Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.mft
File: mWpflIQ1rLESpm4lY3kiY-yLZX4.mft (raw, json)
Hash identifier: fwRj6WW+aEd4ULpncpdXrVp4m12+Bthip9tvBoE18zE=
Subject key identifier: 4B:29:68:5F:21:A0:15:B5:5E:31:5B:82:13:60:8A:68:BD:9F:31:DB
Authority key identifier: 99:6A:5F:94:84:35:AC:B1:12:A6:6E:25:63:79:22:63:EC:8B:65:7E
Certificate issuer: /CN=996a5f948435acb112a66e2563792263ec8b657e
Certificate serial: 0199FCFD5756E019C082737D5F97EF2DFFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWpflIQ1rLESpm4lY3kiY-yLZX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 15:01:25 +0000
Manifest this update: Sun 19 Oct 2025 15:01:25 +0000
Manifest next update: Mon 20 Oct 2025 15:01:25 +0000
Files and hashes: 1: mWpflIQ1rLESpm4lY3kiY-yLZX4.crl (hash: TbrLd7YTpkt2WCB1fnu4vkqeyiEz9Tj6nphnFmDpUHw=)
2: oUbphFvh_H2EgLkqqhGVtJvsWdA.roa (hash: YcXAdQPNOD/ei8uQHqKqayZyCGAzNtCVZnzz77qI+x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWpflIQ1rLESpm4lY3kiY-yLZX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:57:56:e0:19:c0:82:73:7d:5f:97:ef:2d:ff:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996a5f948435acb112a66e2563792263ec8b657e
Validity
Not Before: Oct 19 15:01:25 2025 GMT
Not After : Oct 20 15:01:25 2025 GMT
Subject: CN=4b29685f21a015b55e315b8213608a68bd9f31db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:df:30:eb:81:35:3e:33:15:42:43:23:5c:
37:ad:78:d9:7d:a6:ea:b5:e8:e7:e9:4d:28:4a:a2:
10:f7:59:47:55:0a:cd:17:69:84:e8:cb:7c:45:78:
99:3e:5e:04:be:83:ae:2f:f9:6b:2d:19:b9:81:68:
a0:f2:b7:66:90:6a:45:6d:01:5d:9a:bc:30:e8:76:
a9:6c:e4:68:b8:73:83:74:92:ec:0a:4b:63:ab:a9:
cb:9c:d9:86:d6:0e:62:1e:f3:a0:15:4a:ba:d1:ff:
7a:2a:ac:4d:4a:ca:2f:5d:24:a0:e7:c7:0d:66:c7:
66:b0:32:f7:a1:8d:b2:57:0c:20:8e:8a:e4:13:ec:
3a:5c:67:bb:38:df:73:d6:2c:40:4a:2e:ea:f3:1d:
04:66:ac:19:a4:f7:57:1d:53:56:71:2e:c0:28:23:
63:b4:42:72:5e:03:36:40:ed:82:06:24:4f:60:d3:
d5:51:71:78:89:04:7d:89:ce:6c:82:da:82:de:42:
14:7f:35:ec:1d:e0:7a:81:19:a2:ee:02:5b:f0:56:
21:36:ad:64:6a:aa:18:c8:b3:42:66:da:53:fe:f9:
4d:3c:29:9a:45:37:ad:e5:66:5d:83:18:54:7d:40:
6f:58:fa:a0:19:09:0c:18:88:b4:d6:3e:9f:74:db:
2e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:29:68:5F:21:A0:15:B5:5E:31:5B:82:13:60:8A:68:BD:9F:31:DB
X509v3 Authority Key Identifier:
keyid:99:6A:5F:94:84:35:AC:B1:12:A6:6E:25:63:79:22:63:EC:8B:65:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWpflIQ1rLESpm4lY3kiY-yLZX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:bd:c9:81:e6:f5:7a:90:0e:56:26:a9:9b:ae:b3:9c:d7:e7:
66:66:c1:7b:99:8e:76:83:30:b8:c1:bc:28:0b:ae:bb:a1:e8:
9e:69:ff:16:6a:36:a3:c9:4e:54:b7:56:d9:bb:7a:21:ac:5f:
ef:8d:ef:9f:af:77:1a:af:f1:1b:bc:7c:d6:e7:eb:06:a1:10:
d7:21:aa:12:15:15:ca:fa:08:3a:ce:30:42:ed:41:9c:74:7a:
4c:aa:4c:2f:c3:fe:30:a1:89:07:29:4c:2e:b0:13:ec:c2:be:
93:0d:e3:02:6b:03:62:10:f0:c0:14:b9:ad:2c:1e:d8:52:11:
55:65:c4:bb:01:c6:4b:81:27:3b:ef:24:32:c7:90:21:e1:08:
2d:a5:66:fc:a5:fc:b2:65:6b:09:50:f6:85:c6:26:06:15:b9:
ff:b8:ca:44:4b:6c:d4:84:59:7b:9c:65:e0:f9:2c:58:54:a2:
d4:ab:a6:66:59:f1:de:12:14:5d:22:ac:7b:0b:b0:1c:5d:8d:
ba:9a:d6:c8:d0:e1:a5:5c:48:1d:21:62:40:b3:9d:b5:79:b3:
ed:5f:8b:7b:94:14:40:32:20:1a:d6:84:0b:87:76:8c:2b:28:
d2:1f:5a:54:a2:6c:aa:0d:58:ee:a8:cc:79:b2:9b:f2:b8:15:
d2:13:1e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:47 2025 by rpki-client