Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: 99CKCcZP39YsoNDg8y+kiN1QeRD0k8lywgnPRefdQY4=
Subject key identifier: C9:79:E7:D2:22:E7:AE:93:69:B7:6F:ED:E3:BC:83:3C:A9:B0:3E:D3
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 0199FC5895EEA0033E2599B1D7FB77F15D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 12:01:27 +0000
Manifest this update: Sun 19 Oct 2025 12:01:27 +0000
Manifest next update: Mon 20 Oct 2025 12:01:27 +0000
Files and hashes: 1: bCoGHAtTSxDtX1oYqNKnhpGYY0Q.roa (hash: eFHrLDgLSqCz0ldYK/DeOjHpdOvOetjhzRdvuzqcBXw=)
2: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: R5+FIfqYbFDe0MzKzYZgtrB7v7LVi6ioWhpg+jMZfBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:95:ee:a0:03:3e:25:99:b1:d7:fb:77:f1:5d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Oct 19 12:01:27 2025 GMT
Not After : Oct 20 12:01:27 2025 GMT
Subject: CN=c979e7d222e7ae9369b76fede3bc833ca9b03ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:4a:03:61:a7:a0:b4:4a:00:ca:a4:48:7e:
43:5c:93:59:81:f2:10:2f:eb:20:6f:57:82:49:2b:
2d:9a:47:25:07:57:be:a9:95:e6:65:bf:2c:df:2c:
02:c7:71:21:39:f7:3f:ca:d8:6d:50:ab:bd:5d:a5:
a0:e1:01:81:fe:ee:0c:2e:e2:07:90:6c:88:5a:f5:
4c:64:47:88:ed:ea:bd:b7:b7:58:9c:8f:e1:9b:b5:
c7:de:77:aa:77:bd:e2:8b:38:57:8b:6e:cc:34:71:
25:12:dc:6d:e2:b9:84:86:f2:db:44:31:35:65:be:
15:82:a4:c1:a4:9c:cc:66:1b:b1:76:15:2b:a4:a6:
c9:ad:57:8b:13:23:a3:a2:7c:03:b0:90:5c:9e:18:
93:fa:8e:ac:25:90:d5:2c:13:cb:e3:e0:a9:91:b9:
42:18:ca:22:0e:10:c4:82:f9:3f:51:c3:d7:ed:89:
70:79:4a:72:47:9d:23:79:a6:11:4d:64:a1:0a:39:
68:d3:46:46:bf:10:57:c6:5b:18:47:74:3f:ff:83:
75:09:4c:d6:3e:18:1d:73:37:fc:19:c2:73:bd:c9:
1e:68:94:15:b2:a7:a5:49:eb:ba:0f:f3:0d:49:bd:
43:bb:a1:b1:e1:2d:f9:27:67:57:9f:9e:f2:fd:d9:
5a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:79:E7:D2:22:E7:AE:93:69:B7:6F:ED:E3:BC:83:3C:A9:B0:3E:D3
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:93:66:fa:03:48:ea:b8:2a:23:8b:ae:56:b7:cd:e7:b2:67:
d0:d6:f7:56:9b:88:32:a6:72:a9:82:58:c9:2c:1a:c2:bc:ba:
f1:e0:2c:bd:7e:ac:a1:71:3c:6d:44:06:f2:93:12:33:0e:58:
c0:c3:0f:60:90:ea:9f:c2:2e:79:bb:8c:c5:ec:b3:53:d2:51:
8b:f1:cd:98:12:dd:9e:bb:77:33:e8:af:1b:18:3d:3c:39:1d:
9f:31:56:65:cc:3e:5d:b9:52:59:3b:0a:ff:09:be:b2:f6:9a:
f2:ea:9c:5e:4c:f2:84:e9:3e:db:f3:df:71:45:ee:32:4b:53:
c1:8d:87:7d:01:14:64:a6:2e:c9:7f:29:1d:1f:5d:2e:46:80:
d6:28:1a:17:cc:a4:ac:ca:ed:80:96:d7:b2:94:25:97:97:ed:
5c:a1:b4:0f:6e:19:82:29:97:2c:56:c9:50:ac:30:f9:42:24:
03:69:29:e4:5f:1d:e4:f8:2b:29:0f:2c:31:e1:3f:88:19:cf:
ed:56:1d:97:c5:9d:e6:9a:0c:16:d9:30:48:41:37:4a:14:42:
90:6b:61:d9:d5:01:ad:0d:a3:fe:56:e3:f1:0a:b9:76:b1:7d:
70:85:c1:00:0c:2b:9f:97:76:d2:23:23:1e:05:d1:bd:e2:6e:
75:06:ef:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:25 2025 by rpki-client