Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
File: wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft (raw, json)
Hash identifier: j01MNrK/2ir0biXjQyfYOqWOGEWLNdfXLJTWG/o5Ntw=
Subject key identifier: 8E:AF:3A:C9:FF:B4:2B:26:84:72:4A:26:08:36:9E:CF:57:90:9D:E1
Authority key identifier: C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
Certificate issuer: /CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Certificate serial: 0199FB7C8BD5E293F6A153B5FB70906DA8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
Manifest number: 0657
Signing time: Sun 19 Oct 2025 08:01:07 +0000
Manifest this update: Sun 19 Oct 2025 08:01:07 +0000
Manifest next update: Mon 20 Oct 2025 08:01:07 +0000
Files and hashes: 1: MNSRA94GnwCWIcU0ZUPSgfJJzYA.roa (hash: vFvm6d7yLwrA+IkFyq24dAxJUZKY/00AaFr5EwDXEoE=)
2: wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl (hash: m0E7ywxDvywdNbMLQZtBqFxOLM/u4ZLSBua69syzFww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:8b:d5:e2:93:f6:a1:53:b5:fb:70:90:6d:a8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Validity
Not Before: Oct 19 08:01:07 2025 GMT
Not After : Oct 20 08:01:07 2025 GMT
Subject: CN=8eaf3ac9ffb42b2684724a2608369ecf57909de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:63:a0:25:d8:94:9f:f5:bf:f6:0a:d6:ec:96:
2e:19:12:ab:89:56:9e:06:20:29:11:91:9e:31:fe:
3c:c5:29:24:91:f9:86:0a:dc:71:c6:af:e9:11:f7:
b3:60:ae:f2:5d:4f:80:10:42:e1:06:5b:aa:d2:d7:
e8:e4:5e:7d:84:45:47:d8:ac:68:bf:31:14:c7:e5:
e7:b3:55:98:0a:40:7f:f3:09:39:9b:2f:86:9b:57:
e4:c4:06:e0:93:87:a2:e1:7b:a1:07:35:6f:8c:37:
14:85:1d:cc:97:9e:d6:b7:cb:56:02:d9:57:70:26:
9d:8e:b2:f9:a1:d4:5a:c9:d2:8c:ae:10:50:16:2f:
5e:05:1e:b1:c2:3e:fb:2f:97:3e:40:71:3b:b5:f4:
57:b4:1c:8e:cd:10:86:15:27:6c:b3:ea:59:da:5f:
7e:5b:d7:5d:bb:30:78:b6:8e:3d:2c:48:ca:9d:d5:
3d:05:ef:f3:ba:4c:8e:88:90:42:11:01:ce:5d:7f:
2b:ac:64:51:db:13:a0:6e:a7:53:4d:4a:14:2f:f4:
48:8a:29:9d:99:9c:e1:b7:58:93:37:0d:da:20:38:
b9:f2:c7:93:e0:72:86:20:75:ba:97:5f:ba:fe:1a:
0d:6c:95:80:5c:b8:04:30:9a:a8:c8:89:90:79:65:
22:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AF:3A:C9:FF:B4:2B:26:84:72:4A:26:08:36:9E:CF:57:90:9D:E1
X509v3 Authority Key Identifier:
keyid:C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:41:0a:4a:f7:56:37:19:24:88:6d:5f:b2:fb:3d:e2:38:7f:
c0:df:c3:22:0d:47:aa:95:47:d7:37:97:bb:6e:90:69:fa:31:
3a:a1:a7:f6:73:c3:dc:7d:66:b6:40:56:5e:8e:de:1f:08:6b:
1b:a2:4e:b3:9b:30:32:33:af:a3:3d:d2:4f:ea:d9:94:fa:d9:
f3:1d:f3:16:6f:30:8e:cf:03:ce:b0:19:40:48:b5:17:03:45:
7d:4b:52:0d:a6:2d:90:29:18:08:ea:53:b4:97:23:98:9c:02:
7d:61:fb:63:2f:13:93:37:c5:1c:ff:27:0e:ec:ca:64:58:34:
14:b4:18:39:8d:cd:3a:9c:3d:62:c1:4a:69:31:7a:e5:84:55:
53:e6:d6:ca:24:1e:5e:ab:e9:35:ac:07:f5:e7:6a:2a:27:65:
55:92:8c:87:d0:cb:f2:58:ac:20:a9:e8:2c:85:1a:c5:6e:ae:
69:91:f8:3f:4a:7a:f4:40:31:b0:46:97:77:10:51:81:b1:ec:
28:48:49:b5:4e:61:a7:99:34:be:8a:22:7c:6c:3c:67:d4:a5:
db:49:31:a9:13:22:c9:d1:8e:43:b2:70:4a:78:34:0f:b5:97:
8e:f1:97:56:a5:80:0e:83:7e:fb:19:7e:c8:cb:bb:c5:4e:5c:
bc:b7:e0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:26 2025 by rpki-client