Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
File: wcBezmyQitiIJRPaOiWhYHA7t_Y.mft (raw, json)
Hash identifier: Kj/qprwntM1GiNeQVxRPagOcbNtex3fSb5HyOMS05tg=
Subject key identifier: 37:DD:76:B6:C1:35:3C:2F:75:C6:48:F5:A3:D9:10:9C:22:14:44:6F
Authority key identifier: C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
Certificate issuer: /CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Certificate serial: 0199FDD8FB1AA896A902FF3A1A0BFAB3D567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:01:19 +0000
Manifest this update: Sun 19 Oct 2025 19:01:19 +0000
Manifest next update: Mon 20 Oct 2025 19:01:19 +0000
Files and hashes: 1: L5n__TlZWPdvDvLr4ZFidz4XLKs.roa (hash: joZuWv/Q4EyLrxkijZ/RW681SRLMu9NB8uvDRrrDNHk=)
2: wcBezmyQitiIJRPaOiWhYHA7t_Y.crl (hash: awXnDSkzP7bCmTDzumOzk4UR7nzYQu6gQo337vk0I5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:fb:1a:a8:96:a9:02:ff:3a:1a:0b:fa:b3:d5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Validity
Not Before: Oct 19 19:01:19 2025 GMT
Not After : Oct 20 19:01:19 2025 GMT
Subject: CN=37dd76b6c1353c2f75c648f5a3d9109c2214446f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:32:f0:dc:dc:1b:0b:fa:32:03:c0:24:06:
f4:bf:fa:ad:67:49:e9:36:95:32:0c:1b:b5:ba:a8:
66:59:41:b0:20:38:f2:96:df:3b:cf:5c:8e:e5:31:
a0:f2:f5:5f:54:b0:10:c9:88:32:68:c9:d6:34:78:
60:23:a6:08:77:e9:dc:1a:88:52:67:7d:63:3d:e3:
18:81:95:31:09:69:cf:97:ce:1a:70:7e:19:51:93:
d6:e3:94:f1:be:25:67:7a:1d:40:b3:6d:79:03:9d:
ae:27:4e:a8:7f:df:44:3f:47:c9:51:61:e8:65:21:
6f:e2:80:4a:1a:e9:ab:d0:4e:1e:6b:3b:dd:af:dd:
d8:27:1b:82:76:00:a6:da:8d:db:b1:a1:12:00:43:
85:ed:b2:97:80:57:6f:23:66:38:29:4e:ec:98:fa:
74:6a:3a:a0:24:c6:21:ae:32:01:ee:fe:e9:10:03:
85:8f:77:a2:99:77:d5:b0:ed:38:6b:2e:60:44:d7:
ad:90:04:73:90:7c:ad:2d:6e:ee:2a:00:94:cb:69:
40:b3:7c:bc:25:57:3a:94:16:6c:c3:80:c6:70:3b:
76:0d:a8:b0:40:98:0f:6c:60:9b:0c:a1:85:ed:1e:
b1:d0:7d:6c:83:06:6d:93:a3:45:05:0b:e2:c5:77:
aa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DD:76:B6:C1:35:3C:2F:75:C6:48:F5:A3:D9:10:9C:22:14:44:6F
X509v3 Authority Key Identifier:
keyid:C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:cc:20:be:8b:bc:21:12:25:9d:48:85:f7:19:3a:60:2c:8f:
86:c1:77:0b:87:a0:d8:e9:24:a4:71:bd:4c:d2:c3:ab:6d:4f:
da:49:e5:d9:64:e7:d0:10:a4:49:70:12:d9:1a:05:7c:4c:e3:
47:0a:87:50:79:79:43:b5:91:b7:fa:b5:e5:d0:e1:4a:30:9e:
91:b9:61:f8:5f:9f:81:7c:bb:04:1f:49:22:45:e2:9a:a2:f0:
35:35:2a:9e:01:4a:db:a6:ff:38:90:fd:3d:0c:20:c0:68:10:
6a:f3:31:b2:35:02:52:6e:af:3e:de:e6:3b:8a:d1:36:21:d9:
dc:9c:c2:05:82:03:99:ec:5b:cd:88:f7:ad:80:99:08:e3:0c:
a8:48:f9:e2:19:32:18:06:ab:7a:a2:14:ec:19:f1:3d:6f:7e:
ba:44:b6:92:99:4f:5e:b8:91:b7:82:1f:93:ea:b4:cf:25:0c:
fa:15:8a:35:9c:51:fe:cc:18:a4:f6:00:e5:c6:74:19:42:18:
f3:38:7c:0a:99:56:6d:32:26:24:21:5d:14:1b:09:3b:84:b8:
93:aa:95:9f:86:2e:3e:dc:c5:bb:13:fd:42:89:55:44:89:7d:
96:a7:d3:6d:ff:46:63:db:22:b7:a4:ac:53:d1:4c:a4:77:80:
df:63:fd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:45 2025 by rpki-client