Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
File: wDxpSwadoTLPTEvXwdIiloY7F20.mft (raw, json)
Hash identifier: X29lXyQWapa7uUJC6tELdHZQvPZIGIcomCaLxN57lis=
Subject key identifier: 2C:BA:11:49:89:CB:FC:47:B1:AA:FB:EE:E7:09:81:7D:81:DC:29:B8
Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
Certificate issuer: /CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Certificate serial: 0199FCFD5082C0D07AB3CA90E7F7EBC7B8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
Manifest number: 0358
Signing time: Sun 19 Oct 2025 15:01:23 +0000
Manifest this update: Sun 19 Oct 2025 15:01:23 +0000
Manifest next update: Mon 20 Oct 2025 15:01:23 +0000
Files and hashes: 1: D83JF5HJmZ_nDCEolR80xNvS-M8.roa (hash: 2gVW9uQvzf9z69pIhSOEl0MnJWNxJhApE/Mz251JqN8=)
2: wDxpSwadoTLPTEvXwdIiloY7F20.crl (hash: Pt4AmuYhO4tpUnEa1bJeI4lDSSpkOCjf8OTBDhgT708=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:50:82:c0:d0:7a:b3:ca:90:e7:f7:eb:c7:b8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Validity
Not Before: Oct 19 15:01:23 2025 GMT
Not After : Oct 20 15:01:23 2025 GMT
Subject: CN=2cba114989cbfc47b1aafbeee709817d81dc29b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:60:dc:11:87:74:a4:e4:36:bd:5e:14:b9:72:
81:38:2e:0b:a2:e7:d6:f6:eb:95:6c:1c:53:d2:5c:
7c:80:78:7f:32:07:35:a1:ff:b4:e6:29:02:8d:cb:
bf:bd:49:65:3f:2c:d9:31:c5:3d:38:6a:da:d5:57:
2e:fa:0e:a4:6e:db:b6:3e:bb:3a:c6:43:ee:bd:93:
0f:bd:d1:41:06:4a:4b:8b:28:57:00:36:77:b6:6b:
9e:60:c9:5a:68:41:e7:0c:f3:25:da:d9:bc:5a:83:
5f:14:7c:49:1f:01:c8:4a:2f:7f:31:47:90:35:41:
39:9a:7b:6a:2f:9b:08:0a:ab:65:e1:2b:47:4c:e2:
cb:92:d5:d7:77:ea:36:66:de:f1:b4:2a:25:9c:9b:
76:69:3a:9a:94:38:27:10:b4:c7:11:19:ec:0c:9f:
0b:51:8d:9a:94:58:b5:2b:99:ad:e5:d9:86:8c:00:
64:76:37:fb:4a:e8:19:10:31:82:41:84:b5:6e:1c:
93:39:fe:7d:6b:da:dd:fa:7c:b6:81:66:5c:e9:5d:
d0:5b:7d:85:26:ad:bc:12:9d:90:b7:b9:15:19:40:
9a:b7:49:cb:85:4d:06:73:02:ee:fe:fe:e1:7c:9e:
64:61:1f:ef:3f:9d:42:f5:d1:35:df:1f:31:e6:af:
3b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BA:11:49:89:CB:FC:47:B1:AA:FB:EE:E7:09:81:7D:81:DC:29:B8
X509v3 Authority Key Identifier:
keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e3:a6:ed:2e:0c:9b:ad:ef:bb:d8:3b:40:a2:6a:fb:73:a7:
04:ad:e3:bd:21:b8:93:a2:d6:88:d9:48:e7:09:f9:6f:7b:4a:
f0:61:12:58:de:ca:70:9d:db:dc:dd:ea:c9:0f:c5:d0:9a:fa:
bc:f9:75:53:15:f8:b2:9c:55:72:31:cf:af:35:15:99:e4:ba:
68:59:76:76:9a:9f:34:ef:b5:5a:02:73:a5:2b:e9:15:32:1c:
2b:4a:5f:7b:0d:1c:76:bd:d5:2c:4c:55:21:38:b8:19:0c:74:
aa:ad:e8:0e:25:30:97:bb:aa:06:95:22:4b:27:be:3a:51:7f:
7a:ea:e0:a6:2b:02:13:ce:3e:e6:0d:4d:bb:8f:2a:16:22:5c:
71:fb:27:6d:40:ab:86:60:92:6f:10:60:8c:db:09:b7:eb:08:
fd:58:07:1b:bb:a0:ce:3c:92:db:5e:9c:67:e9:48:d3:3e:1b:
e6:bb:46:e2:27:81:87:bb:64:68:f8:65:79:a2:1f:d6:c1:d9:
52:25:8c:ef:65:4b:7f:11:65:4c:78:eb:fd:05:b1:23:df:d1:
d8:7c:35:14:ea:bb:1c:0b:4d:1e:d3:e2:6a:bc:7c:cc:b9:f6:
ee:f8:55:21:fa:30:e9:38:76:f3:f1:6d:14:b5:39:c5:8d:0b:
2a:d1:8d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:03 2025 by rpki-client