Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
File: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft (raw, json)
Hash identifier: wKIxmgNjgas+jj74Whg8KVbew8BaM5jZymcYaD/apf0=
Subject key identifier: 99:98:1D:51:8B:EA:74:DB:EE:F2:04:7B:A5:6F:56:56:79:3F:B6:6A
Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
Certificate issuer: /CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Certificate serial: 0199FF22D32CF17019B48D3A672B0DC0963B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
Manifest number: 06C8
Signing time: Mon 20 Oct 2025 01:01:36 +0000
Manifest this update: Mon 20 Oct 2025 01:01:36 +0000
Manifest next update: Tue 21 Oct 2025 01:01:36 +0000
Files and hashes: 1: 2eV3LLHue0F4_ix9uAQjG0RjeyM.roa (hash: voDescMFunJFQQ5TLKb+tVFSLAofvJuHvYtHn/Yjp+c=)
2: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl (hash: yH+dla4Kfsh9bY41/OzERfYpZsa855dAWr0zOOOUhn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:d3:2c:f1:70:19:b4:8d:3a:67:2b:0d:c0:96:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Validity
Not Before: Oct 20 01:01:36 2025 GMT
Not After : Oct 21 01:01:36 2025 GMT
Subject: CN=99981d518bea74dbeef2047ba56f5656793fb66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:60:a7:6e:b0:9c:9b:64:e0:f7:c7:a8:92:
c6:eb:87:8d:6b:2d:88:46:b6:15:79:c2:e5:53:b7:
74:69:3b:ec:ab:7e:f9:60:ba:3b:df:ea:d6:37:e1:
56:61:11:72:5e:0c:df:a7:fd:3d:b5:08:b9:6c:13:
23:d1:b6:fc:44:53:96:05:92:e3:ad:42:c9:c3:2c:
c3:8e:c2:f3:a4:f0:9a:b9:96:50:8a:89:27:73:dc:
e9:72:cc:98:4a:f1:ea:62:30:9b:b9:bb:a2:35:d3:
5e:ce:0b:17:e1:17:f1:3e:90:1d:29:2f:66:ad:61:
c7:ca:f2:ec:77:af:af:72:6c:19:15:e7:92:64:65:
3a:35:1d:8a:ba:6b:2c:d4:35:02:da:92:77:de:8f:
13:6c:2b:b7:2c:32:1b:54:ef:43:bb:1d:e9:6e:89:
c0:3a:75:42:75:fa:45:4c:38:d8:da:94:2d:29:5d:
71:8f:3b:b4:66:28:91:26:10:05:a5:1b:ac:c2:f1:
7a:8a:a8:48:00:9c:58:da:75:22:1b:bc:16:bb:74:
3f:f4:93:6a:f1:b4:c4:c7:9f:5c:58:82:85:0e:ab:
2f:45:f7:ec:89:c6:0d:2a:96:65:08:f3:0b:7c:87:
6f:06:c4:df:48:6f:5b:36:df:15:51:8e:9b:e0:77:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:98:1D:51:8B:EA:74:DB:EE:F2:04:7B:A5:6F:56:56:79:3F:B6:6A
X509v3 Authority Key Identifier:
keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:85:06:37:01:6a:ac:b4:66:86:4f:7b:60:7c:f4:d7:f5:bc:
a6:c5:68:c5:33:13:16:06:81:7b:31:df:6f:8a:71:31:62:2e:
b7:d2:6d:48:fd:25:1f:ea:0e:c5:74:f2:86:cf:93:ef:8e:a3:
4b:c1:3b:3d:42:5b:8a:40:75:fe:06:e6:d3:03:6f:0a:18:5f:
f5:2e:6e:fb:1c:2d:d0:8e:c2:1b:e8:1f:1c:9d:cd:bc:a4:ad:
b3:47:d7:76:da:52:08:2e:73:e5:3e:2f:66:71:ad:03:8c:c0:
75:e4:7f:e4:a6:fc:59:e4:ba:6e:fd:d8:62:e4:bb:1c:6d:0f:
f2:a3:12:a7:92:78:e0:1f:0f:fe:9e:44:1f:92:a8:9e:7f:7b:
60:64:ba:2e:69:ee:37:58:2a:5b:7a:64:0a:10:02:9d:41:b7:
ea:0d:7f:c1:a3:4a:cf:40:84:41:d6:09:39:46:63:62:46:28:
48:32:9b:08:45:4e:00:92:2f:19:e9:e9:f5:57:66:d7:74:eb:
94:97:47:40:3c:52:f6:60:15:5c:c7:b7:6d:9e:39:1b:0f:91:
74:04:ab:b8:2b:e2:15:1e:de:9b:5e:15:3e:95:01:3e:db:ae:
46:1b:d9:ff:e6:3c:33:05:ab:c4:10:f6:21:72:de:7f:0a:d5:
30:34:b1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:19:40 2025 by rpki-client