
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
File: weJGTdbQQjCVFffltk6mXAibRhY.mft (raw, json)
Hash identifier: 42xBycvJlgM+ySrQztMSukHjoZgj8J30qWn1in2GiEk=
Subject key identifier: D8:23:39:09:74:11:88:4B:2B:47:4A:83:A2:46:F4:E9:03:AE:7D:09
Authority key identifier: C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
Certificate issuer: /CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Certificate serial: 019A003508E4E8F93AA899CBB9E0C389FE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 06:01:06 +0000
Manifest this update: Mon 20 Oct 2025 06:01:06 +0000
Manifest next update: Tue 21 Oct 2025 06:01:06 +0000
Files and hashes: 1: DgGyGbwI_Z-hbBwqBMhZZb6vSwc.roa (hash: YoSjsmqBi7UGbr0YdaEV1pXh33zn8N/CDmlmvP42wg0=)
2: weJGTdbQQjCVFffltk6mXAibRhY.crl (hash: pdJ7kvjBPE19ROr+mU+wNqcJsHb+dAVESXpKttGcg7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:08:e4:e8:f9:3a:a8:99:cb:b9:e0:c3:89:fe:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Validity
Not Before: Oct 20 06:01:06 2025 GMT
Not After : Oct 21 06:01:06 2025 GMT
Subject: CN=d82339097411884b2b474a83a246f4e903ae7d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:78:df:59:a7:63:25:9e:b1:84:71:9a:b3:
ab:a8:13:2d:88:23:a0:b7:b2:95:4e:2e:1e:62:6a:
01:4e:d6:84:dc:c7:0c:8e:f3:bc:a6:0e:51:dd:b1:
f2:1d:f2:97:5f:64:1f:21:10:4e:ff:16:99:55:2f:
a7:14:a5:ab:d8:10:fe:c5:83:bc:d1:a0:84:3e:63:
d6:de:b5:b6:34:6b:d6:08:f0:ba:e0:c0:3d:5f:d9:
b5:f2:46:a3:61:5d:89:a9:dc:a1:a3:e6:b6:ee:7a:
10:ac:9b:37:36:f8:a5:65:7d:b2:14:5d:25:45:76:
ef:75:81:e2:fe:df:a3:ad:1e:17:5e:ad:c5:e8:c8:
ab:4a:c6:c0:39:5e:99:c1:19:f1:6d:ad:54:f1:93:
1b:d7:99:48:1f:74:cf:8d:f6:cc:73:2a:36:05:b4:
4f:8f:b6:2c:36:5b:bd:4e:08:ee:65:0a:e3:fd:62:
08:3d:bb:4e:42:eb:33:ad:5f:02:d5:8d:4c:3f:e4:
63:d1:dd:6e:58:75:ff:fe:aa:17:04:41:12:49:32:
18:06:ef:44:89:36:cc:56:25:ed:7b:dd:d4:51:25:
ad:af:14:f3:ca:69:5c:84:09:32:83:b9:6e:e2:c5:
10:de:1e:26:bd:0f:01:44:85:79:26:27:22:5e:a6:
41:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:23:39:09:74:11:88:4B:2B:47:4A:83:A2:46:F4:E9:03:AE:7D:09
X509v3 Authority Key Identifier:
keyid:C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:31:1e:7d:a4:72:5d:86:82:a4:0e:e7:f2:a6:41:ee:65:52:
7e:3c:85:1b:d6:b5:4b:c9:34:d7:0b:25:0f:1d:a6:94:92:db:
37:df:13:50:46:9c:c2:c5:33:c5:20:d9:c8:1d:9e:7d:f1:81:
52:cc:88:c4:ee:fb:ea:1c:55:38:56:0c:e3:79:77:66:83:8c:
39:29:39:4e:a6:b1:7d:09:20:04:76:18:0e:a8:34:2d:4d:cb:
70:16:26:7e:4c:bd:77:89:e7:c0:25:c7:dd:70:6e:58:5c:f2:
95:75:16:cf:7e:20:2b:40:cc:b3:ef:b5:ff:6f:86:25:86:b7:
d9:d8:d9:2d:76:b7:fd:43:51:0a:ac:b5:88:7e:50:48:8a:a3:
22:bc:3c:b7:40:17:54:3d:e9:58:ba:9f:a7:52:84:52:a8:32:
89:d0:a0:4a:0f:96:60:ab:2b:82:ae:8f:c2:2f:e7:ad:b4:d1:
dd:66:7e:a7:91:56:79:9d:ee:60:ce:df:dc:30:f5:e1:83:62:
dc:99:4e:0f:c4:5c:77:de:56:ad:2b:eb:d6:a2:ac:14:52:95:
7c:bd:50:19:95:df:03:d3:f4:a5:d5:84:a3:f7:88:ea:f4:48:
1a:34:60:0f:3b:6a:45:b3:e2:b7:3c:e7:6d:70:4a:bd:d1:b8:
78:1f:3c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:02:50 2025 by rpki-client