Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
File: wtJUnY0AZ6NyMjzHbY7gECt02DM.mft (raw, json)
Hash identifier: kV66u3h4twqFez/0BULBobFqPDsC/cbQyBoEYiDkIaI=
Subject key identifier: 94:03:1C:54:FD:75:CB:A3:42:DB:23:A7:30:6D:17:7F:59:8E:F2:FF
Authority key identifier: C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
Certificate issuer: /CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Certificate serial: 0199FF225211E1FDE6DAC7A65B48D3C135D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 01:01:03 +0000
Manifest this update: Mon 20 Oct 2025 01:01:03 +0000
Manifest next update: Tue 21 Oct 2025 01:01:03 +0000
Files and hashes: 1: 1XPduftMWiA3mhDReUc68s4JF-M.roa (hash: BCW8W7hox85l+EvIIJN43p7alSsxdX+eLTmQrODF5v4=)
2: wtJUnY0AZ6NyMjzHbY7gECt02DM.crl (hash: IWTn4mswmMB3NE7ZLqn10XgrBl4gUEnJy80Bv3tSxp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:52:11:e1:fd:e6:da:c7:a6:5b:48:d3:c1:35:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Validity
Not Before: Oct 20 01:01:03 2025 GMT
Not After : Oct 21 01:01:03 2025 GMT
Subject: CN=94031c54fd75cba342db23a7306d177f598ef2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:a7:7b:21:f9:70:6a:cf:33:08:8d:6c:c2:
8e:a0:ca:f3:b1:f6:d6:27:6b:34:63:b2:a6:a9:20:
7f:01:c4:72:1b:74:43:4d:6c:46:8f:cb:23:91:b5:
9e:15:eb:45:21:b9:55:d4:d1:33:9b:db:61:77:65:
b8:e7:9d:a1:3f:57:ca:54:f2:77:14:b9:21:3e:ad:
ec:f3:85:ef:14:dc:03:9e:05:6c:a5:26:6c:1c:e7:
59:84:c8:06:54:54:f2:4f:a8:17:92:9f:65:8e:40:
89:83:04:21:bf:2d:3f:27:60:9c:e7:19:2b:eb:22:
5a:bb:92:9d:55:48:d8:b2:4a:76:76:c4:ef:5d:97:
88:59:28:57:c6:19:f6:c4:49:0e:5e:33:ca:ff:b3:
a7:c2:9d:86:5a:fd:bf:92:61:c7:a4:c6:1e:c6:c8:
e4:01:09:c7:e4:01:45:eb:29:f7:8a:66:cf:8a:34:
09:03:5a:75:0f:77:98:7e:9a:3a:49:26:b7:53:0f:
34:7d:f0:90:33:1b:5e:b9:c4:df:3d:42:66:a3:38:
36:2b:f9:bc:b5:5d:56:28:65:92:4b:c0:1b:e4:ea:
71:68:47:0c:f4:23:cf:f7:10:35:cc:c6:17:ad:5a:
17:f7:e0:70:46:2e:81:73:27:f8:59:b6:15:ae:39:
3b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:03:1C:54:FD:75:CB:A3:42:DB:23:A7:30:6D:17:7F:59:8E:F2:FF
X509v3 Authority Key Identifier:
keyid:C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:55:13:44:67:af:d1:d9:52:e4:e0:bb:a3:ea:44:82:4b:53:
18:f2:b6:f9:dd:e5:18:e9:d1:f1:c1:7d:b8:02:5d:f1:76:ef:
44:6a:32:10:1c:d2:f8:c3:e4:c5:bd:64:b8:be:01:79:cb:e8:
a1:2d:e3:23:9f:4a:f0:f2:69:50:95:4c:94:db:b3:be:f7:20:
d5:b2:fe:eb:1e:85:ee:98:d4:27:b3:50:30:43:fa:6d:96:dc:
e1:19:d3:92:ce:11:e5:ee:a1:62:d0:80:e2:c2:2b:69:2c:f5:
ab:b2:7e:65:7f:ce:30:ab:7a:5d:52:5f:74:b5:1d:48:95:03:
be:cb:c2:9d:3c:b5:71:6b:4c:04:da:7c:7f:9e:80:fa:49:99:
7a:8f:fc:d4:33:8e:6f:b2:be:09:bd:d9:f1:92:21:ad:b6:a2:
e0:f2:e9:37:57:01:59:54:ca:2f:80:97:37:6c:9f:d8:6c:7c:
c3:d1:ad:60:47:9b:6b:4f:3c:1d:14:ef:03:93:fc:b6:71:b3:
c7:d6:c9:b0:22:35:6b:7d:8c:6b:fa:27:09:91:ac:8e:aa:06:
49:1d:4e:0c:41:d8:4e:73:64:ea:e5:20:e9:54:c0:86:7b:57:
96:d6:57:20:43:e5:11:04:3c:73:04:16:2b:98:a5:04:b4:8d:
e8:fa:b5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:25:05 2025 by rpki-client