Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
File: wVIzr0ulkRnW_xlNfNhmUISm7nc.mft (raw, json)
Hash identifier: STkEWGWQS/KwS04c9NBQHJnZLrBRGe+XVR3wJ4ZAkY4=
Subject key identifier: BF:C7:50:8D:1E:BA:76:D0:B5:AD:36:E0:C6:35:61:08:B0:74:10:19
Authority key identifier: C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77
Certificate issuer: /CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
Certificate serial: 0199FC8F27C87C5EEC8C9137E7BC9D5BBC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
Manifest number: 0D66
Signing time: Sun 19 Oct 2025 13:01:04 +0000
Manifest this update: Sun 19 Oct 2025 13:01:04 +0000
Manifest next update: Mon 20 Oct 2025 13:01:04 +0000
Files and hashes: 1: M-zl6ZmtNK_TSwrT44MkMmFWsWY.roa (hash: 4yxdkDwmfz59LnRbcG6OUavxv8vAR+8hlDkw2Ess8wU=)
2: wVIzr0ulkRnW_xlNfNhmUISm7nc.crl (hash: eKF9uDzumT+MG0zHkHpI3tiDgR6qGriQL6QoqXYCKjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:27:c8:7c:5e:ec:8c:91:37:e7:bc:9d:5b:bc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
Validity
Not Before: Oct 19 13:01:04 2025 GMT
Not After : Oct 20 13:01:04 2025 GMT
Subject: CN=bfc7508d1eba76d0b5ad36e0c6356108b0741019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:90:b9:29:e4:b0:42:d0:41:af:2f:46:87:91:
b8:db:fe:12:a8:3d:ee:7e:d4:49:1e:8b:98:25:d0:
b8:3d:dd:76:b1:4c:28:d5:2d:69:72:4d:d3:35:e1:
ec:0f:eb:6d:9b:6c:0f:0c:c5:81:97:72:51:bc:ad:
b7:af:8b:3c:c6:69:22:e2:22:43:8e:a4:82:e4:d4:
d5:65:7f:a1:b4:0d:cb:f4:f7:43:61:0e:37:95:17:
6e:29:73:da:ba:fb:4f:18:97:e9:46:1a:a5:25:93:
e3:af:e6:06:d3:cf:81:47:e4:86:a9:c8:2c:6e:be:
8a:db:3a:40:28:64:f6:b8:81:b2:7f:ea:de:2f:d1:
62:09:58:ca:40:fc:0f:ea:9e:12:53:fb:42:36:ea:
f7:6f:28:e2:03:4d:45:63:7c:96:29:8b:f4:98:f3:
12:16:23:a9:6f:b0:5b:0e:33:9e:2f:02:41:d8:ad:
05:09:1a:bb:3b:0d:f4:6b:87:d3:3d:5e:33:d9:d3:
92:d2:85:96:a9:0f:87:e9:77:7e:70:f0:85:b1:c1:
d7:d2:11:55:fb:e7:61:61:6a:28:43:0c:be:ed:43:
04:6e:26:5d:0a:96:dc:f7:da:d9:e2:c4:7e:48:1d:
b0:8f:dd:4f:59:1f:db:df:4d:a7:c6:59:65:30:a0:
22:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C7:50:8D:1E:BA:76:D0:B5:AD:36:E0:C6:35:61:08:B0:74:10:19
X509v3 Authority Key Identifier:
keyid:C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:93:66:dd:79:c9:53:c9:bd:ad:d2:fd:d1:97:55:28:02:2f:
8f:d9:42:56:a6:c9:4b:ed:8a:05:1c:4c:6a:dc:1a:43:4c:86:
e7:e5:7a:67:90:b1:aa:a5:78:19:07:c0:6e:dd:13:9e:aa:6c:
c5:ca:54:c0:0f:32:45:9e:b4:37:1f:1b:b3:0a:27:87:02:1e:
6d:a9:90:18:0d:f4:9d:09:a1:04:65:88:90:64:54:a7:70:7c:
9f:b8:e6:cc:7f:f5:78:a6:5a:11:5f:af:e7:3b:c3:9f:6c:9c:
6d:cc:85:e2:ef:34:8e:8a:62:dd:d1:83:0f:13:48:a8:70:29:
38:68:7b:d6:b6:8d:48:15:a2:0a:0b:67:aa:cf:21:ec:f3:bd:
eb:43:7d:f9:e3:55:a1:30:48:13:4f:5f:bd:c7:26:cd:33:18:
6b:01:0e:c6:1e:da:26:cf:83:20:fd:31:5d:11:e3:9c:fd:ef:
c8:8b:94:fe:40:81:1c:ee:75:a3:15:d0:21:67:d6:6f:56:7e:
f8:fc:6f:5a:38:37:09:19:bf:bb:a0:7e:31:c1:42:c6:10:4b:
70:60:ab:d1:75:c8:14:94:9e:bc:59:b0:d9:ad:17:92:31:3e:
86:15:b0:7b:e2:12:a0:7a:45:0d:07:2f:05:8a:de:ef:de:e6:
c0:bb:b0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:43 2025 by rpki-client