Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
File: wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft (raw, json)
Hash identifier: 7LfAg93iOAqXCelJdLWoi/OI73JZIqvNXpWvHls+FkQ=
Subject key identifier: FA:B9:F3:31:CA:04:D1:62:F3:F3:49:1F:31:5D:2E:83:B1:44:A8:3A
Authority key identifier: C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
Certificate issuer: /CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Certificate serial: 0199FD6B69EC4D1E7709BA81A8FD8ACA036A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
Manifest number: 1677
Signing time: Sun 19 Oct 2025 17:01:39 +0000
Manifest this update: Sun 19 Oct 2025 17:01:39 +0000
Manifest next update: Mon 20 Oct 2025 17:01:39 +0000
Files and hashes: 1: vKd8NlEx5qop4iqu250zXE8t3lE.roa (hash: FN1Ryr/mI8CQAU+QgnXcKT4FTQKee0OFCoQuRyraQ08=)
2: wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl (hash: etI9npmvEApKZx5VQ2jc6Z4smCf/GxCdzGjEDEFnFsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:69:ec:4d:1e:77:09:ba:81:a8:fd:8a:ca:03:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Validity
Not Before: Oct 19 17:01:39 2025 GMT
Not After : Oct 20 17:01:39 2025 GMT
Subject: CN=fab9f331ca04d162f3f3491f315d2e83b144a83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:60:ca:44:72:0e:b6:57:69:35:db:63:df:
36:22:8d:f1:0e:3b:3f:e0:ac:a4:35:64:d6:e2:f0:
f3:db:3a:ac:1d:96:94:50:02:e3:aa:9a:40:85:9f:
08:60:af:33:1e:63:df:f8:da:71:8e:27:7c:c3:4b:
61:31:f1:9e:f2:33:e6:23:4a:a5:34:e5:db:14:af:
12:cc:77:4f:c6:8b:00:39:0f:b4:a1:b3:58:7d:92:
03:1d:d2:07:3c:53:a5:27:2b:3f:15:a0:e6:5d:3d:
63:2a:b7:76:c2:4b:40:d7:1c:d3:10:42:1e:84:7c:
64:fa:51:b1:88:cb:a9:57:5b:3d:a0:41:8c:a5:a9:
83:a9:9a:aa:f3:79:72:92:8c:30:10:61:e5:87:f2:
ad:ff:eb:0f:1e:b4:88:94:74:c4:6c:9b:fb:2c:e0:
c3:17:d0:51:a5:66:2f:0b:58:54:ed:e5:00:da:31:
ab:87:51:0b:0a:72:8e:86:45:0c:f5:a3:8e:38:2d:
c7:2d:ba:7c:cb:e7:50:18:12:ba:3c:fa:03:08:aa:
81:b5:07:54:fa:bb:25:51:43:e5:53:bb:af:0e:04:
cb:2f:bd:80:9a:c3:13:9b:67:29:6e:fc:50:d1:2c:
c3:a5:41:e7:33:3a:ac:2a:83:e3:3d:88:c0:5b:fc:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B9:F3:31:CA:04:D1:62:F3:F3:49:1F:31:5D:2E:83:B1:44:A8:3A
X509v3 Authority Key Identifier:
keyid:C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c8:e3:11:44:5c:9a:07:92:01:39:fc:f8:3b:f4:ba:79:f1:
a0:69:a2:4e:3e:09:e8:7d:b2:9e:91:4b:bc:8b:00:1f:b0:b4:
8a:1e:44:5c:3f:1f:45:4c:79:b1:fa:5e:0b:5a:3c:3f:c1:4b:
a6:9d:35:43:11:bd:22:b9:4f:c3:33:78:d9:f4:14:1b:bb:2c:
ce:9f:f0:05:94:a1:71:c8:32:d9:3c:a5:31:89:04:c1:8a:2b:
d6:3f:94:9f:1c:d9:d1:7b:1a:02:95:21:64:43:d4:60:6e:66:
d7:0c:ff:13:57:44:e4:8c:60:bb:53:8a:81:77:38:36:9d:f5:
4f:e2:f2:b8:fc:44:6f:1a:b0:4f:e5:fc:26:3f:6a:eb:36:5d:
c3:5b:da:9e:91:1e:1c:b0:f8:14:ee:69:fb:1a:50:72:ce:52:
fc:b5:b3:b7:14:1c:ec:b1:6a:ce:fa:e0:61:b6:b2:95:07:a9:
bf:4b:0f:8d:ff:0f:73:3c:e6:1f:5f:5f:e1:f5:cb:d8:76:93:
02:ef:a0:8b:4a:0f:dd:4b:cf:88:e9:60:38:ab:91:c9:09:9a:
8a:ff:76:09:74:dd:64:94:29:7e:af:e6:8d:46:c2:18:53:63:
c0:8f:38:35:04:b6:22:76:d2:3d:29:41:48:ba:6a:10:d9:11:
28:1a:d1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:11 2025 by rpki-client