Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
File: wrUuo8q9FGpXffzfuHX_WjV1ctc.mft (raw, json)
Hash identifier: JLS21iSNPUWanV4uNndzBXklZxrB1i+sXwdMBvtgMpY=
Subject key identifier: FC:99:78:D6:AE:7C:69:C0:F0:84:31:C7:FE:D2:EB:E2:C8:6D:B1:3C
Authority key identifier: C2:B5:2E:A3:CA:BD:14:6A:57:7D:FC:DF:B8:75:FF:5A:35:75:72:D7
Certificate issuer: /CN=c2b52ea3cabd146a577dfcdfb875ff5a357572d7
Certificate serial: 019A0035182F695F729D3C964AC9E629E63D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
Manifest number: 0669
Signing time: Mon 20 Oct 2025 06:01:10 +0000
Manifest this update: Mon 20 Oct 2025 06:01:10 +0000
Manifest next update: Tue 21 Oct 2025 06:01:10 +0000
Files and hashes: 1: MG_LemiZ4GgmFKwuBUT8GzFCS9o.roa (hash: OHMWKPBCF82oEvnytVAEpjmK3rUs3XOc7SKkHkxU2KQ=)
2: wrUuo8q9FGpXffzfuHX_WjV1ctc.crl (hash: czNNOtfjp9a4NftIGGIiTbJeqfkL/jQw+ZVs9tA+ElQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:18:2f:69:5f:72:9d:3c:96:4a:c9:e6:29:e6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b52ea3cabd146a577dfcdfb875ff5a357572d7
Validity
Not Before: Oct 20 06:01:10 2025 GMT
Not After : Oct 21 06:01:10 2025 GMT
Subject: CN=fc9978d6ae7c69c0f08431c7fed2ebe2c86db13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d7:36:d2:bc:4f:57:22:d4:c2:d4:16:dc:c3:
b3:0e:b4:39:a8:9d:91:2e:f7:5f:b3:c1:7c:1b:36:
82:2a:1c:c9:43:8b:55:0f:3d:ee:fe:76:91:8c:9a:
a3:9c:27:0c:7a:90:c4:b3:81:12:90:e8:97:54:80:
2f:ec:10:72:c7:ff:7f:26:e7:15:3b:d4:a6:58:cf:
5f:80:f3:e7:57:64:32:f5:66:ee:00:41:e7:f2:24:
e8:3a:c1:20:1b:46:7c:88:e8:05:73:be:d1:f0:fb:
e7:28:38:8f:c9:45:39:a3:72:31:7d:15:18:42:0b:
fd:19:28:bb:40:d3:5a:16:73:17:fb:1a:00:07:c7:
52:72:f8:3d:4c:09:07:a0:2d:62:34:fe:7c:42:f2:
20:3f:7d:2a:90:bc:9a:01:10:25:29:3d:1e:b4:59:
7d:82:59:80:ae:dc:39:7f:6c:3c:4f:3c:08:bd:98:
5a:3a:41:a2:4c:12:2c:4b:a6:08:c2:98:9d:42:98:
0e:21:96:6d:a1:82:ad:b5:c1:1e:69:f9:a5:05:4e:
63:f6:75:2a:ad:6f:e8:61:d0:7f:3f:c1:20:18:5f:
11:9f:31:f5:95:fe:78:82:8b:97:c6:c1:11:18:07:
06:71:81:95:a7:30:a9:bc:7d:7d:f7:ec:88:b1:6d:
e5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:99:78:D6:AE:7C:69:C0:F0:84:31:C7:FE:D2:EB:E2:C8:6D:B1:3C
X509v3 Authority Key Identifier:
keyid:C2:B5:2E:A3:CA:BD:14:6A:57:7D:FC:DF:B8:75:FF:5A:35:75:72:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:29:53:c2:ff:e6:42:5c:10:5f:e5:e7:3c:b0:50:5f:69:10:
bc:83:76:98:c3:3d:b0:2c:0f:69:10:bc:14:7d:1f:24:c1:99:
d1:2e:37:27:73:5f:e3:98:dd:56:42:93:67:a6:fb:97:cb:5b:
c6:5a:0d:c9:9b:db:c5:64:b6:27:3d:1e:62:8c:0c:a5:57:af:
2e:76:47:4f:42:75:73:15:9c:d9:d9:33:04:3b:de:3b:60:83:
3f:82:75:93:aa:94:df:9c:cb:0c:22:19:43:af:b4:9e:83:b9:
e3:02:59:80:0d:28:b8:68:16:94:88:9c:14:b9:1d:dd:4e:a0:
3a:6a:a2:f9:30:51:75:d7:37:fe:ff:fc:44:84:a3:ac:89:f0:
76:9d:22:88:04:9f:1b:5e:fe:8a:24:d7:cb:a9:9d:30:e5:f2:
f5:5d:25:23:0d:73:bf:8b:47:06:4b:fa:f7:ca:f7:f5:c6:fd:
ff:28:bf:cf:63:d3:d1:0f:63:44:39:36:3f:23:b9:13:09:7d:
68:90:7d:b3:75:5f:fb:a5:76:99:aa:04:fc:a3:96:63:32:0b:
95:75:8a:d2:1f:5e:ac:a6:9c:a6:ad:03:38:5a:6d:b2:f1:88:
d0:c5:33:c3:10:5e:dc:8b:c3:75:30:35:97:b0:5b:44:75:84:
c5:38:d9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:01:26 2025 by rpki-client