Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
File: woONHzsjG_cuRT3XjEtQrACf9_E.mft (raw, json)
Hash identifier: /YRCDTrvvERwqlrfBco7XESHxsnR0IxVTHXbGS7bWp4=
Subject key identifier: AF:B9:5B:0E:41:BE:5C:3A:C0:B8:8C:C8:B9:77:48:30:90:FA:AF:3F
Authority key identifier: C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1
Certificate issuer: /CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
Certificate serial: 0199FE10302E90F2D8748EF9795ED169BB04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 20:01:37 +0000
Manifest this update: Sun 19 Oct 2025 20:01:37 +0000
Manifest next update: Mon 20 Oct 2025 20:01:37 +0000
Files and hashes: 1: fM16NL7UA9ErJ0RNfb8ePLmU6tQ.roa (hash: 2mPsCiT6kK+HE+XcnPI9z3k0mcNw38StY2DELHnEXqY=)
2: woONHzsjG_cuRT3XjEtQrACf9_E.crl (hash: e22kiFaxhSuksejsBj4lu93HlpMVahJ2mdpfXudmeSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:30:2e:90:f2:d8:74:8e:f9:79:5e:d1:69:bb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
Validity
Not Before: Oct 19 20:01:37 2025 GMT
Not After : Oct 20 20:01:37 2025 GMT
Subject: CN=afb95b0e41be5c3ac0b88cc8b977483090faaf3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:ea:da:1a:b8:86:fe:fe:cb:ac:41:43:08:
63:f5:aa:06:b7:e9:57:80:37:87:05:7e:48:b7:83:
09:9b:2e:e3:45:eb:0b:87:82:7a:5e:99:93:15:25:
77:eb:23:33:20:08:56:3d:1e:19:e9:8b:69:52:11:
7d:f1:2f:c7:ed:49:c3:6b:28:c1:c6:db:d7:18:64:
49:b3:74:83:af:af:4f:6d:2f:7c:98:b1:ac:03:ec:
98:7c:46:09:70:1d:a9:ea:58:39:66:2e:cc:b8:d3:
f3:8b:3c:5f:42:fa:0c:d5:a3:47:84:ca:6a:d8:df:
c8:e0:32:e9:89:c3:93:6b:69:23:04:d3:8e:51:f6:
83:2e:30:e5:55:37:b4:78:f1:94:32:a7:96:39:50:
14:bd:da:ac:2d:08:4a:2e:22:8d:82:a3:65:87:76:
b7:bb:f9:6c:4a:79:0a:fa:56:6e:0b:09:ff:00:1f:
02:5e:bd:97:05:0c:4b:c7:ea:f4:92:19:6a:92:1a:
c5:91:1d:c8:2e:93:17:c9:b6:83:d9:51:c9:26:f4:
1a:97:26:2b:cd:fa:ea:ac:b2:aa:ed:2c:f8:ae:0b:
7b:ca:f7:e8:8e:68:e3:4e:35:65:86:3c:87:4c:78:
89:41:f6:b2:77:1e:91:63:36:34:ed:87:28:70:be:
c9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B9:5B:0E:41:BE:5C:3A:C0:B8:8C:C8:B9:77:48:30:90:FA:AF:3F
X509v3 Authority Key Identifier:
keyid:C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b7:c1:c8:84:45:29:80:99:51:eb:b6:83:35:94:60:13:62:
b3:48:9d:83:91:53:b0:7d:ed:cd:08:69:9d:ee:63:7a:f9:12:
2c:93:61:ae:b7:f2:dd:32:48:19:5b:07:60:3d:e9:99:8e:8b:
b7:7b:7d:6c:a7:bb:2f:11:e0:e5:e7:f6:41:ad:b0:2a:28:f6:
7e:5e:e7:c4:38:2b:ca:43:7f:5e:ec:4d:8c:d0:b6:54:cb:8d:
a5:c8:4f:9e:f0:53:b6:df:ca:da:f7:0a:3e:da:40:16:11:c2:
db:d5:aa:84:80:80:cf:8c:c5:db:c0:6d:85:5d:98:10:b3:95:
46:fb:3e:83:f2:67:31:dd:92:da:15:8e:68:8c:e2:a4:1a:59:
37:1d:29:12:df:f7:5d:08:02:62:96:62:0e:06:73:35:bf:fb:
9f:5a:8f:ba:03:ad:01:b5:ab:b1:4c:21:1c:40:7f:ec:6d:e8:
7a:7f:7f:7c:4c:e8:33:a4:9c:65:b5:be:33:bf:0a:c6:26:bf:
ad:49:c4:d3:57:4d:41:2b:35:86:07:97:2c:2e:8e:5e:69:05:
e7:fa:05:4b:e6:31:f3:6b:c3:e6:e5:74:f6:d4:0e:f5:99:08:
24:b0:bb:ac:44:81:e0:69:52:26:5a:a9:f5:f2:c1:48:51:b6:
73:a6:08:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:04:26 2025 by rpki-client