Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
File: wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft (raw, json)
Hash identifier: b9tzrpGZGfgC6V+O8i3lLDRPUDaki7vizVxqEBHKWkk=
Subject key identifier: 2B:67:01:3C:36:52:7D:01:1F:6B:0E:F4:20:74:33:EA:29:BA:1A:0E
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Certificate issuer: /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial: 019A00A39E17E4240FF3866CFB8F8197167F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 08:01:54 +0000
Manifest this update: Mon 20 Oct 2025 08:01:54 +0000
Manifest next update: Tue 21 Oct 2025 08:01:54 +0000
Files and hashes: 1: E0oPYTANwX4SVfmo4G4Bb_Ffflc.roa (hash: POCopGH4Sf5gshG/ai7EpgPCh9X9MivwqlQ7wpM8V2Q=)
2: wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl (hash: ezAbvWZkrZf736Et41PoId0qsVfe4yNdk6cMQCutP/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:9e:17:e4:24:0f:f3:86:6c:fb:8f:81:97:16:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Validity
Not Before: Oct 20 08:01:54 2025 GMT
Not After : Oct 21 08:01:54 2025 GMT
Subject: CN=2b67013c36527d011f6b0ef4207433ea29ba1a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:4b:96:a1:d9:89:de:44:0e:5f:3b:66:3d:
4a:66:d4:8f:ed:e0:41:0d:7d:71:37:e1:85:7a:b6:
c2:2b:1e:9f:c0:cc:b0:52:30:b4:0c:64:2a:52:6b:
30:9d:69:f7:43:ca:9f:8c:de:fa:03:99:5d:31:51:
18:b1:f9:f0:6f:7d:c9:93:ce:26:6a:b9:e5:94:e8:
b5:68:b6:54:20:89:3e:00:ac:a6:bc:d7:d7:75:24:
4f:54:51:4a:65:45:1c:ff:9f:44:c9:53:82:ef:1e:
93:26:61:bf:64:cb:84:30:fe:f2:5e:63:2f:6a:11:
87:fb:31:d4:e3:da:ed:79:84:59:f1:67:e0:ec:5f:
df:87:4a:b5:7b:89:ae:a7:11:f9:62:9e:9b:f0:6f:
a3:5d:d3:86:e6:88:cb:d2:fc:1e:5f:62:28:d6:59:
8a:b5:5f:32:e3:25:00:88:f5:ad:9a:ab:bd:ac:d8:
b4:bc:52:94:ed:83:29:7e:72:86:d7:0b:c4:83:7a:
24:5d:aa:1f:8b:ba:04:09:02:50:24:8d:1c:d7:f4:
3d:94:08:98:61:96:b5:46:9f:c3:43:7c:a2:d5:8d:
e4:39:bb:92:e9:3f:00:87:c6:ae:9d:90:27:b5:8d:
95:2f:f3:e3:32:fc:1e:2d:26:18:50:f9:41:63:ce:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:67:01:3C:36:52:7D:01:1F:6B:0E:F4:20:74:33:EA:29:BA:1A:0E
X509v3 Authority Key Identifier:
keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:89:b8:e9:70:9a:7c:c5:9b:1f:fd:be:44:ca:ba:94:54:0b:
5a:bb:20:b8:ab:36:21:fe:de:73:0c:b1:02:2f:63:25:5a:c2:
b6:44:b7:93:a6:44:2f:80:f9:c6:a0:47:24:4a:76:f7:42:92:
4d:ab:c5:b9:43:e7:b0:8a:b6:08:80:e8:c9:0d:ef:ea:5a:7b:
04:5d:d1:e3:ee:56:d3:83:46:71:a9:78:19:25:ed:c6:5a:68:
0a:70:1f:c8:a7:de:6b:c8:11:0c:01:3d:58:ad:9b:a7:c3:e6:
d5:cc:69:9a:b6:e3:78:e5:7c:91:48:cb:a6:88:6f:59:48:61:
3b:cc:c9:88:19:59:76:55:0b:c0:e3:df:af:9e:c7:d9:9c:cb:
97:ba:5d:6d:e8:8e:e8:e7:61:f7:52:95:02:ea:ad:6e:0d:d1:
9b:e7:eb:37:26:f1:d2:17:94:81:9c:57:88:27:fa:6d:d4:7a:
78:75:9d:a9:46:9b:86:30:7c:56:af:b8:52:fa:73:87:d8:e9:
5d:09:c0:34:7c:7a:61:d4:a5:f0:69:11:61:ed:7a:cc:53:65:
8a:d1:c3:78:c7:6c:14:ff:d4:f6:de:e9:ef:2d:bd:10:72:cb:
be:34:9d:c4:e6:3a:e9:85:a9:3c:76:73:ed:5b:10:b4:8c:f7:
87:bd:1f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:04 2025 by rpki-client