Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File: wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier: B8wqMjbd2BZWvzhZgqJqH2IIFvBX0MIDt7Th7GKyC/g=
Subject key identifier: D3:4D:7B:9D:7B:BA:66:2F:E2:24:9D:CB:24:A1:9A:8D:30:B0:49:03
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 0199FB0F177AEB068E3E6E39EDBE433DEFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number: 0FDE
Signing time: Sun 19 Oct 2025 06:01:34 +0000
Manifest this update: Sun 19 Oct 2025 06:01:34 +0000
Manifest next update: Mon 20 Oct 2025 06:01:34 +0000
Files and hashes: 1: 2if-W7_9B6ndVwa4CXKbXlfYipY.roa (hash: x6w8qlU6igwl5cXDxoZUE8Lr1i8+UZJJXlmem9XWOSg=)
2: iNIpA6NRoHEtD1Gdwv0RcZxMEOY.roa (hash: QoWSCTkZW/GH9j1mmy2Sv0c+Jd5oUQpoqRVhrzgy26s=)
3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: xoGQF5rBQSZR4s6l0HE2amstOGcoPbR5F4/k2Ynyev8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:17:7a:eb:06:8e:3e:6e:39:ed:be:43:3d:ef:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: Oct 19 06:01:34 2025 GMT
Not After : Oct 20 06:01:34 2025 GMT
Subject: CN=d34d7b9d7bba662fe2249dcb24a19a8d30b04903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:d1:f9:46:0d:09:2f:b2:dd:84:29:e3:91:
f9:c3:fa:85:30:24:ce:51:00:98:c9:99:12:b5:e6:
40:c7:f8:51:7a:17:5f:d1:bb:09:80:7d:22:c1:77:
91:16:86:08:ce:16:55:7e:6f:8e:59:c2:ca:70:e3:
8c:b2:c8:29:fd:4a:95:e1:79:a3:b1:1c:ef:ee:d4:
96:19:c3:f7:48:74:a7:65:a1:b4:48:b5:97:7b:99:
0a:80:d7:5e:dc:e2:5e:8c:e6:81:1d:52:7b:5e:dd:
45:d1:fa:aa:c0:05:e5:0c:dc:95:b3:5a:4b:d0:14:
f5:b1:5d:f0:4d:66:cc:78:1f:78:92:34:66:89:b1:
41:3e:2f:64:21:58:fa:ae:bf:30:49:e6:cb:ee:21:
21:91:c1:f0:9f:7d:71:05:b0:5d:e5:22:63:4b:9e:
c7:15:37:33:1b:0a:01:81:a1:ee:dc:ec:ff:c7:bd:
82:11:19:d5:31:f2:22:9b:1f:4d:d0:0c:34:a4:9b:
77:c5:fa:bb:f7:d4:73:b5:d7:5e:db:bf:40:1e:72:
2e:e9:69:01:46:96:fe:d0:7f:05:8e:b8:70:5e:dc:
53:95:83:a4:c0:9a:66:a9:22:d4:4a:c8:73:90:33:
0c:74:6f:f9:7e:98:cf:ca:42:2d:5b:c9:c8:9e:23:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4D:7B:9D:7B:BA:66:2F:E2:24:9D:CB:24:A1:9A:8D:30:B0:49:03
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:77:38:4e:2b:35:27:d1:9b:63:15:41:45:bf:d9:c3:3a:f3:
44:8a:57:ab:45:f0:db:a3:46:ca:56:c6:3b:1c:6e:f3:fb:85:
4c:c0:e8:eb:a7:36:fa:7f:d4:16:fb:56:90:31:fd:0a:08:12:
e8:b9:0c:de:e7:24:f7:8a:62:25:54:fe:b6:31:ac:b1:f1:f3:
17:ce:d2:24:41:28:3e:7a:10:5f:bb:80:5d:71:cd:e0:53:b3:
ab:53:7f:3f:cb:9f:c0:8f:bd:a6:86:a4:d7:e1:d8:fb:0b:dd:
c9:ba:f7:c5:a7:e2:b0:40:d2:18:2a:01:9a:f2:35:10:50:af:
5f:a1:7a:8d:3e:6e:02:a2:42:1d:1d:78:1f:cd:1e:f8:72:1a:
f3:79:9a:4d:f3:70:a0:2e:30:57:50:8d:3d:85:0d:0c:27:2a:
f5:d4:ac:4a:fd:3f:36:c9:5e:a0:cf:97:a5:8a:5a:f1:4a:19:
41:53:7c:37:08:7b:d4:4b:50:92:97:a9:77:ba:fc:3d:7e:b9:
90:11:6d:3a:07:f8:9d:f7:b1:07:34:b8:9c:0c:88:68:46:c1:
84:0a:c6:0c:c5:c3:31:b9:25:51:39:8c:c1:c7:f5:8d:4d:ad:
4f:0b:9f:e9:5a:03:a6:b4:cd:f9:79:7f:a9:41:b2:a7:f3:91:
31:76:7a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:21 2025 by rpki-client