Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
File: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft (raw, json)
Hash identifier: dfA4RoRkeOKOde0VgsTwMs0lqUZ3OE+FqdC90SGp2kQ=
Subject key identifier: DD:36:53:2E:6C:8D:A1:BA:A1:F2:40:9F:68:07:43:8C:17:6A:D0:25
Authority key identifier: C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
Certificate issuer: /CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Certificate serial: 0199FE47784FC6D9F48FB157F34623F846CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
Manifest number: 10BF
Signing time: Sun 19 Oct 2025 21:02:00 +0000
Manifest this update: Sun 19 Oct 2025 21:02:00 +0000
Manifest next update: Mon 20 Oct 2025 21:02:00 +0000
Files and hashes: 1: HwLDpTIt6plI2sCVLbeUjnqOAJc.roa (hash: yvIMoIjc3gOAvuIICfd6lLbgjDWXL7Ecab2rJN91n/I=)
2: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl (hash: Ekc5NwvRWWTiWOGlew66OKHPcSJDQOC2CSg7aYVECpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:78:4f:c6:d9:f4:8f:b1:57:f3:46:23:f8:46:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Validity
Not Before: Oct 19 21:02:00 2025 GMT
Not After : Oct 20 21:02:00 2025 GMT
Subject: CN=dd36532e6c8da1baa1f2409f6807438c176ad025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:a5:87:be:bc:d6:a5:7a:7c:58:98:69:fa:
28:85:5f:8f:df:19:41:28:bc:a3:ea:bf:5c:a5:05:
52:ef:46:f2:f8:f0:7f:f7:f7:a0:6e:ce:13:0d:1d:
25:0e:1d:da:1b:19:9d:5c:c5:5f:c0:a2:4b:a5:7d:
e8:57:94:f6:fe:32:4b:4e:d8:bb:a0:01:6b:45:db:
2c:5e:47:4e:ba:24:5b:a8:de:e2:51:34:5d:9b:5f:
76:7d:cd:d8:1c:67:96:20:01:72:b6:cb:b9:f6:85:
5c:43:2b:07:3c:ca:17:58:bd:76:e2:d2:da:8b:c7:
20:61:56:c1:c3:87:c3:9b:7d:be:33:9a:51:16:ed:
fd:ec:2c:21:98:b9:c2:da:c6:4d:e4:85:ed:47:1f:
ef:a9:52:22:cc:b7:e5:ef:85:c1:2e:23:ae:5a:54:
5a:7c:1d:33:15:36:e2:32:43:de:a1:92:03:50:2d:
c0:f0:b9:fe:81:92:eb:6a:0e:74:26:72:69:46:cb:
16:ea:fc:dc:de:e2:03:8e:b6:b0:b3:8c:1a:53:de:
dc:b7:b1:8c:df:f3:25:a4:a6:67:fc:85:df:79:8f:
66:c6:c5:bb:8a:e0:08:9d:f8:ad:17:da:6c:83:1c:
fc:b7:bd:e9:d7:21:26:fc:12:14:6a:21:c0:d5:ab:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:36:53:2E:6C:8D:A1:BA:A1:F2:40:9F:68:07:43:8C:17:6A:D0:25
X509v3 Authority Key Identifier:
keyid:C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f0:c6:80:9d:7c:4b:f8:05:b0:72:8f:b6:14:9f:ac:8f:d5:
07:e4:87:3e:6a:7b:58:69:15:7f:b3:32:9b:97:cd:42:1f:9c:
05:5d:ae:d6:6c:28:47:ff:94:f6:b5:6e:a2:8a:66:59:10:27:
e4:a3:2a:20:44:a8:29:c0:f7:1d:c1:2a:d8:5c:22:1c:55:89:
8b:b5:26:cb:78:74:19:ef:3e:0f:8d:68:36:90:e6:e1:2f:b2:
f4:62:ff:8f:b3:38:ee:c4:8c:00:82:81:99:57:8e:48:e6:2c:
60:6d:18:26:7f:37:ec:ea:e1:b9:c2:13:31:1e:cb:83:bb:d8:
72:29:f9:a6:4d:be:3d:d0:ac:8d:48:d4:94:65:b0:f9:6f:b3:
cd:91:b9:d3:97:a5:34:a2:45:83:9b:e2:10:af:82:a6:1b:e0:
e5:57:59:18:29:90:02:98:63:09:59:92:83:b7:16:ed:61:54:
fe:18:ca:73:96:67:c2:19:c1:37:ef:4a:b0:15:e3:9c:f2:c2:
a7:bb:83:85:28:b5:9a:69:38:58:fe:0a:b8:a9:54:a2:ec:11:
6d:6a:a5:b8:81:d3:dc:4d:f7:a7:9c:7e:ee:15:5f:b7:51:7b:
c0:50:26:91:3d:b3:f8:24:96:b8:9b:31:7b:4b:08:8a:00:62:
18:39:64:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:47 2025 by rpki-client