Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
File: woWhR044Yn4wGlUb4076RYKlzzk.mft (raw, json)
Hash identifier: ay8W2o54YMDXUt7tE3ymT/ezUdGEhqG75JtaVPSSORo=
Subject key identifier: 06:00:27:B0:31:E4:C9:6B:F9:41:50:13:5F:98:97:A6:9E:14:63:94
Authority key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Certificate issuer: /CN=c285a1474e38627e301a551be34efa4582a5cf39
Certificate serial: 0199FE473F5BA9A9A86C1648D51D81EB680F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 21:01:46 +0000
Manifest this update: Sun 19 Oct 2025 21:01:46 +0000
Manifest next update: Mon 20 Oct 2025 21:01:46 +0000
Files and hashes: 1: BVOoOEB4gLobrgdxyI5-9zlLWgE.roa (hash: pTz91HcnSysQwLiCozFtJaXWh/WUZ9JSyAK8aIEd67c=)
2: TKlbM4JoTI14SvlWl9KxKwEmigw.roa (hash: YEHXScxruB3ZAlC0fbNpVAnfjw2qlaMRSrlrmf/M0XY=)
3: woWhR044Yn4wGlUb4076RYKlzzk.crl (hash: iRXTQJ9+4P+MYDCKHkyrloNLeGKiGN7LiUZ7RSwCa74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:3f:5b:a9:a9:a8:6c:16:48:d5:1d:81:eb:68:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c285a1474e38627e301a551be34efa4582a5cf39
Validity
Not Before: Oct 19 21:01:46 2025 GMT
Not After : Oct 20 21:01:46 2025 GMT
Subject: CN=060027b031e4c96bf94150135f9897a69e146394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:04:e0:8d:32:ad:e6:00:09:34:31:33:e2:
f2:00:10:90:01:42:63:6a:f8:56:1d:8a:70:3d:1d:
45:c7:ed:0f:15:97:85:e6:b5:d4:f0:5f:ba:1e:49:
ee:28:d1:11:6e:8d:2e:6a:72:13:65:e8:42:a9:75:
1c:26:dc:d0:84:94:96:ee:df:12:e8:19:8f:3b:d5:
f1:9d:a0:86:9b:28:79:11:5c:3d:0f:4c:fd:cb:a6:
8e:a4:5f:7a:25:4c:06:87:94:a8:f0:a8:8d:51:39:
91:07:60:cb:3d:52:ed:75:d5:c7:0e:e1:dd:8e:bc:
76:d6:48:d1:00:63:ae:96:11:8e:59:5e:8d:80:f2:
6d:f9:d3:59:a6:84:34:58:92:b4:10:05:67:76:0c:
e0:dd:9b:70:4f:74:26:9c:60:fc:81:d0:09:ae:f9:
a9:58:85:2a:6b:15:94:ae:a3:a1:4b:88:e8:d5:fe:
ae:61:ce:25:03:06:90:43:d4:42:8c:8f:82:92:27:
f5:a9:6f:ab:c3:62:2a:0b:45:c5:f7:18:c3:42:45:
05:29:a5:58:6b:df:81:42:57:a3:c9:aa:8d:16:2f:
f7:74:62:77:ad:8e:71:23:94:b7:27:d1:23:ec:a3:
e7:2f:e8:cf:91:cf:e8:5b:e0:ff:a3:bf:a1:45:ae:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:00:27:B0:31:E4:C9:6B:F9:41:50:13:5F:98:97:A6:9E:14:63:94
X509v3 Authority Key Identifier:
keyid:C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:16:64:16:cb:35:4e:94:1c:3e:f4:af:d2:fa:62:bd:20:ac:
3a:9d:64:43:be:90:55:0a:80:bf:86:09:0f:34:0a:f2:01:8c:
2f:07:dc:05:af:8a:74:ee:30:02:d3:4d:15:dc:f3:5d:33:e8:
7d:24:fe:f2:ed:e6:51:56:c8:ba:35:0e:a8:52:42:3c:0b:73:
cb:71:97:db:d1:49:3f:2b:06:cb:28:25:5f:a9:7f:bf:2c:ac:
2f:0f:ca:95:dd:ea:da:bd:ba:b4:86:1c:2f:ea:4c:63:e2:59:
a7:ca:f7:d2:5d:6b:07:69:c4:32:81:35:1f:c3:4f:54:72:21:
0d:a3:0b:ba:05:3e:98:7d:87:aa:1c:12:10:95:ee:6c:93:fa:
4e:8f:a3:86:cb:9f:ce:06:62:71:be:71:23:8e:5b:f9:45:f8:
56:d5:f9:6c:cf:1a:69:17:49:72:eb:8e:53:92:7f:23:6a:06:
1d:b4:e8:1c:53:c5:d2:5d:fe:c9:51:0d:2b:90:e5:69:9a:ea:
cb:51:51:96:7f:18:12:8c:27:6e:e8:f6:83:ba:19:cc:14:77:
59:d4:7a:df:73:af:d7:24:8f:2c:58:64:e2:d4:c0:4e:b1:07:
c7:d0:f2:63:a1:ee:b4:36:fc:f5:8f:bd:a5:3b:e9:80:46:88:
14:d1:e0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:12:47 2025 by rpki-client