Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
File: wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft (raw, json)
Hash identifier: uFNua+Mo29294XOf0kuQpL1PxN4C+iaUG6FgvPx6/Oo=
Subject key identifier: C4:88:D9:2C:6B:A9:9C:71:8D:9A:E3:21:23:C1:D5:AD:FA:0F:18:80
Authority key identifier: C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF
Certificate issuer: /CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf
Certificate serial: 0199FFC7BF371A746BA1268DA59F47397657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
Manifest number: 01D4
Signing time: Mon 20 Oct 2025 04:01:44 +0000
Manifest this update: Mon 20 Oct 2025 04:01:44 +0000
Manifest next update: Tue 21 Oct 2025 04:01:44 +0000
Files and hashes: 1: _M9B2KOz2UeSzhUegvYxGA2BwYo.roa (hash: D0dhCF5CGV5Me0OwA23AKaMmK0KyGQzZrCqAnO1Fksg=)
2: wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl (hash: POXXq6EX1ySdJuQN1w1d3FDnAZgdWewF+CuNH3sqJy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:bf:37:1a:74:6b:a1:26:8d:a5:9f:47:39:76:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf
Validity
Not Before: Oct 20 04:01:44 2025 GMT
Not After : Oct 21 04:01:44 2025 GMT
Subject: CN=c488d92c6ba99c718d9ae32123c1d5adfa0f1880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:b0:de:0a:ed:e5:3f:e7:25:41:81:8e:1f:
cb:c3:06:98:29:86:07:44:a1:7d:02:f4:30:f8:6e:
c2:f1:ee:5f:1a:d2:94:fc:6a:a4:d9:e5:94:61:a4:
68:ea:52:90:38:7f:2f:b2:46:69:1e:d7:ac:54:93:
f9:7b:2c:c3:88:46:2a:23:57:b1:fa:1d:d9:90:4a:
b9:ba:6f:c2:f7:7f:69:e2:c8:85:59:0c:62:e4:91:
60:ea:e2:72:94:9e:ae:de:23:07:4f:a0:f0:a8:9c:
d3:29:d3:62:08:4f:94:59:70:ff:63:d3:5c:55:08:
12:a0:63:c4:43:cc:83:d6:9f:92:48:0d:a4:ff:6d:
a7:bd:21:1d:d9:72:59:47:e0:a7:3c:2e:f9:12:4b:
9d:62:c1:f6:31:ab:1a:39:7b:97:2c:1c:e0:57:99:
f4:d3:75:17:f0:3a:52:55:49:3b:4d:e2:49:e5:76:
fc:0f:62:5b:db:11:6f:8e:2e:40:72:a9:03:14:03:
86:46:84:d0:bb:25:9a:77:c1:ec:c2:3c:f9:d9:32:
7b:a2:a9:ed:1d:de:37:36:8a:5c:06:2a:0a:e0:2f:
8d:f4:83:a4:ff:6c:30:e3:41:55:7a:f4:a8:64:da:
2f:cd:88:84:a0:1a:cc:39:69:c9:92:5f:be:06:ab:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:88:D9:2C:6B:A9:9C:71:8D:9A:E3:21:23:C1:D5:AD:FA:0F:18:80
X509v3 Authority Key Identifier:
keyid:C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0d:4a:4f:b9:1e:65:f8:81:cd:f3:03:e1:a7:1a:60:52:25:
e4:ea:68:c0:04:a1:e1:bc:9e:58:73:cc:f0:45:6e:b7:06:9a:
50:ab:5f:01:0c:4c:c4:4c:4b:f2:62:ab:cf:9b:a6:cb:c3:70:
a6:3c:71:c1:42:a8:4d:e0:27:5e:bd:06:11:0d:fc:38:a6:5e:
c3:c4:a3:32:ac:0f:8b:63:57:1d:23:de:74:9b:8b:74:d2:98:
47:85:cc:44:c4:5e:98:0d:59:6a:8c:ed:03:85:52:1c:95:1e:
5c:5e:39:04:71:48:78:bf:49:f3:f5:d9:3c:e9:b2:46:99:bd:
00:8d:32:9a:1f:28:5c:76:44:54:2b:f5:f8:48:74:d5:cf:ef:
34:0b:89:21:ac:0a:39:0b:de:e0:81:96:70:8a:85:cb:df:1e:
a2:90:e7:54:11:aa:43:b9:7c:e8:95:d5:64:d6:28:df:68:b5:
30:f4:80:d6:18:1e:9d:26:0b:31:97:ce:24:ad:f6:65:79:ee:
6d:de:01:e2:32:78:ac:76:e5:2a:6f:42:e8:40:d4:b9:ca:42:
32:14:69:01:e4:cc:d0:b6:aa:b1:10:6e:e2:dd:4e:9b:47:9c:
dd:98:45:bc:77:eb:f8:e2:00:89:fe:3c:f3:6f:d6:1c:64:e4:
57:02:ee:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:15 2025 by rpki-client