82:b6:f2:
55:54:13:50:71:16:18:c3:b9:ef:02:70:dd:9b:59:
64:d8:ee:b9:5e:cd:19:49:08:e1:c7:ae:5c:42:99:
8a:77:38:e0:d4:7f:05:28:30:98:25:76:0f:47:74:
94:0f:d8:61:22:1e:aa:48:25:a4:3c:3a:cf:49:f5:
9e:79:f0:33:0f:6c:15:8e:c9:0b:22:6f:67:65:62:
6b:96:04:db:77:b2:0b:2e:4b:d5:f1:8e:57:41:8b:
cb:8f:7b:2a:4b:d7:d8:f8:53:76:83:04:ce:cc:99:
64:01:4c:ed:b4:34:23:4f:b0:4c:95:57:60:5f:14:
8b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A7:EF:F1:1A:8B:E7:33:A2:7E:19:5B:C8:98:C5:E2:6B:44:B5:EB
X509v3 Authority Key Identifier:
keyid:C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6f:78:b7:de:ec:aa:bc:df:42:45:d1:d9:de:6c:49:fd:90:
74:a1:65:da:08:7b:f9:7d:49:28:6b:6e:e4:15:11:81:16:1e:
7d:5a:8c:af:c7:d9:60:ce:04:dd:b2:17:ce:d6:42:8e:eb:51:
9c:fd:ed:88:11:80:c0:6b:b8:34:00:b5:36:39:7a:5d:95:f1:
c0:7a:03:cc:a1:14:5d:f1:66:f4:fa:50:fd:75:da:97:82:58:
d1:58:80:89:5e:07:29:f9:3b:75:9b:b6:44:b6:e1:fb:91:f2:
40:f6:f7:cc:6c:7b:7a:f8:63:2d:ea:b3:77:52:df:3a:9b:77:
ef:4c:7a:17:66:78:ac:dc:f6:11:8d:71:40:7f:e7:9b:f7:b3:
20:09:90:5c:cc:c5:5a:be:0c:e9:d5:ef:c4:e5:ba:f9:1a:d1:
74:d1:49:7a:0b:e1:a7:c4:ef:17:ab:13:36:3d:af:73:5a:55:
2a:45:76:25:dc:a7:be:9b:8d:bd:23:f1:c1:17:fb:9a:d5:68:
d5:c9:1a:b9:0c:4d:97:91:56:9f:c4:06:67:64:0e:70:b2:6c:
a8:14:e0:6f:ff:dc:6e:0d:26:b3:7a:eb:59:72:e2:43:74:37:
f0:32:c1:69:db:79:0f:11:61:67:44:24:3b:61:a4:e0:1c:08:
5b:b9:6e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:08:38 2025 by rpki-client