Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
File: wZtaLEnhxkinDHCK4b3kC2RMeAI.mft (raw, json)
Hash identifier: EFLcUa8ZGyw2X1TzgK0NEzFlL6bzYmF8/k43NZ16NVo=
Subject key identifier: EF:AB:B8:D4:2D:78:7E:40:2C:E0:30:43:E7:33:81:BF:51:5D:6C:E1
Authority key identifier: C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
Certificate issuer: /CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Certificate serial: 019A00A3006437359059B316B407009F4075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 08:01:13 +0000
Manifest this update: Mon 20 Oct 2025 08:01:13 +0000
Manifest next update: Tue 21 Oct 2025 08:01:13 +0000
Files and hashes: 1: ifWK_iN7Ay8QBp6l-CCna4Qxy8Y.roa (hash: a8BYVN01+QzzRYrawK1TfdRTG9b4FCkotHQL9E9gZ7Q=)
2: wZtaLEnhxkinDHCK4b3kC2RMeAI.crl (hash: upmrqSYB8kZv/xA1U7OxoQMuhJ0h72hvX6ca0mFwnL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:00:64:37:35:90:59:b3:16:b4:07:00:9f:40:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Validity
Not Before: Oct 20 08:01:13 2025 GMT
Not After : Oct 21 08:01:13 2025 GMT
Subject: CN=efabb8d42d787e402ce03043e73381bf515d6ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:a5:26:47:bc:f6:a8:9c:e1:38:89:08:ad:
7e:d9:20:22:6d:54:f4:30:b4:cc:73:f6:7f:7c:6a:
8d:50:3e:ec:d4:d3:be:63:d9:cf:c6:2d:d8:c1:6b:
35:14:dd:54:94:0e:14:0e:c9:33:21:80:92:7d:77:
25:c6:03:59:9b:fc:ea:f5:f4:50:e2:52:54:87:cb:
c0:96:0d:e6:c8:9d:59:61:f7:31:44:25:eb:aa:4f:
52:04:34:a1:53:58:ff:79:f3:19:26:c5:5b:69:25:
fd:c9:7a:d8:c1:0a:ca:ab:86:ed:a5:28:e1:fa:8f:
d0:70:0e:6c:fd:48:05:c2:3b:31:59:18:64:8c:55:
94:8e:be:6f:51:36:67:f5:29:fd:9e:12:6d:97:77:
61:a7:dd:27:ec:c1:29:a7:34:4b:9d:08:f3:db:76:
90:b1:a9:89:9d:2b:0b:5f:37:2b:1d:34:d4:11:06:
20:1b:2d:b9:c0:10:87:bf:63:7f:dd:ef:2b:af:50:
45:e7:83:ee:15:ed:45:f7:aa:1e:04:3b:c6:15:2c:
72:54:19:83:e2:e2:2c:82:28:74:81:61:1a:ff:cf:
52:de:59:29:50:14:dc:11:02:c9:b8:45:63:e2:48:
6f:76:57:31:b1:8c:26:61:52:be:dd:65:57:ad:64:
14:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AB:B8:D4:2D:78:7E:40:2C:E0:30:43:E7:33:81:BF:51:5D:6C:E1
X509v3 Authority Key Identifier:
keyid:C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f1:34:ef:a5:42:b1:ee:c3:1e:1b:18:9c:b2:63:e6:04:a8:
79:eb:c2:dd:f2:e2:e0:ad:4d:5e:e6:a1:44:4d:38:f4:26:da:
7d:e1:08:04:31:d8:08:d6:b0:ba:ef:e8:80:8f:28:f9:d4:50:
6f:5c:1b:ef:88:4f:c6:fe:91:30:9a:4f:24:96:17:2a:ea:ff:
4a:7d:1a:4c:48:04:bb:ff:8a:6c:72:5f:88:f7:22:da:2f:77:
69:c3:2a:b5:68:3c:2d:19:6b:59:d1:83:cf:f2:39:89:10:9a:
18:0a:c1:a6:e3:4b:8d:eb:74:63:53:ec:16:2a:03:50:02:43:
51:d6:30:f4:12:40:20:a7:e4:48:c7:3a:0e:cc:b1:a2:0f:50:
c1:ac:c0:20:54:5c:1e:f9:f5:ea:d8:8a:5f:51:c4:f6:aa:e9:
5d:56:32:56:38:fe:89:e7:b8:63:72:33:5e:6a:79:fc:21:f7:
2e:6e:4f:ab:e5:10:13:5b:dd:32:62:a1:13:47:a0:b4:b6:37:
ad:82:da:8c:fc:49:31:16:fe:c8:32:01:38:a6:43:40:24:04:
c7:6b:76:1e:35:62:9f:5b:c0:9c:d6:eb:77:3f:ed:68:ac:7b:
2a:83:b5:18:08:d7:b0:cb:18:89:75:3d:e8:6b:88:cd:ff:70:
4e:1c:61:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:37:32 2025 by rpki-client