Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
File: wNKohFzfZXbejrARGAir1l_YvEQ.mft (raw, json)
Hash identifier: RlVfNlAxC3u7cp/BRF52A3j13O0h0ZF5WRcZuHUz7LM=
Subject key identifier: 8F:32:A1:24:A5:D1:53:63:16:CE:5D:58:7D:75:DC:5E:5A:EC:60:D8
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Certificate issuer: /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial: 0199FBEAD84D51536D89F40DC6E16F59BBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: OmgVAw8ZHFFpHCyw7LOehrOM8KA.roa (hash: 6CbGQ8M2p8DqUv4lPi9kJg+A49OPSohIvq46VoGyAHM=)
2: iB80sjC3FaeKn3w8-_wDD7I9eLg.roa (hash: J8k5oGXUl2TYImVeWDD/bvu/zaBz6UEfFHiKZd9EJV0=)
3: wNKohFzfZXbejrARGAir1l_YvEQ.crl (hash: Qr1phe95XF+yzwo4PWq3Z8PHUT3wLyIWYWAZduKIsFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d8:4d:51:53:6d:89:f4:0d:c6:e1:6f:59:bb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=8f32a124a5d1536316ce5d587d75dc5e5aec60d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:1c:bb:6e:e5:9d:b9:ff:4a:aa:7d:2b:3d:
26:a0:2f:c0:b4:11:62:f8:4c:08:64:7c:ef:03:ea:
27:62:aa:9e:fd:5a:09:2f:81:b8:7a:e3:ad:d1:72:
69:2e:8c:a1:e2:a3:ff:cf:a8:78:91:00:3a:cb:dc:
90:d8:7e:21:30:80:16:02:9f:ed:bd:9b:e2:8e:0e:
46:52:a6:27:d3:16:77:16:55:4f:4b:89:bb:57:49:
d4:6d:80:25:00:1a:aa:ae:f2:3e:cc:9a:92:e9:fc:
87:63:11:ad:17:60:a0:31:a7:37:24:9b:b3:00:b5:
49:01:08:13:cc:f1:38:51:42:f6:9e:61:ab:55:f7:
63:50:1b:f7:4d:8e:bf:19:85:d4:d4:21:8a:49:95:
66:be:83:7d:cc:e5:9f:0f:44:11:ff:d5:9a:88:53:
e7:3a:74:91:a1:1c:d2:1e:c4:76:5d:d4:e5:81:04:
59:55:e3:ef:f2:7b:0a:0a:29:26:65:bd:88:66:04:
40:33:be:87:e1:2f:cb:91:ab:d5:6a:7a:d5:ef:ba:
5c:f9:cb:29:37:ab:d5:a9:4d:88:4d:6e:f6:d8:b8:
e2:e0:55:ce:77:bf:ef:73:45:07:af:4f:89:a5:a2:
6f:04:7b:b9:45:96:e3:5e:f2:b7:02:8e:29:ae:1d:
49:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:32:A1:24:A5:D1:53:63:16:CE:5D:58:7D:75:DC:5E:5A:EC:60:D8
X509v3 Authority Key Identifier:
keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4d:b4:2e:c3:69:c9:20:db:30:ea:19:11:67:95:3a:16:8f:
77:65:37:f5:5c:ef:8d:a8:c6:3f:ec:d8:78:a2:44:e8:c4:98:
14:1c:9c:f3:af:86:c8:91:78:55:4f:08:6e:24:55:c6:28:d9:
dc:1b:80:8f:c2:e0:92:7d:89:ee:1c:0a:15:21:e1:f5:8e:1f:
88:c2:68:c0:9b:51:83:34:16:ac:2e:7a:b1:38:b1:a4:6e:57:
53:37:9f:5d:bd:c1:1e:4f:9c:14:8b:0d:42:1d:54:58:c4:d6:
4c:19:61:77:77:f5:78:4f:ab:36:05:f7:c7:1e:00:b2:30:6c:
70:7b:45:5f:2b:36:82:73:e2:71:7f:10:ee:ec:22:61:19:cf:
39:2c:9c:ff:40:5d:50:3c:22:c2:e6:d5:eb:68:b5:39:1c:77:
be:f6:06:34:ac:e3:5a:66:7d:af:56:bc:3a:2c:78:76:a7:bf:
8e:33:e2:c4:fd:8d:7b:3e:45:21:e7:58:03:8d:06:2e:93:9d:
81:d7:a9:14:d0:de:f6:22:1c:cf:91:28:7f:74:20:86:c4:bf:
af:f4:0d:e2:0d:d4:6d:02:c4:88:97:42:3a:47:b2:da:32:bc:
7c:d8:89:fd:d9:e2:cd:db:7a:d4:da:a7:d5:4b:0a:dc:4c:02:
e0:2c:d9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:46 2025 by rpki-client