Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
File: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft (raw, json)
Hash identifier: stUDL+8jbwjmJ7vB4NWcygph3N6wLQq7T/pg6ShZDUI=
Subject key identifier: 84:39:8A:3B:C9:67:C5:51:4F:44:61:B0:FF:B5:C7:A3:3D:4C:45:17
Authority key identifier: C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
Certificate issuer: /CN=c115b327e84761685022f47328d6f4cbd6d3041e
Certificate serial: 0199FCC666ABE6159D91293562FE6719973F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
Manifest number: 149E
Signing time: Sun 19 Oct 2025 14:01:24 +0000
Manifest this update: Sun 19 Oct 2025 14:01:24 +0000
Manifest next update: Mon 20 Oct 2025 14:01:24 +0000
Files and hashes: 1: IIaW89ZzFdGKWt-qkretRuZFhUw.roa (hash: +wV4CyXS7FosexYu6VMQZY2Kh9jsLDP8nTTtEBowsxI=)
2: hKI1gIRkFSpeDRxr6Gy5U-0E8bg.roa (hash: wtwNxYOC1NaLQTBIVmgD52Go7NqEorx1g4IWXnECaeA=)
3: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl (hash: GwE3jMrMnYrrVoGzFncaRa41lnQukzQkcjqQatvpqNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:66:ab:e6:15:9d:91:29:35:62:fe:67:19:97:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c115b327e84761685022f47328d6f4cbd6d3041e
Validity
Not Before: Oct 19 14:01:24 2025 GMT
Not After : Oct 20 14:01:24 2025 GMT
Subject: CN=84398a3bc967c5514f4461b0ffb5c7a33d4c4517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:9b:28:7c:7d:2e:64:4e:77:09:77:2f:85:
4c:9a:fd:e0:00:53:4b:32:37:03:d4:d5:4c:1b:91:
cf:a9:1d:a5:9e:8f:45:e7:e8:7d:cf:6e:35:e8:04:
55:f1:f2:f9:53:bb:53:de:90:af:b7:70:03:ee:a0:
9c:39:ff:d2:b4:ea:65:56:6a:56:95:65:30:fa:19:
2d:8c:7d:e0:b2:4a:a5:d5:61:86:d6:25:5c:10:61:
a0:5a:58:a7:60:97:5a:33:45:74:9e:1c:77:e1:20:
d6:59:31:ec:58:d6:b7:f3:40:79:94:e7:8b:0c:98:
69:d5:74:24:75:37:a1:2b:6e:22:45:d6:b6:ec:a9:
d7:e8:9b:5e:31:f6:30:88:92:8a:b2:f6:a8:22:db:
14:ad:f9:b5:25:63:f8:39:45:20:da:51:0b:b5:b5:
0e:18:8b:45:86:19:8a:14:ff:eb:1e:14:b4:1d:83:
93:18:e1:9c:55:2c:4c:4f:42:e4:63:7f:5f:04:79:
c4:54:51:7f:a9:5b:b5:58:66:c5:58:e2:3c:62:6d:
b7:71:19:61:2b:aa:91:c9:f0:cf:57:0e:bf:6a:d3:
33:a5:71:1d:d5:08:59:62:86:b5:61:5a:78:5e:7e:
cb:95:2c:8f:2c:56:66:1e:30:06:1b:61:70:93:3c:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:39:8A:3B:C9:67:C5:51:4F:44:61:B0:FF:B5:C7:A3:3D:4C:45:17
X509v3 Authority Key Identifier:
keyid:C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9d:79:dc:a0:57:af:ae:49:1f:d6:df:f9:1a:05:85:69:14:
58:8f:03:b2:03:66:df:ae:26:58:d6:5b:65:a6:0c:4f:40:db:
65:6d:ce:0e:ac:0e:f5:9e:1d:de:96:c7:11:0b:95:06:30:f5:
ed:90:f2:a6:20:48:c6:0f:60:f6:f1:5e:9d:ae:ed:c3:94:d4:
a6:64:95:30:78:d1:b0:4a:9d:14:10:35:06:16:e4:85:3a:61:
0a:dc:e8:26:0c:e1:4d:42:87:70:80:0e:69:4a:fb:74:2b:0e:
8c:22:25:06:f6:15:cc:7a:7e:5c:93:b9:bb:b0:f1:eb:33:92:
71:58:96:de:0f:57:0b:40:39:8d:d4:38:61:e4:89:f2:29:4d:
1f:e7:fa:03:a2:b1:26:dc:41:5a:2e:40:b0:e4:af:d4:33:90:
96:b0:a0:42:44:68:ed:eb:f8:a3:cb:d8:07:1c:97:5c:a0:f5:
c9:a3:f9:ee:2c:26:ec:8d:6c:61:99:ce:16:b6:d5:41:c6:b6:
86:8e:d1:fb:4b:07:46:28:cf:02:81:34:a9:a2:26:62:82:b0:
d3:24:10:f9:a7:ab:94:52:cc:8f:1b:dc:30:5c:36:92:88:bb:
7b:2e:7f:98:6f:de:f1:d9:01:e0:45:e2:2b:b0:60:af:81:59:
60:4a:c0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:20 2025 by rpki-client