
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
File: wQdbeoGvSd7_tsg1xWCO4LiEMso.mft (raw, json)
Hash identifier: wMRD2NXbHS2zYmqxqY8o7ZMmeAHbeR3YeO3DvFbytb4=
Subject key identifier: AC:10:8E:64:8E:FE:21:7F:4F:69:69:EA:82:DD:14:96:22:FF:33:5B
Authority key identifier: C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
Certificate issuer: /CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
Certificate serial: 019A0111585082AAFC41D10F7888E1B7CB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
Manifest number: 0215
Signing time: Mon 20 Oct 2025 10:01:45 +0000
Manifest this update: Mon 20 Oct 2025 10:01:45 +0000
Manifest next update: Tue 21 Oct 2025 10:01:45 +0000
Files and hashes: 1: YfJtBuAEzwrAwSN_J7xGNSKCjCE.roa (hash: XmpRYRo5Vs4yfW8P8k8ClzDTbvhLktOQ+0fCN4Fj/SI=)
2: wQdbeoGvSd7_tsg1xWCO4LiEMso.crl (hash: iaDKwli4f803ndO3Fy6FoXADNqPqOEcO55PZhtxMC/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:58:50:82:aa:fc:41:d1:0f:78:88:e1:b7:cb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
Validity
Not Before: Oct 20 10:01:45 2025 GMT
Not After : Oct 21 10:01:45 2025 GMT
Subject: CN=ac108e648efe217f4f6969ea82dd149622ff335b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:e4:2c:cd:c8:f5:5e:8c:28:26:2f:06:88:
2d:6e:a7:2a:5b:96:cc:f1:39:3c:c9:08:e3:5b:78:
98:04:a2:ee:38:6a:7a:60:38:39:4a:86:c4:88:85:
f8:27:0d:30:42:21:29:9c:62:4b:7b:02:dd:75:3f:
e9:5e:9c:37:a7:ba:3e:c2:eb:f4:89:d5:50:50:66:
ea:45:55:6b:a0:04:27:2a:b7:b4:1a:04:1c:b2:38:
ec:e1:63:0e:6d:ea:78:82:20:55:d6:44:a8:b2:83:
58:69:c4:7f:a8:2d:5e:87:95:0e:30:08:f3:94:b2:
8f:38:f8:68:db:66:ed:b4:d1:01:4b:82:ee:cb:f9:
71:f7:ad:c3:f6:6c:2e:8b:12:0a:88:93:85:04:a0:
b7:71:82:59:52:e6:2d:6a:d2:bd:25:6c:9a:a9:d8:
83:7a:93:d0:f4:29:76:9e:5d:35:1f:4c:60:f6:11:
69:df:ca:5e:d8:7f:39:e1:18:62:04:03:f2:04:cd:
d2:3a:aa:e4:cb:23:54:65:14:38:c5:23:6f:76:32:
66:7a:a2:f4:06:bb:d3:26:5e:23:60:8d:a8:a6:14:
26:9c:f5:35:52:c7:36:ae:80:95:56:46:41:77:d3:
52:b1:87:f4:07:73:23:e6:4b:a5:62:9a:1a:36:29:
ab:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:10:8E:64:8E:FE:21:7F:4F:69:69:EA:82:DD:14:96:22:FF:33:5B
X509v3 Authority Key Identifier:
keyid:C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:83:30:e6:cf:ab:8c:01:f0:07:04:ce:4c:67:c0:b3:7e:34:
d8:e0:49:f8:33:ed:ef:45:54:4a:47:8f:b7:f0:31:0d:16:80:
17:44:91:94:ac:1f:f3:90:be:5f:2c:90:f2:0e:df:7c:8c:bb:
e3:65:3c:ab:19:91:85:eb:8b:05:ee:a1:62:f4:c2:3f:70:42:
b7:6b:95:06:e8:90:4e:1e:55:70:f1:13:31:6f:00:f5:b2:f5:
98:91:02:6e:ad:c1:58:61:e8:ed:9b:49:d6:a6:76:d7:0b:45:
36:c6:a1:71:9c:8d:cc:64:1b:d8:21:f1:63:09:0e:c5:75:63:
2e:d9:7d:af:02:ca:e1:b3:38:e7:61:77:8d:a8:68:b9:8c:31:
bd:5d:d5:7f:dd:d5:35:e7:35:43:8e:e2:05:33:1b:ca:0e:03:
f8:4f:c6:6c:0a:5a:1d:3d:83:66:d0:b3:da:88:cf:2b:82:99:
dc:36:5c:b0:bc:a3:7d:b4:62:25:3a:be:c4:36:ed:bd:2f:2c:
de:da:a7:9e:24:97:02:50:9a:a4:c6:a1:e9:d0:f5:ea:d2:ad:
cf:34:66:64:ee:a8:92:6b:0f:d2:4e:68:fc:4e:c3:a3:17:18:
58:90:0b:11:fe:50:f2:ba:78:df:73:6a:91:d0:46:30:c3:bd:
55:74:e0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:43:32 2025 by rpki-client