Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
File: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft (raw, json)
Hash identifier: StIoWxFV4brdVmFvAS6k2nVuCFtb6T9WZjQUgGAAxkw=
Subject key identifier: 60:13:C8:ED:35:19:44:7A:B1:D6:51:CF:B8:6D:64:DA:5F:28:EF:EA
Authority key identifier: C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
Certificate issuer: /CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
Certificate serial: 0199FE47173F9BA2B6AEAB5B847375110AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
Manifest number: 07DF
Signing time: Sun 19 Oct 2025 21:01:35 +0000
Manifest this update: Sun 19 Oct 2025 21:01:35 +0000
Manifest next update: Mon 20 Oct 2025 21:01:35 +0000
Files and hashes: 1: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl (hash: 75hFLMymJUKN+4PFnckqMHaurU4gmVdM+ZMmPgBt9n0=)
2: zpicEsTdAQH31s_U5VTklFFkx3A.roa (hash: F4NgHOhmdVZSO+9LtvSeSBchmLUaANtpy3YFPClVpoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:17:3f:9b:a2:b6:ae:ab:5b:84:73:75:11:0a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
Validity
Not Before: Oct 19 21:01:35 2025 GMT
Not After : Oct 20 21:01:35 2025 GMT
Subject: CN=6013c8ed3519447ab1d651cfb86d64da5f28efea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:72:15:f5:34:39:5f:99:3a:f4:9b:58:5f:d7:
5c:71:33:1d:af:32:e5:c4:00:55:0c:9b:31:fa:6f:
b5:26:15:57:f4:8b:3c:35:78:14:e6:81:01:ea:dd:
20:56:57:8c:60:c1:cb:76:1a:4d:f2:dc:d2:8e:91:
1d:09:72:9c:69:c1:d3:7d:82:36:56:bd:ed:ed:8d:
21:3a:20:a1:6b:f5:48:85:f6:f2:2a:f1:6b:35:75:
da:87:c7:05:d7:82:82:1b:76:44:20:39:1c:ed:4c:
14:df:29:c4:9f:bd:f8:a1:2d:b9:6a:17:ed:b6:4b:
a0:83:c6:f9:c8:a1:28:e4:45:00:8c:b7:6c:ce:2a:
b0:f1:92:c3:e4:c8:e4:cb:90:64:d6:3c:f7:7e:ad:
6e:02:44:95:72:83:72:c2:65:99:52:9a:e0:25:58:
12:fc:71:a0:e2:e8:35:46:3d:66:d8:35:15:ba:fc:
77:33:0a:de:45:43:d1:21:36:a0:97:3e:9d:e1:31:
d9:68:dc:39:b8:a1:d1:67:83:3c:a6:53:0e:9c:f6:
33:ae:41:83:66:ca:9d:c6:17:4a:94:c0:f5:00:53:
3c:e1:86:a6:9c:7f:b1:fe:09:41:3e:79:ce:2c:4e:
ff:69:dd:af:d5:04:78:89:56:03:6f:30:bf:3f:36:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:13:C8:ED:35:19:44:7A:B1:D6:51:CF:B8:6D:64:DA:5F:28:EF:EA
X509v3 Authority Key Identifier:
keyid:C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e5:bb:ba:fe:e8:b1:24:26:64:ac:e8:e5:a0:8d:b7:dc:d9:
37:f4:68:45:59:ae:07:92:05:29:09:77:b1:27:a4:9c:5a:72:
04:05:53:8e:42:af:e2:96:a8:4d:00:a9:f5:e1:e6:2e:bb:e3:
b2:ca:b3:75:55:46:d0:7f:4a:26:28:2d:cf:a2:01:7a:3f:bb:
6a:f1:36:72:ab:6f:8b:cd:e0:02:b4:80:a8:34:9b:25:4e:b7:
49:d0:8c:d4:57:74:05:82:b0:55:03:36:1b:4c:78:8e:0d:bb:
d8:96:a2:ac:a9:12:6a:87:e4:c9:04:a1:de:6f:89:51:c1:d3:
df:fa:41:c7:eb:fa:da:70:a6:e5:f3:7b:18:59:bd:43:3e:1d:
9a:d7:5a:62:97:08:80:b5:1c:0c:2a:95:54:88:91:70:12:1e:
e6:56:3c:21:95:1f:38:ad:3e:90:65:fa:71:71:37:38:ad:c2:
dd:5a:40:ca:96:02:e9:01:75:d6:1d:ca:41:b5:12:3e:83:31:
3f:5b:72:08:96:db:a3:aa:2c:05:40:83:2b:31:6d:ba:c3:1e:
a0:9d:1a:a6:55:ac:20:37:ed:b7:a0:31:f5:51:f4:64:2c:3f:
57:43:bb:83:ad:27:05:8d:45:ce:b8:df:0e:20:f7:53:09:ef:
bc:58:ad:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:32 2025 by rpki-client