Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
File: wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft (raw, json)
Hash identifier: AzBQPd8AzpKZO9mfgIfYQ9cf0F9ami+s3x5CeDVXPHU=
Subject key identifier: 29:01:67:E3:7F:CD:BA:17:32:A7:C3:90:2B:A6:00:34:64:1C:01:CC
Authority key identifier: C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
Certificate issuer: /CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Certificate serial: 0199FBEBEF2C67348FA97D46002CDFA25901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
Manifest number: 06D0
Signing time: Sun 19 Oct 2025 10:02:47 +0000
Manifest this update: Sun 19 Oct 2025 10:02:47 +0000
Manifest next update: Mon 20 Oct 2025 10:02:47 +0000
Files and hashes: 1: ZWfwRz9SdF5HlUEU_xQsfm2pEuc.roa (hash: FPKU4sBZtKV03dopSyyPb4q2mr5BiiBfqidcOPbFyqg=)
2: o4qbcCQCij_4lrM4fuG-GZzDpjs.roa (hash: OQOBy/7xXgD89cYeKeQCwe26Q3oYa0ii7bEbJEXvS2M=)
3: wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl (hash: TKC7W3Moluu/7eczZlzbpytIYyf/QqbVNX1xYlVny1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ef:2c:67:34:8f:a9:7d:46:00:2c:df:a2:59:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Validity
Not Before: Oct 19 10:02:47 2025 GMT
Not After : Oct 20 10:02:47 2025 GMT
Subject: CN=290167e37fcdba1732a7c3902ba60034641c01cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:59:0e:15:fa:a5:9a:af:d8:14:e5:04:aa:
08:e4:cf:83:54:05:24:01:76:da:e3:c7:5b:91:b6:
3e:7f:a8:60:04:92:53:8c:fe:22:1e:00:b0:96:14:
e7:8c:30:5e:9c:5b:db:d2:5a:54:d4:ae:70:be:23:
4c:79:8a:d2:ac:2f:13:e8:45:79:cf:04:90:b1:ac:
11:57:06:53:5e:7d:97:79:b6:87:ed:ba:41:07:d6:
51:f0:3f:fa:27:01:a8:16:01:29:53:ae:c8:46:31:
41:89:cc:b9:22:4c:37:c7:d4:ef:56:39:0d:7b:2f:
16:34:42:d4:12:8f:e7:3c:64:98:2e:57:bf:a0:40:
56:17:66:f0:13:8b:64:4d:c0:ad:70:84:d7:22:64:
cd:25:fe:c1:02:50:89:40:2c:bc:56:02:65:ea:ca:
74:83:30:67:3b:c2:39:17:fb:b2:8a:61:52:23:ee:
fa:70:2e:bd:bb:85:1d:e1:73:6b:de:55:15:d8:5e:
6a:e0:36:de:38:97:d8:4b:7e:6e:c1:73:35:57:62:
57:c0:25:42:2b:3b:86:76:86:33:06:6f:34:3a:0f:
1d:23:a7:1e:61:38:7c:c0:de:5b:a0:06:56:59:c2:
db:51:bf:02:2e:17:e9:f8:75:ea:33:a7:0c:74:8d:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:01:67:E3:7F:CD:BA:17:32:A7:C3:90:2B:A6:00:34:64:1C:01:CC
X509v3 Authority Key Identifier:
keyid:C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c8:5a:9c:7d:5f:49:14:db:ba:83:ee:65:55:e6:f6:cc:8c:
80:cc:ad:1d:92:94:ad:65:a1:5d:5c:b0:13:fb:72:8d:7e:66:
dd:57:d0:10:09:21:0a:59:8c:4b:a4:09:28:dd:5d:8d:46:8f:
58:10:f8:70:82:7f:dc:42:fd:33:d2:6a:f8:c5:ad:73:77:2a:
0e:97:d3:f7:bd:01:a8:10:fa:58:bd:4c:0d:95:8b:5e:cb:f4:
34:64:8f:dc:04:25:61:a3:61:b3:bf:17:a0:31:85:2a:4f:5f:
13:69:2e:77:91:af:f0:95:62:e0:31:30:f6:66:44:f1:19:d5:
55:37:b0:4d:2b:95:bd:73:e7:93:dc:ee:fa:57:12:df:ca:a4:
e7:30:c1:4b:3b:a4:3b:1a:c8:78:7f:ec:94:61:2c:c4:11:e7:
fd:8a:94:f0:19:fd:e9:e9:fd:e2:71:bd:83:5d:b2:e6:12:b1:
6a:d0:e4:21:19:21:91:f6:62:07:61:1a:5a:cd:17:51:33:00:
9f:93:fb:80:c8:9a:97:46:05:92:ce:71:24:5a:d4:e5:c1:0c:
77:6b:1c:38:6d:78:ad:af:32:79:a6:82:e8:17:1f:29:c7:34:
9e:43:bb:96:16:e7:b8:f8:06:b7:40:7d:bb:a0:d1:58:b6:af:
ea:9c:7b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:13 2025 by rpki-client