Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
File: wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft (raw, json)
Hash identifier: G+YHJJgyOZyGs5ojn5sJ86i3mYdtFXhHs5SRgBF/fdM=
Subject key identifier: 6A:0B:9D:6F:DA:0F:BE:1E:9D:FF:42:09:40:DA:C8:C6:CE:99:90:AF
Authority key identifier: C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
Certificate issuer: /CN=c2919334ad2ad53616c34fece96ce29230f86349
Certificate serial: 0199FCFD5BFC29642366EB348EC434B17C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
Manifest number: 06B3
Signing time: Sun 19 Oct 2025 15:01:26 +0000
Manifest this update: Sun 19 Oct 2025 15:01:26 +0000
Manifest next update: Mon 20 Oct 2025 15:01:26 +0000
Files and hashes: 1: RSjnM6zCvAOEItwpVtC0m6KUGtw.roa (hash: 63Mz4fOoq8b9mEgPpq4X77Rjr3X+uaQbsoHZFlRZzdY=)
2: b800M8UQE_ndSkfHQhV3cPUcjPM.roa (hash: MbkUQn3Ix8UmF2oKyZjDZOrZVxkNdqgLjfIY0GRvAPU=)
3: wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl (hash: sgrvaolN8z91rTq5Wuux6X7pCWMUi8zBljvW8NGW6ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:5b:fc:29:64:23:66:eb:34:8e:c4:34:b1:7c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2919334ad2ad53616c34fece96ce29230f86349
Validity
Not Before: Oct 19 15:01:26 2025 GMT
Not After : Oct 20 15:01:26 2025 GMT
Subject: CN=6a0b9d6fda0fbe1e9dff420940dac8c6ce9990af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:b9:0a:94:1f:bb:19:c1:98:41:10:b5:61:
ba:3f:b0:2f:92:45:2b:5b:15:b8:a5:17:25:24:98:
0c:e5:66:5a:5d:75:38:5c:8c:00:98:88:7e:35:6f:
82:18:14:70:e2:f4:a7:8f:23:a3:2a:16:3b:c3:02:
6a:df:d9:c9:7c:ee:76:fb:a4:8b:b6:5a:2b:df:14:
8c:99:62:57:98:0b:6f:c3:ba:2a:2e:5c:59:d5:7c:
d2:a3:43:f8:ac:7c:ae:77:93:27:94:5a:b5:1a:11:
54:54:b2:e0:6a:f5:eb:8d:7d:53:8b:a2:4d:1e:ed:
4e:d2:f1:e9:a5:c8:18:01:57:5e:63:4b:01:d0:1d:
71:03:33:07:bb:3a:43:ee:85:4b:91:38:5f:49:45:
22:2c:85:82:4f:b6:b2:76:a0:ef:51:cd:e4:3b:d8:
60:d0:0e:96:b5:c9:60:e1:fb:af:63:f8:13:56:c9:
12:4e:67:b5:29:2e:97:85:c4:ca:96:38:aa:80:d9:
59:2e:dd:8e:e7:8b:0e:72:93:1a:a4:fa:17:07:ba:
4d:57:67:97:98:2d:70:58:ce:ef:04:ae:d2:ff:fc:
5c:5c:41:15:2b:7e:dc:b9:73:77:4a:33:3c:41:54:
2f:32:13:be:32:7f:09:96:d4:0e:1e:4c:23:69:5a:
a0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0B:9D:6F:DA:0F:BE:1E:9D:FF:42:09:40:DA:C8:C6:CE:99:90:AF
X509v3 Authority Key Identifier:
keyid:C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:28:4a:6f:38:50:a4:c9:57:1a:96:90:e4:af:fb:11:55:ab:
3f:bf:c3:9b:b4:f6:c0:e6:19:b5:54:7d:7b:d1:ea:45:c3:4e:
eb:53:50:b6:c0:83:08:e6:2b:40:c5:ef:6c:f8:70:c6:17:b7:
16:5c:f9:db:49:94:8f:95:c6:85:ca:ff:71:44:5f:71:ee:c4:
90:8b:73:6f:f3:cf:60:53:c5:b4:aa:56:53:69:f8:0a:ca:ea:
21:e5:10:59:15:e2:08:1a:aa:4e:3f:e9:62:3d:74:5c:02:4d:
57:b7:21:35:4a:ab:5f:b0:75:2c:df:70:2b:5f:5d:e4:9d:01:
c1:b8:02:6f:bf:ab:2e:77:2b:7d:29:6d:62:f0:d1:ed:71:52:
11:2a:ae:1e:c6:03:a5:e1:aa:62:e3:a7:82:90:02:b7:12:3f:
0d:32:ef:16:f1:e6:40:cd:2d:d2:6d:f0:72:53:db:13:c7:a6:
9b:18:8a:8d:8a:73:89:b8:35:c6:9d:e5:08:1a:d0:e3:34:e6:
b0:41:57:a2:30:c7:e3:fe:9e:cd:42:e1:a2:94:0f:c3:35:12:
a7:cf:e6:95:74:aa:74:ae:32:2c:35:5e:51:7c:a5:ff:7b:14:
e3:c5:36:f0:b1:9b:42:39:ca:4b:bf:54:e7:d0:c3:de:2a:9b:
fd:b9:b0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:33 2025 by rpki-client