Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
File: WB7MGnTPkqthnF9xASOTfOUNnEM.mft (raw, json)
Hash identifier: y1UL8eSPRJSpBRwNp66eLaqblbXbPN1YuRtODpC02Hc=
Subject key identifier: FE:45:34:8F:B3:15:C1:7B:06:96:BC:5D:B0:8E:16:55:5D:57:B9:C0
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 0199FBEB9AC417E7F1BC99F23A81435E69EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 10:02:25 +0000
Manifest this update: Sun 19 Oct 2025 10:02:25 +0000
Manifest next update: Mon 20 Oct 2025 10:02:25 +0000
Files and hashes: 1: EoBJcQ13nwZQ8ax-IlPSxkFCeMM.roa (hash: rMigo0zSOtmbHHMuZxfoXOVUzYWo84YshECpqSkC6O4=)
2: FRO4uwByqKxauyS9gXAIPw-fjUY.roa (hash: S7+hb35+hDpVRPSEr/9Dyjjwa4OmuFnKDBhwrckl+dA=)
3: WB7MGnTPkqthnF9xASOTfOUNnEM.crl (hash: X455jpUKhlQdjhRAcOZdTXU2SV5oZY1yN7biHff6pSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9a:c4:17:e7:f1:bc:99:f2:3a:81:43:5e:69:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: Oct 19 10:02:25 2025 GMT
Not After : Oct 20 10:02:25 2025 GMT
Subject: CN=fe45348fb315c17b0696bc5db08e16555d57b9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:d1:a4:4f:1d:94:7b:7c:16:d6:97:ec:59:
de:da:8a:79:81:00:ff:fc:e2:e4:2f:d8:b0:71:91:
64:bd:e0:25:d5:57:a1:0d:dd:71:47:31:d7:52:2b:
a4:44:d1:32:ec:f7:5a:37:59:b6:10:de:b4:5f:a3:
d0:ea:24:95:77:2a:20:bf:35:f6:73:20:23:07:a5:
6e:8c:11:69:b1:5c:fd:48:05:94:db:be:2c:32:96:
24:22:33:db:c9:93:92:b6:e9:f3:ab:fd:49:77:be:
1b:aa:07:19:b7:e8:3b:6f:8f:94:dd:72:59:b9:0f:
e5:70:38:91:91:3d:e8:69:f6:6c:38:97:41:4b:06:
4f:bb:5d:fe:b7:d7:99:98:7d:ac:0c:a3:2f:65:0b:
5a:f1:8e:68:41:13:ff:99:6e:2e:eb:41:b4:fc:96:
f2:59:fa:ac:aa:af:19:61:9d:9b:1b:37:fa:0a:ab:
c0:b7:71:e6:39:ff:62:37:8e:a0:7a:75:cd:63:1c:
f7:51:d9:6b:3e:f5:5f:8b:ab:f7:d8:fd:77:16:67:
c4:c9:bf:61:80:c3:64:26:00:4a:52:17:6c:06:57:
be:85:10:65:c5:ae:71:fb:bc:36:ac:cc:d9:b4:81:
63:87:aa:7e:b7:67:e6:75:28:db:99:a6:e6:b4:75:
1c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:45:34:8F:B3:15:C1:7B:06:96:BC:5D:B0:8E:16:55:5D:57:B9:C0
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b2:c9:17:67:7f:02:3b:67:a6:33:65:8e:b9:94:82:60:e1:
e9:75:1a:50:ca:ad:f5:37:2e:00:fe:cc:b9:c3:35:dd:cd:5f:
a9:1d:7b:2a:80:2e:0b:65:94:6f:0e:be:3d:ec:aa:f3:5e:1e:
48:07:63:6e:d8:8e:54:89:97:83:75:09:85:88:9b:b0:31:1f:
cc:fe:bf:9b:da:79:98:18:35:77:5a:e0:1d:9d:54:d5:6e:48:
fe:67:23:d3:ff:b0:ef:a3:37:65:a6:03:2f:23:3c:cd:e6:8c:
66:03:85:67:bc:52:96:80:86:d8:e6:8e:0d:ef:fb:ed:96:34:
25:0e:07:95:65:39:3a:9f:f0:a5:73:e0:3d:69:88:f2:9e:96:
f7:77:3d:94:5b:d0:46:2c:33:2f:30:97:f1:f1:9e:89:6f:b4:
76:23:68:7e:96:5e:66:e8:34:ff:09:89:ee:ee:e5:01:92:0a:
87:4a:3c:65:2b:16:d7:83:5b:c3:47:bf:58:d3:10:0c:bf:11:
f5:03:de:f0:01:6c:0f:b4:74:7c:a2:e6:35:a6:b8:67:0b:fe:
5f:c0:16:00:db:62:da:11:05:a5:5a:c7:a1:e4:cc:d3:d3:ed:
18:48:5b:64:2a:3f:53:91:62:f1:00:f1:94:24:e7:fe:36:c7:
04:e4:31:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:17 2025 by rpki-client