Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
File: wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft (raw, json)
Hash identifier: QZN1XJt5/M6GMqWggesUCmmvP+tvufSSBo1g5yz8uII=
Subject key identifier: BB:22:59:CB:E7:34:45:9B:E9:9D:4E:6F:EF:38:14:FF:38:0A:D7:6B
Authority key identifier: C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
Certificate issuer: /CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Certificate serial: 0199FBEBB7E84271684A37C56149D7C650AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:33 +0000
Manifest this update: Sun 19 Oct 2025 10:02:33 +0000
Manifest next update: Mon 20 Oct 2025 10:02:33 +0000
Files and hashes: 1: CMFtvIRrP8F50u4CVRtzzHXRYto.roa (hash: zBitZQVL6CHlOMMwjKpEh8Pxjt6+cJBsedg4te+yLPA=)
2: wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl (hash: Br3OTfkcjicAvNWHSya+nQI+etT37FawAun009yktAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b7:e8:42:71:68:4a:37:c5:61:49:d7:c6:50:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Validity
Not Before: Oct 19 10:02:33 2025 GMT
Not After : Oct 20 10:02:33 2025 GMT
Subject: CN=bb2259cbe734459be99d4e6fef3814ff380ad76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:f3:c0:19:e7:93:ab:26:da:f9:28:a2:6c:
13:a6:f4:95:ab:e0:ea:0a:6e:b9:21:17:db:cc:67:
76:f0:c0:9a:b3:23:4f:04:60:5e:4d:ba:95:78:00:
d4:cd:a0:0c:5f:5b:01:93:e6:8e:0e:38:e7:cc:27:
1b:f4:f6:78:3c:7a:fe:71:83:df:b2:18:c9:81:8b:
83:3a:da:f2:de:e8:52:79:af:0e:13:dc:7a:0e:17:
fa:ea:e2:27:ca:b4:f7:cd:a9:25:90:62:ee:6a:66:
5b:72:05:63:08:cc:74:4e:7f:da:6c:01:a6:f4:46:
92:4e:b6:d8:b1:98:16:81:1b:aa:d2:1f:a5:ed:00:
05:7c:3e:7f:d6:36:06:2a:c7:40:81:f5:7e:af:56:
f8:ce:67:3f:47:b1:c9:46:6f:a4:ce:6b:af:b0:da:
8a:bb:c1:25:52:ff:2d:7c:1f:66:1c:6b:17:7a:03:
66:fa:bf:c9:69:ff:c6:ad:09:ed:fd:c8:19:1d:c3:
64:76:20:aa:5b:0b:86:00:46:33:22:51:94:7e:10:
f3:d2:d9:38:57:d1:03:7c:d3:25:65:bc:c2:a7:66:
40:b0:10:fe:4c:1e:1d:38:6d:06:11:d4:20:6c:47:
c9:94:30:25:c8:98:a4:1d:33:08:ba:55:9d:0e:53:
73:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:22:59:CB:E7:34:45:9B:E9:9D:4E:6F:EF:38:14:FF:38:0A:D7:6B
X509v3 Authority Key Identifier:
keyid:C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:74:3f:be:dd:3a:8f:94:b5:00:86:47:9f:1e:84:a1:4b:99:
a6:b2:44:8a:aa:7d:10:c4:df:58:bd:66:fd:7e:77:9c:6f:53:
97:be:a6:2a:33:f7:68:8b:8f:3c:cd:41:2b:f6:c0:45:81:01:
63:0d:ba:00:fb:a8:ab:cf:03:bc:bd:c8:8b:52:1e:57:ef:78:
ff:cf:87:1f:63:26:74:ca:70:d5:45:bc:5e:27:e9:4e:80:cb:
15:86:59:c1:5b:9c:da:0b:30:58:72:9b:77:f4:97:22:f7:af:
33:b2:49:3d:ba:d4:1a:8f:0d:45:e1:90:0f:59:a5:14:91:0e:
92:36:51:f5:a6:28:be:b9:d3:97:15:dd:cf:e7:99:a7:80:51:
90:a4:57:17:ef:ea:73:6d:c2:47:b9:26:86:3e:6c:a4:bc:af:
2e:b8:f6:5b:70:fe:ff:e1:c1:c4:8e:8e:20:65:bd:de:ea:82:
5e:88:60:4f:93:1c:69:17:df:44:83:64:7c:b7:b3:2f:07:43:
82:77:1e:e9:d8:a3:3e:60:98:69:e9:dc:a7:86:26:bb:0f:a2:
e6:9d:16:25:40:5c:0c:7c:49:b3:97:3e:69:86:c0:de:04:ed:
95:db:36:a9:42:3d:4b:0f:d2:97:ab:90:a0:fa:9b:93:ec:e6:
b0:70:71:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:27 2025 by rpki-client