Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
File: wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json)
Hash identifier: uQZYgPBP6cuvyXH+DOVgK1ArGo1blnjydgdEnm86viA=
Subject key identifier: 87:8A:68:84:F4:A4:5F:A2:1E:AD:80:A9:CD:1B:BF:5D:0E:6B:7A:71
Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Certificate serial: 0199FB7CAD6C2555C2D13BB9592FB6597D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
Manifest number: 04C8
Signing time: Sun 19 Oct 2025 08:01:16 +0000
Manifest this update: Sun 19 Oct 2025 08:01:16 +0000
Manifest next update: Mon 20 Oct 2025 08:01:16 +0000
Files and hashes: 1: nvT_HNaheF7AuMYSBVzSYd3DVGE.roa (hash: f440eLAYfJKuxJN3bKdcZpOgumvQKi1Mg+JrUe7gMQo=)
2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: 4/0MOcpnBVDdK2bx42D6KK+5Pi3Y+Mj+eM3Xe6ranDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ad:6c:25:55:c2:d1:3b:b9:59:2f:b6:59:7d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Validity
Not Before: Oct 19 08:01:16 2025 GMT
Not After : Oct 20 08:01:16 2025 GMT
Subject: CN=878a6884f4a45fa21ead80a9cd1bbf5d0e6b7a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8d:99:e2:df:b9:49:50:6c:49:c0:1a:48:4a:
e6:fe:d7:e9:39:22:94:98:53:fd:74:97:bd:cd:f9:
4d:59:d5:4b:06:7c:7f:f5:32:cd:70:ee:be:97:fb:
91:de:0a:1a:99:a0:90:14:85:43:4c:84:8c:1d:b2:
67:3d:56:76:85:72:c5:86:1c:eb:de:b4:f4:7a:0b:
4a:b8:bd:81:5a:7a:4f:f1:27:b4:dd:ea:eb:60:fb:
4c:f3:c0:c2:e9:6f:73:8f:7e:43:37:ea:5f:84:17:
ed:20:a1:9e:7f:99:45:24:0f:3c:61:68:69:8c:1b:
d6:4c:7f:1a:6d:f4:fe:6d:04:aa:91:3d:5b:35:a2:
f9:44:6d:34:cf:98:2d:8c:70:ac:d5:a4:6d:17:ab:
2a:9c:15:1e:d7:4f:2e:ce:ff:fe:79:a5:25:50:3b:
bd:78:21:4c:e7:6d:f4:f1:ea:da:91:4b:2b:b1:0d:
ad:22:8a:f1:1e:d7:29:fe:7c:ea:3c:f8:ec:1d:24:
16:f2:df:10:7c:7f:ac:15:53:72:17:07:57:f0:1a:
27:dd:91:b3:b1:0e:b2:b1:59:c5:fd:a7:81:45:35:
8d:95:12:f0:09:43:3a:0f:f4:de:1c:84:18:85:3b:
b3:f9:a8:bf:ad:bf:d7:48:0e:76:65:29:9b:9c:c9:
97:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8A:68:84:F4:A4:5F:A2:1E:AD:80:A9:CD:1B:BF:5D:0E:6B:7A:71
X509v3 Authority Key Identifier:
keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:16:8c:15:47:f2:c2:c5:d1:06:85:f7:8c:ed:ee:4f:65:8f:
d2:7b:e2:39:58:11:82:ac:45:91:f0:21:1e:41:90:30:45:c7:
08:e2:39:fc:f3:60:ca:9a:8e:44:d5:5e:ea:3a:53:65:0c:8b:
f7:7f:f8:38:c6:b2:0f:1d:5b:30:c8:c7:8f:10:b4:fe:d4:f6:
76:ad:54:97:2b:20:33:49:e3:ac:ea:e1:fe:91:2d:8e:ec:24:
3e:d7:b4:35:ed:7e:c0:d4:ce:c1:60:ea:b4:4d:aa:e6:46:93:
89:c0:f3:e2:dd:e0:d9:a7:cc:fc:97:88:f4:cd:35:45:91:6d:
e9:d5:fa:be:62:dc:69:c3:08:54:65:a0:f5:a4:a1:94:57:8f:
92:f4:d2:eb:63:c2:f9:5f:4d:20:a4:6e:3a:9e:b4:3a:04:98:
4c:b3:99:11:79:0d:5b:16:af:7c:12:0c:c3:0a:e2:4f:02:75:
e5:dd:c3:42:df:94:4b:09:bd:bb:ef:27:5c:48:b2:07:92:11:
8c:59:99:9c:78:25:82:56:4b:bc:48:38:c1:14:e8:7e:27:e0:
b9:f4:3c:b6:39:a7:fc:c6:ac:48:be:57:c3:4b:96:d4:22:08:
c8:07:6b:85:f0:c4:01:05:2c:c3:c9:a6:9f:0c:b5:a6:31:1a:
b9:6d:4f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:21 2025 by rpki-client