Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
File: wKqzltZQgmAnwr2KBiByEJIQnik.mft (raw, json)
Hash identifier: wAOu0lPDOX10pJTCl0ErUFx1nhj9n8vWENoi23mgVdE=
Subject key identifier: 37:AF:FD:7D:2D:24:1A:BA:6A:2F:5A:0E:1C:63:1C:FF:EE:37:FB:9C
Authority key identifier: C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29
Certificate issuer: /CN=c0aab396d650826027c2bd8a0620721092109e29
Certificate serial: 0199FCFD9E13F0172EE46EB63E55DE484F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
Manifest number: 0198
Signing time: Sun 19 Oct 2025 15:01:43 +0000
Manifest this update: Sun 19 Oct 2025 15:01:43 +0000
Manifest next update: Mon 20 Oct 2025 15:01:43 +0000
Files and hashes: 1: FQ0Z9CjauF1-N_C29EdkHs_XYtQ.roa (hash: +snXzR2/FfWDx0T5r9Nyn9CPDVn/IvcZNIPrKP0aONw=)
2: wKqzltZQgmAnwr2KBiByEJIQnik.crl (hash: co1Jx7uoB/vcpawLrkFqN9rPJ1at97IPawEW0V1rKIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:9e:13:f0:17:2e:e4:6e:b6:3e:55:de:48:4f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0aab396d650826027c2bd8a0620721092109e29
Validity
Not Before: Oct 19 15:01:43 2025 GMT
Not After : Oct 20 15:01:43 2025 GMT
Subject: CN=37affd7d2d241aba6a2f5a0e1c631cffee37fb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:71:e5:50:10:7b:02:96:2c:b9:0c:8b:f0:
23:a9:2e:f7:36:16:c0:9c:09:64:5a:5c:35:ce:b5:
11:b0:a7:43:0b:44:a6:b7:de:9d:9e:6c:54:48:99:
1c:fc:e6:09:cd:11:62:69:3c:e9:ba:63:d2:60:3e:
97:61:42:d0:eb:ec:6a:f2:de:31:05:d6:cd:85:58:
e5:33:c4:2e:05:d6:82:82:8f:0b:45:0a:40:ad:25:
c2:74:c1:6b:25:98:4e:27:89:20:56:e9:f4:94:8f:
c3:f2:f5:94:30:8d:06:3e:ff:7a:7b:bd:4a:10:c9:
00:cd:c7:75:85:bb:ea:28:1a:8e:b0:fa:5f:bc:bd:
f1:49:cb:60:7e:f0:f1:9b:3e:23:96:67:ea:71:e7:
b5:84:5c:20:aa:11:69:b9:43:71:4a:db:60:b4:c4:
c2:6d:76:de:bb:8e:89:a1:ff:89:31:d3:31:4f:63:
0c:e5:a1:d3:20:1f:e8:f5:a1:0e:85:2e:1b:e0:ac:
91:85:b5:f9:97:83:b9:3e:93:30:aa:f5:f1:e7:95:
79:ed:20:4b:ba:0a:f5:8d:cf:7c:4d:e8:94:7a:62:
97:81:16:eb:80:ac:eb:c6:56:e8:bb:9c:2e:0d:c9:
7a:af:31:f5:3a:a5:ee:c8:35:26:4f:b2:31:be:b8:
31:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AF:FD:7D:2D:24:1A:BA:6A:2F:5A:0E:1C:63:1C:FF:EE:37:FB:9C
X509v3 Authority Key Identifier:
keyid:C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ec:18:17:9f:09:82:4e:45:48:46:56:03:9a:cf:3e:69:bd:
25:5f:a9:20:21:23:6e:0b:d5:3a:16:24:e8:98:b2:48:28:57:
5d:23:ac:93:09:d5:48:91:b6:50:57:69:06:3b:6b:89:71:a9:
25:eb:84:27:db:3c:5c:11:0b:e8:c4:96:28:71:51:e4:01:c9:
45:99:57:9f:a5:31:4b:b0:83:c3:a0:96:06:4f:c4:3d:b2:8f:
c9:60:ff:8b:00:16:c5:b6:23:2b:2a:86:88:f2:17:df:f5:2a:
b6:51:00:27:5f:ff:9e:a9:53:8a:85:98:d2:1f:ff:99:e9:c7:
8f:0a:83:48:30:5c:5e:49:55:c9:b5:f9:68:7d:29:56:54:58:
7d:73:ec:a2:7e:10:51:77:a3:2a:34:d5:04:31:87:3e:dc:b6:
43:1a:b4:8b:81:5b:92:1a:39:46:8f:fb:69:49:51:eb:ce:ac:
c6:cb:ee:3b:93:54:db:f0:30:81:bb:32:1a:6e:de:0d:c3:8a:
e6:45:f9:2f:55:9b:f7:1d:a5:5d:84:e9:5b:2c:0b:1d:3f:54:
a8:48:24:3e:39:25:a6:7b:40:0f:45:0b:80:77:21:a6:0e:d6:
5d:d7:93:99:71:2e:e7:2d:5c:2e:35:e7:be:41:1f:ef:2a:95:
75:ea:f2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:40 2025 by rpki-client