
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
File: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft (raw, json)
Hash identifier: i0qKqNUXf3jcqCCKEbqti30DRkcpZVl1VXhTleKwd2o=
Subject key identifier: C1:0B:C1:19:8D:81:B1:36:4A:13:45:B9:F0:E1:50:63:2D:B7:24:EC
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Certificate issuer: /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial: 0199FC8FB09A55B4E3C3ECBDD4BF2E310FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
Manifest number: 13D7
Signing time: Sun 19 Oct 2025 13:01:39 +0000
Manifest this update: Sun 19 Oct 2025 13:01:39 +0000
Manifest next update: Mon 20 Oct 2025 13:01:39 +0000
Files and hashes: 1: T4eXTqD8qMkY5DY9RCIRmYEaW64.roa (hash: E3LBQ2rpYHnPvo7DUVa09ZVv6KEvA9HMX0+KhVuVzuY=)
2: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl (hash: qQ3VuisrtpUEXcJc7hXyeMT4X8H0WAx5JwYS36gx+8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b0:9a:55:b4:e3:c3:ec:bd:d4:bf:2e:31:0f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
Validity
Not Before: Oct 19 13:01:39 2025 GMT
Not After : Oct 20 13:01:39 2025 GMT
Subject: CN=c10bc1198d81b1364a1345b9f0e150632db724ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:a4:c6:23:7d:13:aa:3d:b5:79:cc:f7:0e:
86:88:eb:71:2f:e1:b9:50:f8:2c:03:bc:cd:86:4e:
62:ea:5f:02:01:f8:1c:a8:d7:c4:61:ce:b2:e3:90:
f5:fc:35:bd:20:36:23:82:48:a7:57:7e:90:6c:c1:
e1:96:c4:94:b4:75:74:1a:50:d8:06:7f:01:d7:14:
13:28:db:d3:6f:76:7a:01:26:cb:90:a4:c1:02:50:
12:a2:22:72:b8:f9:04:eb:08:7c:52:f1:20:71:e1:
a2:f0:d9:75:92:89:9b:d2:07:68:7d:42:c4:8b:13:
99:05:6b:6c:01:33:ee:69:29:f1:99:86:53:32:d0:
3b:fc:71:08:7c:fe:ae:0c:2f:b3:7f:0c:8a:db:76:
44:bd:16:7e:2f:55:50:9a:e4:48:70:73:b5:a3:6e:
48:16:3d:ff:05:a3:7d:1a:fd:5b:d3:4f:6b:00:d0:
ec:9d:1d:3f:16:c7:ed:49:ae:b1:66:41:03:54:4f:
f5:8f:0f:eb:2d:d4:cf:7c:d5:d6:19:99:ae:e5:ce:
55:22:17:c5:6a:23:7c:15:70:c2:14:66:6f:26:03:
45:9d:2a:51:25:9b:c2:22:b4:e4:4d:b0:7b:62:f2:
53:88:26:38:5a:79:d6:bd:9e:b3:34:50:b1:62:c1:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0B:C1:19:8D:81:B1:36:4A:13:45:B9:F0:E1:50:63:2D:B7:24:EC
X509v3 Authority Key Identifier:
keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:47:e0:9e:94:0b:3b:a4:68:73:7b:45:02:f7:38:6a:1b:d5:
cc:0a:0c:ea:75:a0:b9:af:25:6d:b1:3f:a5:32:45:c8:4a:bd:
0d:a3:c7:47:64:63:fb:22:41:21:cf:9e:ac:6c:52:27:5c:44:
4a:8e:de:bc:7e:26:aa:38:06:c7:34:fc:f6:bd:81:50:97:5a:
18:82:10:8f:5a:9d:e9:2d:4b:c1:2d:7f:57:d6:3c:6e:b3:12:
7c:d3:31:82:87:75:26:05:6e:84:72:d1:69:2d:df:71:d6:12:
5e:b3:57:91:a8:96:2d:fd:4e:e3:e3:3a:fb:5e:d1:96:ae:67:
53:2e:1b:2d:e8:29:c2:cd:69:f6:64:b1:a4:88:23:95:7d:b9:
97:be:4c:9d:72:13:49:b6:55:3e:4c:ab:cc:82:72:81:51:2c:
36:5e:49:c8:62:ef:83:15:37:5f:7f:b0:e8:8c:dc:b8:87:ad:
4c:89:f6:9a:95:59:b3:d0:cb:9f:79:c6:d2:69:ff:97:55:ef:
b6:28:f4:24:22:84:97:10:ed:6e:94:8d:02:61:8d:36:d4:46:
73:4e:1a:08:e2:4d:34:f9:b2:5d:e2:44:f2:46:f7:5a:eb:09:
e4:37:bd:d3:32:f7:9d:eb:e5:f1:4a:b7:1b:55:42:93:85:75:
21:a5:ee:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:37 2025 by rpki-client