Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json)
Hash identifier: QlJdXU/CiECVFxhSg9nyMmDgGZPp49OpOsGp0GliJ6E=
Subject key identifier: B3:9F:DB:AD:5E:D0:26:5C:D8:80:3D:41:FF:9A:EF:B0:CC:27:CE:EC
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial: 0199FC58CF40687F0F8722C981DD29CDD4AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: 2ckuuQNGelqhfIDU0HMZ3G_jIN4.roa (hash: Ly3hlzB/x5T87M29FpEs5LMZzWEyS3uYaMyLbALjnTU=)
2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: 7yCe3Qd827Wmyi3NlCYVmfubEZUpwF2XrBTKfLWF5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:cf:40:68:7f:0f:87:22:c9:81:dd:29:cd:d4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=b39fdbad5ed0265cd8803d41ff9aefb0cc27ceec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:04:4d:87:ae:6a:40:09:a8:7c:ce:04:c3:
6c:77:b8:ad:94:bb:3d:cb:17:5a:e6:8d:cb:11:de:
5f:42:01:80:a5:57:99:ac:39:2a:a2:31:a2:fe:92:
89:ee:d6:93:01:0f:db:bc:94:ed:c8:2f:c0:f0:f1:
cd:d8:9c:a9:cd:7f:ee:31:5d:13:9f:8c:44:23:6d:
e5:ee:db:76:d1:be:4c:40:df:86:91:cd:aa:7a:f1:
d0:3e:c9:41:b5:c7:90:06:89:74:e3:1b:f7:00:61:
27:4c:3c:fa:0e:c5:0d:c2:9e:03:52:5e:d6:6b:45:
40:41:01:f1:8c:a1:72:a5:f2:8d:11:9e:06:12:a8:
fc:f9:b5:3b:c3:4f:e7:86:7a:15:64:2e:7d:5a:5f:
9e:a6:80:70:d3:6c:ad:a5:ec:62:eb:71:da:9a:95:
cb:37:ab:a6:7a:5b:d3:8e:d5:9c:f7:bf:c9:55:47:
f3:93:70:6d:3d:3e:17:25:90:af:19:0d:ff:42:f0:
a4:8e:ef:6b:59:fb:8b:3c:bf:26:00:a4:8e:c9:60:
be:f4:2e:d5:cd:6f:04:c2:a3:4f:dc:e0:f1:78:fd:
ff:61:55:28:f4:28:c3:d2:a8:19:4d:d3:9a:18:36:
83:ec:ce:d9:f5:15:dc:9d:77:6b:81:56:67:60:b6:
d5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9F:DB:AD:5E:D0:26:5C:D8:80:3D:41:FF:9A:EF:B0:CC:27:CE:EC
X509v3 Authority Key Identifier:
keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:d8:3d:b4:4d:61:82:2c:86:3c:93:eb:6f:e0:d5:bc:06:97:
89:4b:e7:6c:08:df:cd:36:80:4a:ee:4e:87:97:78:ab:bf:2b:
9a:65:2a:8a:7c:1f:d9:31:78:78:ff:2d:c1:2c:42:6d:79:47:
b3:ca:61:d7:e0:64:58:f0:af:5b:2d:83:64:e9:6d:da:d2:59:
42:42:95:96:cf:ae:54:c1:8c:e2:67:63:50:ee:f8:e8:ed:4c:
1a:77:12:05:ac:32:2c:30:37:26:44:45:12:a8:4f:20:26:4d:
ab:90:6b:86:0b:fd:ab:46:0f:59:3d:ca:8e:a6:ad:67:c5:19:
f6:3a:31:4c:40:25:3a:2c:a6:c8:ad:30:ed:4b:7b:27:cc:18:
ad:22:28:07:d8:6f:2f:8d:e0:38:1c:aa:4d:66:ed:2d:6b:be:
1c:88:04:5c:ca:0f:bf:de:36:3e:5f:a0:e4:5d:86:66:b5:82:
21:dc:0b:4f:c4:90:8d:1e:1f:f0:0c:24:16:21:ee:da:93:0d:
9a:47:5c:b0:55:19:ec:e1:b2:56:d0:ed:7d:03:9a:48:60:60:
7e:4f:cb:dd:e2:c6:e8:1d:9f:ed:31:13:8c:23:9e:2a:df:b2:
cc:70:c5:f3:81:f3:e9:6f:a7:8b:49:bd:36:e5:4f:02:b5:13:
d2:98:c0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:11 2025 by rpki-client