Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
File: wz-t0SfmXNkN4-lWjly8-0jJsko.mft (raw, json)
Hash identifier: 0U4gYFqBFeL6yTdIpVl7rd5JK+QUx3gic8eQO0vpk0s=
Subject key identifier: BF:4B:36:FD:83:5A:35:15:E6:1E:3B:3C:58:5B:28:36:55:F5:B5:BD
Authority key identifier: C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A
Certificate issuer: /CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
Certificate serial: 0199FCC6BC7225C71F2C37F5BF7A8D0B28A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
Manifest number: 06E3
Signing time: Sun 19 Oct 2025 14:01:46 +0000
Manifest this update: Sun 19 Oct 2025 14:01:46 +0000
Manifest next update: Mon 20 Oct 2025 14:01:46 +0000
Files and hashes: 1: mRIJhbiYi4_Fn9rbvJxpcE5BqwE.roa (hash: QFNaK1Gy0ycMOCo2B8J3U81MNF8ZnZJf7GULAc5HdJY=)
2: wz-t0SfmXNkN4-lWjly8-0jJsko.crl (hash: sGXRFD18Q0D2XE5gE3jpf30GuL1hMuQ67ni0ua7F29A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:bc:72:25:c7:1f:2c:37:f5:bf:7a:8d:0b:28:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
Validity
Not Before: Oct 19 14:01:46 2025 GMT
Not After : Oct 20 14:01:46 2025 GMT
Subject: CN=bf4b36fd835a3515e61e3b3c585b283655f5b5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:20:88:d5:3a:9a:32:fa:e7:09:f7:5c:ba:
0f:7f:cc:a0:8e:12:f3:be:84:4b:93:4d:f1:6a:88:
f2:8f:8c:28:9d:16:7f:a1:a4:b2:71:d7:5f:8d:cd:
ff:1d:49:4e:ab:46:d6:3e:4b:e2:22:10:b8:98:bd:
7e:3b:9e:db:e1:29:59:34:75:0e:1b:aa:ab:2e:fc:
ab:f7:26:28:92:df:d9:0c:13:b0:5a:12:d7:21:89:
62:f4:29:22:e1:03:df:e9:a1:46:5d:d3:ee:40:eb:
27:5a:04:b8:68:bc:99:5f:64:e7:62:af:0e:34:9c:
1a:42:09:1f:2d:cc:59:b8:71:a1:5e:44:56:a9:2a:
34:df:fb:7e:61:f2:66:79:1a:47:5b:b0:8b:6e:21:
44:0d:72:b2:2f:7a:78:67:6a:16:f4:3a:5e:c8:c3:
f1:f5:7a:48:94:ef:e5:b5:e3:ff:38:e7:8c:cf:3e:
e7:d8:b7:96:20:8c:84:13:ca:1a:70:a4:74:da:5c:
6a:db:46:75:06:99:87:1d:0e:77:32:7b:f6:56:d2:
80:b8:f6:2e:69:07:8d:0f:d0:25:0a:d0:b6:15:dc:
ef:5d:46:94:35:83:3f:9b:f0:dd:7f:fd:d1:b7:62:
c4:ff:1d:12:c0:4d:00:24:57:c0:71:cc:4e:97:9d:
26:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4B:36:FD:83:5A:35:15:E6:1E:3B:3C:58:5B:28:36:55:F5:B5:BD
X509v3 Authority Key Identifier:
keyid:C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:63:9a:19:5a:e1:a8:5e:85:89:a1:84:0d:cf:f2:25:6b:93:
b4:43:31:69:4a:11:5b:db:f7:7e:10:eb:42:05:9d:99:08:54:
7b:16:65:22:ba:16:12:5a:44:83:aa:9b:34:f7:28:a1:41:51:
c5:f2:12:a6:82:27:fa:a2:c2:51:e0:2d:09:65:cf:57:32:40:
a5:3c:ba:69:2e:ae:93:0f:a4:c7:17:dc:b4:3d:9d:57:9d:ba:
3f:cb:8a:bf:a7:58:e9:49:ab:14:91:7d:61:79:e7:ad:71:c8:
e1:eb:de:56:20:53:96:02:56:12:89:bb:39:27:c8:32:e5:2d:
62:67:fe:25:f0:fc:bb:89:bd:af:bd:43:da:4b:11:f5:35:ae:
3f:f0:65:c4:bc:ad:d3:93:22:10:5c:46:31:77:5e:93:12:5c:
37:a8:fe:e7:30:df:f3:ae:7f:e6:69:a0:5f:9d:5a:c8:06:da:
3a:ff:c5:c6:d9:db:45:4d:bf:01:67:41:c1:9a:b4:aa:65:14:
c0:c2:48:42:78:32:20:26:fd:06:80:e3:04:a9:ad:86:23:60:
ea:0b:8e:cd:24:2e:74:6f:a5:89:71:92:ee:03:c3:91:96:30:
f5:fa:0c:0e:fe:6e:c4:d0:fb:48:a6:c7:cc:cb:21:7e:9e:79:
e6:25:fc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:38 2025 by rpki-client