Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft
File: wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft (raw, json)
Hash identifier: 1CK1D+D3h09RzEQ5tAXt9L1X7zbhMP08EI+0RggXHOA=
Subject key identifier: 95:AA:62:16:7B:9A:E9:31:C6:C5:DE:FA:D0:47:76:1E:89:26:9F:42
Authority key identifier: C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
Certificate issuer: /CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Certificate serial: 019A011106B1FD051D9411BA65F59CEDCCEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft
Manifest number: 167A
Signing time: Mon 20 Oct 2025 10:01:24 +0000
Manifest this update: Mon 20 Oct 2025 10:01:24 +0000
Manifest next update: Tue 21 Oct 2025 10:01:24 +0000
Files and hashes: 1: 1gW4wInA_dSwaTybzK2cECnN9GM.roa (hash: lDMswWk6x4gxqUk8wVyldaT2YU119AYZXfT2M/CJ54Y=)
2: wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl (hash: h4+tNyJRm0G+LqKZDbnZWD3tb5HD+beOPZ72c8HyPI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:06:b1:fd:05:1d:94:11:ba:65:f5:9c:ed:cc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Validity
Not Before: Oct 20 10:01:24 2025 GMT
Not After : Oct 21 10:01:24 2025 GMT
Subject: CN=95aa62167b9ae931c6c5defad047761e89269f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:58:52:11:30:62:15:1f:5f:75:85:e7:c3:
dc:fb:6e:c0:11:6a:c5:f4:79:a0:d1:ca:b5:27:29:
23:72:84:bf:9d:63:f8:66:38:3c:86:f9:fb:45:a6:
84:d6:97:1a:47:f6:6a:08:e7:14:20:bc:ba:d6:59:
a5:70:3d:e6:63:fe:e4:ba:dc:72:f6:50:39:04:2c:
2d:92:0f:40:ba:79:fb:91:d5:33:20:63:55:6f:f1:
bf:e0:88:93:5c:59:60:85:3f:ac:aa:4f:54:e5:e5:
24:ea:c1:ee:3a:b7:71:bd:e2:48:08:3c:04:38:94:
16:c8:48:47:f3:e0:ff:e7:db:46:d0:7b:70:58:67:
6a:b4:b5:27:15:b7:ff:14:b6:8e:03:a2:c2:66:87:
b7:18:a1:38:ff:76:a8:77:59:3f:7c:31:a8:84:f6:
31:3a:4f:97:8c:e8:b1:2e:be:64:1e:60:6f:04:40:
62:da:a2:27:e0:19:5d:fc:63:ab:fe:3a:02:02:d4:
92:f6:36:62:54:78:68:17:37:8e:bd:7d:a5:11:b0:
6f:db:44:8d:19:8d:b3:83:91:4c:f6:eb:18:8d:34:
92:f8:94:64:fd:5d:e0:99:9b:60:01:a6:32:62:7c:
0b:28:ff:f2:15:96:ac:45:e7:72:a3:65:da:73:b2:
ac:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AA:62:16:7B:9A:E9:31:C6:C5:DE:FA:D0:47:76:1E:89:26:9F:42
X509v3 Authority Key Identifier:
keyid:C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:89:cf:29:c3:09:2f:9b:fd:3f:5c:46:7e:8d:db:22:98:c9:
8f:27:5d:6f:b9:e6:37:68:d7:a2:8b:d7:29:f9:dd:45:df:6d:
c6:4c:95:95:d7:e2:5d:c1:86:cc:bd:7f:e8:21:e4:d9:54:b4:
9d:21:2c:c0:66:5a:a8:1f:94:ee:3f:71:51:43:33:2f:e1:b3:
83:04:09:30:36:81:3f:a1:5e:bf:e8:aa:4a:6e:89:3f:8f:ae:
14:49:ff:da:8c:6f:05:42:92:22:dc:4e:8a:e1:36:c1:e0:12:
1c:84:61:b9:ed:c7:94:fe:d1:e3:9e:79:d3:6e:a8:96:cb:47:
0a:53:f1:cb:66:45:66:c1:f4:7e:6d:09:c0:dc:4d:37:68:f9:
e7:ee:f9:9d:3a:2c:54:f4:3e:c8:f7:4a:6c:1a:6f:39:76:4c:
d9:d8:51:ce:9a:87:a2:b1:5a:b1:52:9c:1b:45:70:08:bf:31:
2b:cf:76:3b:ef:c8:e3:7d:f8:d6:64:04:a4:8f:01:af:3c:9f:
a9:84:a4:13:f9:ec:f3:34:35:f6:96:99:5e:e2:b5:c3:ea:e0:
7b:9a:cf:d9:f6:a4:2d:b9:3b:96:b4:32:1c:75:d6:52:fe:b9:
55:45:e3:fb:72:9b:9f:de:16:40:3e:01:21:12:ee:6b:21:a5:
f0:84:8e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:51:51 2025 by rpki-client