Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
File: wuP6h-sxaafS3XRFMoMCGicDx2k.mft (raw, json)
Hash identifier: ckIxRETxHk/FA3VcIylHBJS8hE+ph7g5X/AkgOcLgLI=
Subject key identifier: 47:35:AE:CE:00:67:73:0B:4A:D1:96:D3:0F:2C:BA:2B:65:B7:8D:D6
Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
Certificate issuer: /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Certificate serial: 0199FB7CC4E8225524DBA38E15508446A33A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 08:01:22 +0000
Manifest this update: Sun 19 Oct 2025 08:01:22 +0000
Manifest next update: Mon 20 Oct 2025 08:01:22 +0000
Files and hashes: 1: UQeJyG9BAYXx7MdsdkPbT5nATwI.roa (hash: hKLTaUlMIPTXFfDFectFLlcV0ReJ/iVzU3RYDLItnvI=)
2: wuP6h-sxaafS3XRFMoMCGicDx2k.crl (hash: e+z7qA1uCJfXRqB8Du0e/f11IS0fXXF/UkzswarLugc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c4:e8:22:55:24:db:a3:8e:15:50:84:46:a3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Validity
Not Before: Oct 19 08:01:22 2025 GMT
Not After : Oct 20 08:01:22 2025 GMT
Subject: CN=4735aece0067730b4ad196d30f2cba2b65b78dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0c:d5:47:fb:ed:16:ac:35:f1:4a:1d:06:14:
9c:44:79:15:d5:3a:14:db:3b:68:8b:14:37:a2:87:
a3:eb:d9:dd:a4:ad:c8:73:d0:62:2c:f1:c8:d4:6f:
91:b7:34:75:a7:5a:3d:f7:ea:fa:2c:35:99:b2:8d:
bd:71:72:06:29:d4:a3:fe:45:cd:a0:fd:1d:7c:0f:
9a:5d:21:ea:5d:8c:21:1b:ae:e7:d5:e4:0c:43:fe:
4a:1d:3e:37:bd:86:be:71:2f:9e:f4:51:7b:bd:58:
01:63:a9:88:ba:37:e7:a1:a1:42:7e:d9:84:a8:be:
4b:ed:64:ab:cb:a9:b2:b3:01:52:65:82:5b:54:10:
eb:80:dc:bc:33:c6:4b:2d:2f:79:cb:ba:2b:27:56:
66:4e:28:1f:dd:c9:6d:45:f7:a2:eb:29:5b:69:2e:
0e:ac:6f:7f:70:41:bc:7a:fe:4a:e3:74:16:07:98:
78:88:20:51:01:c6:6d:3c:7a:6a:8f:d0:7a:96:a6:
2b:53:b8:2a:c6:03:e8:1e:18:1d:1a:23:b7:8f:70:
59:d6:a9:21:3a:81:c9:dd:3a:0e:8f:25:26:bd:f6:
41:22:8a:fe:f9:31:77:10:48:59:c5:a8:c7:52:78:
8e:f0:5a:44:28:ed:9f:99:3b:54:6c:85:22:ff:de:
92:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:35:AE:CE:00:67:73:0B:4A:D1:96:D3:0F:2C:BA:2B:65:B7:8D:D6
X509v3 Authority Key Identifier:
keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c7:74:94:7a:df:e5:80:3b:06:4e:fd:d2:88:72:02:6a:c6:
b5:25:00:c5:5a:0b:1b:31:d5:4e:82:2f:81:ba:b8:f6:30:0e:
05:1f:37:eb:e5:34:78:e4:ec:11:a7:1e:c9:46:54:82:6d:0a:
ba:04:c9:d9:f1:a3:ce:62:e4:90:da:b8:4f:43:78:ed:47:e4:
53:78:d3:e9:2e:17:07:c7:e6:21:f9:3e:7f:77:26:37:2a:4e:
d4:39:05:37:b2:fe:90:0f:1c:b9:29:ea:da:0a:20:52:43:9a:
1f:a6:36:e0:64:a4:da:dc:91:d9:23:f3:76:b6:45:e6:9e:ed:
4a:27:2b:00:21:d4:12:61:ca:ef:d3:9b:47:88:69:23:bb:0f:
1e:88:df:58:d1:e2:16:e2:30:8f:14:30:08:1b:02:c4:91:a3:
5b:50:d9:3b:9f:ca:c7:95:9d:da:9d:3d:30:ff:d2:73:d5:82:
f3:73:e8:4c:75:08:67:75:13:6f:2e:0a:66:49:ad:0c:04:b0:
e8:f8:82:29:d7:1e:b2:03:99:7d:33:b6:0b:f1:c6:08:8e:49:
cc:bf:51:d7:8f:d5:c4:7a:8c:1a:4d:26:ef:0c:ce:03:17:f4:
0b:40:81:bf:82:2f:2e:45:18:4c:65:be:92:56:4e:60:f7:fe:
ff:98:f5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:18 2025 by rpki-client