Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
File: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft (raw, json)
Hash identifier: v2toOfcMwD2d89/jlar0uki3EZUdsOFF46eKRsVjYRk=
Subject key identifier: 8C:DE:DB:0E:75:AF:21:5A:D3:67:11:E2:01:67:DA:E9:40:16:DB:C8
Authority key identifier: C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07
Certificate issuer: /CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
Certificate serial: 0199FFC845B43C24A1057B2A0C408ED28063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
Manifest number: 0A04
Signing time: Mon 20 Oct 2025 04:02:19 +0000
Manifest this update: Mon 20 Oct 2025 04:02:19 +0000
Manifest next update: Tue 21 Oct 2025 04:02:19 +0000
Files and hashes: 1: BTTvC8v66O2EpK1CYoUyKwsnmsY.roa (hash: 8Cg+TzwOE6bqFQKwpEVGr60uQJS1JrcoMWvltGsfhb0=)
2: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl (hash: zz33+z3fEgKuKnexEAHZ3/RWwvZeWhXI8WgSEfK+PuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:45:b4:3c:24:a1:05:7b:2a:0c:40:8e:d2:80:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
Validity
Not Before: Oct 20 04:02:19 2025 GMT
Not After : Oct 21 04:02:19 2025 GMT
Subject: CN=8cdedb0e75af215ad36711e20167dae94016dbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:9e:82:f3:93:bb:b6:f0:1c:14:e7:81:53:
c5:84:cb:86:3a:eb:2f:4e:e7:3b:68:d5:64:93:ff:
8b:18:a0:f5:53:de:d8:74:27:1a:a7:26:6e:99:15:
5a:3d:df:4a:a2:db:ca:cd:e2:30:24:e4:31:af:5e:
dc:78:9a:59:b3:e6:49:3c:95:68:46:b5:14:8b:fc:
98:1b:4b:28:8d:3c:19:94:fe:85:c2:69:ef:3d:15:
05:b2:ac:ec:c5:f7:0b:cc:d2:dc:5d:89:f0:61:4e:
3d:38:77:e1:06:8c:3e:fb:5c:b2:aa:53:e4:7a:5d:
a4:c0:33:44:58:80:38:6d:6b:c9:7b:07:8e:cd:f6:
6f:2d:e1:41:24:d7:9c:4f:56:7b:4b:ca:b9:44:55:
90:be:f8:1f:8d:25:b6:8c:ef:1b:4d:10:96:12:6d:
9a:d6:bc:1e:ed:be:92:7d:c8:b7:39:5a:de:a7:15:
73:bd:fe:e9:52:46:04:6f:4b:c1:24:fd:55:a3:1f:
e6:49:1c:a4:5c:4e:fa:8a:ca:18:24:16:f3:9a:d4:
88:56:5d:de:ba:c5:09:9a:2d:80:bc:b5:6a:61:d0:
0c:6b:d5:c9:8a:f0:34:27:d8:e2:75:ae:d8:61:a9:
bb:14:2b:45:92:48:5a:87:44:7e:e4:10:60:ea:b7:
42:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DE:DB:0E:75:AF:21:5A:D3:67:11:E2:01:67:DA:E9:40:16:DB:C8
X509v3 Authority Key Identifier:
keyid:C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:01:64:37:80:c7:4f:2c:23:c1:58:65:b8:5a:03:6b:d6:05:
f4:1c:a4:fc:e9:c8:aa:cb:29:20:e3:ce:23:ea:5d:e0:cd:d3:
04:c4:b1:14:41:91:18:86:22:2f:c7:86:48:cf:57:4d:6b:62:
9a:c0:14:01:1a:77:80:e0:a9:e2:63:fd:f7:3b:1d:07:60:42:
5e:6c:57:07:e0:76:b6:f4:9f:57:b0:cf:e5:03:06:4c:41:5b:
60:f2:ed:2a:85:24:b0:cc:74:2a:41:29:50:4e:70:61:b7:52:
1c:5e:f0:6d:bc:f1:c0:2d:42:67:d6:7c:b2:83:8a:57:c9:26:
db:0c:45:d3:ad:22:49:d5:51:fe:67:a6:dd:ad:c7:29:eb:db:
3d:0e:04:b4:7e:2b:39:65:92:ee:68:3f:65:18:4e:f5:bf:ec:
d8:90:4b:4a:22:bb:33:a5:c8:c1:d7:4b:77:f7:78:8b:a2:73:
7c:6d:8c:5b:a6:d4:67:a6:c1:24:55:bd:5f:3e:82:77:11:f6:
0c:e6:2b:93:34:5e:27:23:67:a8:6d:39:2b:ba:aa:28:50:3b:
d8:73:96:ca:0a:76:2f:6d:a1:95:30:6b:b0:54:ad:4a:1d:cf:
31:c9:66:3b:61:63:b5:d2:06:e2:dd:5c:7e:7f:8a:96:54:fb:
0e:c5:10:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:59:09 2025 by rpki-client