Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
File: w8YbUevIQYDwprIy6H351hyQ-qs.mft (raw, json)
Hash identifier: Ejgw8KRuJOp+e7i1On3WTu+mwWyONKKeWk6Q/DqurD8=
Subject key identifier: 96:E5:B1:C5:8F:CC:75:16:E6:E4:AF:10:05:53:AE:B4:D2:E7:00:72
Authority key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
Certificate issuer: /CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Certificate serial: 0199FCFD97A5D9721AEA830F4B64586DDE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 15:01:41 +0000
Manifest this update: Sun 19 Oct 2025 15:01:41 +0000
Manifest next update: Mon 20 Oct 2025 15:01:41 +0000
Files and hashes: 1: 1-ndEryzCguWCGvVWWmkd8W4KbQ.roa (hash: W7EqtKjOdrRjfIUBcKhssjKWmvswGN88L1U5twVHTxE=)
2: 5fWADeIk4d10ZbIqGhJnIwZyHH8.roa (hash: QzLL6CT6LeM4dPuY4ZTi6ISO36hu50lOly24fxPuWC4=)
3: w8YbUevIQYDwprIy6H351hyQ-qs.crl (hash: a6xHU82LgcTa3kw0zBKrZXwGkjBAxC/mQUy9taJGo4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:97:a5:d9:72:1a:ea:83:0f:4b:64:58:6d:de:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Validity
Not Before: Oct 19 15:01:41 2025 GMT
Not After : Oct 20 15:01:41 2025 GMT
Subject: CN=96e5b1c58fcc7516e6e4af100553aeb4d2e70072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:eb:57:79:5b:1e:39:ad:26:8d:b5:66:53:
97:06:6b:9c:aa:73:05:69:c6:98:9d:f4:78:ae:3c:
80:fc:68:13:78:89:02:f0:af:ac:36:7e:65:7e:d8:
47:a9:db:3f:b2:df:cb:6a:e2:22:45:a8:41:2d:5b:
0a:34:d8:90:21:d1:7f:5d:1d:7c:7c:6e:0f:56:20:
60:04:dc:63:6a:50:db:c6:3e:ac:68:e1:18:18:a6:
ec:46:84:17:1f:1c:9a:09:4d:7c:c2:6f:84:83:36:
5d:71:82:04:d1:94:6c:3b:76:4f:f0:9c:41:c0:43:
b3:fd:4d:37:cf:ce:4f:ea:50:c2:d0:89:e5:dd:e8:
8d:95:47:3d:8f:9c:1f:3f:4f:e3:60:bb:d2:ae:06:
fb:f9:c3:01:31:e9:c5:4e:84:4a:73:23:93:ce:f2:
b9:0a:26:72:f1:6b:ee:4f:66:56:54:5a:0b:3c:df:
60:98:47:24:69:a2:07:c4:0a:6b:1a:38:10:ca:b5:
95:59:b7:d2:96:b1:67:a9:6e:56:9f:a8:bd:0d:d4:
e7:46:b3:62:97:3d:81:31:7c:26:94:6e:11:6d:b3:
a8:ca:4a:43:a3:4a:a3:82:b6:03:d8:77:7f:df:c0:
5a:24:85:f8:db:ee:3c:7f:95:e3:0d:6e:63:3d:2f:
ee:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E5:B1:C5:8F:CC:75:16:E6:E4:AF:10:05:53:AE:B4:D2:E7:00:72
X509v3 Authority Key Identifier:
keyid:C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:08:00:2a:ea:12:4d:64:40:5c:0f:7a:32:f7:29:f3:8b:81:
98:13:6c:74:da:f4:52:f6:46:69:c2:fa:ef:1c:ee:33:09:f5:
96:b3:59:b0:4e:e4:51:6a:e9:05:36:1b:b7:84:4d:f5:78:78:
eb:ca:8e:bf:22:81:64:9d:c1:82:42:77:ef:91:65:2f:3c:73:
c4:24:e8:03:f3:1d:e9:f4:a7:07:44:98:ad:39:e3:a2:ed:27:
f4:b5:01:fd:53:f2:50:66:97:a4:e2:67:e4:07:62:bc:d5:b2:
fa:b1:89:eb:f4:8b:40:93:95:45:be:29:b5:d8:e2:27:60:0d:
65:8f:ef:b7:96:f7:98:56:cb:44:0e:56:56:77:01:6c:db:19:
78:80:65:34:f3:49:bd:16:c9:05:bf:2d:fc:51:05:f3:ae:d5:
1c:2a:27:38:9e:a4:eb:48:75:eb:34:13:3d:15:ac:de:bc:10:
24:94:19:2a:e5:6c:b6:09:74:24:60:ef:78:31:02:40:31:d1:
fc:10:81:4c:66:ef:eb:b8:71:d0:10:ce:02:e1:f4:7f:32:3c:
cc:9d:76:67:ac:76:65:29:06:fc:90:c6:76:ad:11:6d:70:e3:
57:54:59:bd:f5:d8:b4:72:5f:45:f0:46:1c:7c:8d:82:f1:69:
e7:6b:f5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:16 2025 by rpki-client