Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File: wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier: ZmgbSFI1u4j+d9nfl5gYA9vyfvsCZNHDGcu+DKHcVus=
Subject key identifier: C0:8A:67:F6:88:F5:86:2F:4D:B5:61:3D:C9:A6:C1:3E:10:B2:59:B8
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer: /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial: 0199FF22D5E46A87512D9973D21386F1088C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 01:01:36 +0000
Manifest this update: Mon 20 Oct 2025 01:01:36 +0000
Manifest next update: Tue 21 Oct 2025 01:01:36 +0000
Files and hashes: 1: Wxr7kgALDgcsOOCQfZoACHYOwbQ.roa (hash: B9f7m4dPaZeRMrrY3iGXe7xjmu9+7nX6lw2kW7YcneQ=)
2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: hbNSm09DNioDquUdUPWNi9iBPGbH/95zvlEPmS4FJNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:d5:e4:6a:87:51:2d:99:73:d2:13:86:f1:08:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Validity
Not Before: Oct 20 01:01:36 2025 GMT
Not After : Oct 21 01:01:36 2025 GMT
Subject: CN=c08a67f688f5862f4db5613dc9a6c13e10b259b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:ed:22:14:ce:3e:80:7e:c4:9a:99:8d:8d:
3f:d0:9c:70:37:0c:79:bf:88:15:8e:ce:1a:d3:d9:
27:5e:5a:7e:7c:43:51:01:e1:98:82:cd:67:e7:64:
dc:c3:fe:25:e0:48:b0:81:f9:2a:d3:be:85:56:41:
46:6b:31:4b:b4:8b:51:51:24:2e:ae:74:99:4d:1c:
9a:83:34:37:82:29:e5:b6:49:b9:0e:bc:a8:c3:3c:
67:eb:97:41:66:11:56:d2:1d:41:3e:02:4a:ff:2b:
e9:e8:03:37:a2:f8:15:aa:1b:52:67:86:35:fa:e4:
89:d5:19:ce:4c:fa:c9:bb:37:8a:7b:ee:8a:fa:f7:
05:d3:54:5d:63:fc:22:ee:a5:5e:fa:a5:38:09:d6:
67:05:d6:e5:96:ca:2f:de:66:ad:d7:82:a1:c7:db:
f7:9c:f4:21:d8:69:43:89:36:4e:49:a8:1f:a7:e5:
58:39:cd:86:7e:a2:00:69:57:7c:6c:d6:97:18:50:
30:34:56:a3:46:eb:ec:b8:7d:81:bd:87:05:60:08:
1d:d1:7b:c1:37:1c:3f:8f:ee:90:4c:18:4e:7d:f9:
c4:c6:4b:64:c2:28:66:97:a7:e9:fc:52:f8:95:db:
1d:d5:5a:98:12:d6:59:b5:3d:82:0d:83:1d:70:de:
b5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8A:67:F6:88:F5:86:2F:4D:B5:61:3D:C9:A6:C1:3E:10:B2:59:B8
X509v3 Authority Key Identifier:
keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d2:47:95:69:d7:3b:a0:14:21:43:7a:e9:25:19:d4:8b:b6:
87:bd:83:35:be:6d:59:5a:5b:2b:1d:b0:93:1e:3b:df:9c:3e:
a8:d9:7b:7f:b4:08:89:66:c9:9f:85:21:e2:4e:1b:b8:5e:2a:
f3:de:b7:9a:17:81:dc:e9:a3:ca:06:fc:71:ef:47:7a:c4:5a:
eb:e0:41:f4:99:1f:80:6f:19:05:32:cc:92:96:7b:23:3b:ed:
a3:75:a6:c4:90:29:42:90:6f:ed:2f:c1:4b:7e:69:b8:8f:ae:
47:a2:10:51:bb:10:4e:8b:26:a3:ee:8c:99:c0:db:db:b7:1e:
6b:09:f9:de:e5:28:89:fb:6c:0e:18:b1:bf:f0:47:b7:3e:0a:
83:00:6c:13:8d:8f:14:41:ff:90:ab:fd:cc:05:4e:94:92:d5:
ef:e2:9b:77:6e:18:ba:7b:46:0f:70:ba:a7:32:35:53:e3:42:
fb:d7:4a:1c:6d:cb:b4:99:83:b9:63:fd:a8:05:43:51:e2:7f:
10:89:8b:a0:24:3f:23:81:e6:89:7b:e4:1e:29:40:29:be:4d:
0a:1b:08:0f:ad:9c:96:ca:45:17:ba:cd:d0:30:b5:5f:c3:99:
38:32:2c:3c:54:cf:b8:f8:ad:64:9f:31:a8:09:47:e3:80:02:
66:0d:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:50:14 2025 by rpki-client