Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
File: mWsinL82Z6zid7FgBcOQctBnP88.mft (raw, json)
Hash identifier: TiziTLNvcROj0omzf9E0pRlXEJ9u57J6umntq9BSdXQ=
Subject key identifier: B1:30:99:38:DC:49:B8:6F:4D:91:3C:5D:A2:FE:AD:09:F0:EF:38:F1
Authority key identifier: 99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
Certificate issuer: /CN=996b229cbf3667ace277b16005c39072d0673fcf
Certificate serial: 0199FC8FC47F276B42F02EBA60E8D7783F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
Manifest number: 0548
Signing time: Sun 19 Oct 2025 13:01:44 +0000
Manifest this update: Sun 19 Oct 2025 13:01:44 +0000
Manifest next update: Mon 20 Oct 2025 13:01:44 +0000
Files and hashes: 1: YKl2f2IPF1HilabBLdWdBFhWqWU.roa (hash: Ji5xPVt5I1nXvu8659S7ksrNu2RDx/GRkGsd+dxvHXE=)
2: mWsinL82Z6zid7FgBcOQctBnP88.crl (hash: 5kk5kmuWiPCzGBLzMa0JYrW3/3aTmmrloNTJdxhGg+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c4:7f:27:6b:42:f0:2e:ba:60:e8:d7:78:3f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996b229cbf3667ace277b16005c39072d0673fcf
Validity
Not Before: Oct 19 13:01:44 2025 GMT
Not After : Oct 20 13:01:44 2025 GMT
Subject: CN=b1309938dc49b86f4d913c5da2fead09f0ef38f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:e1:95:db:c6:1e:95:eb:1d:71:f9:32:29:
1c:68:fb:9d:f1:56:67:66:fc:ab:b2:a6:27:d8:f5:
d4:fe:a8:07:55:fd:21:d8:ff:bc:9c:3c:fa:79:8a:
f7:06:cd:02:9d:7e:7f:24:c5:f2:54:3a:d2:8a:f4:
d3:8b:82:e6:7e:63:02:4a:84:14:8b:60:01:8e:9d:
0a:99:bd:48:a1:a9:88:52:09:36:11:90:4b:f0:d8:
42:b1:7a:c2:9c:9d:1a:ab:7b:5a:41:69:34:26:fc:
f3:a4:f6:a8:12:b3:0f:62:88:f4:28:34:97:e4:c9:
f6:8e:ae:6d:e1:d6:7b:8f:2f:28:d1:c6:63:9f:7b:
c2:77:0d:0a:6f:d4:da:c7:c9:c8:30:da:d3:f0:9a:
b6:a9:fb:e8:a1:13:6c:c0:a6:c4:f4:c1:0c:7f:06:
f9:4e:bf:22:0a:9b:fc:45:4b:96:70:c8:1c:6c:4d:
80:e2:8e:05:64:3a:fc:54:2b:d5:5b:d5:7e:e9:75:
77:5b:d5:1e:01:8f:a7:6b:3e:7f:63:a5:70:a5:48:
03:df:cd:23:3e:2a:35:99:a8:da:99:a7:9b:5c:1f:
45:0b:2c:db:15:65:28:90:ab:01:f2:6c:94:ca:3e:
86:d6:e8:6d:3f:28:62:66:9f:27:8f:61:d0:90:55:
4c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:30:99:38:DC:49:B8:6F:4D:91:3C:5D:A2:FE:AD:09:F0:EF:38:F1
X509v3 Authority Key Identifier:
keyid:99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ba:31:ad:fd:a1:6a:99:ee:84:18:a1:71:fd:0e:78:c0:a7:
2d:cc:50:e0:eb:b2:d9:84:c5:78:01:01:88:e6:ea:fb:67:90:
27:91:88:de:3c:45:79:f1:a5:ef:2c:b1:21:86:7b:15:54:89:
e1:ed:b2:f6:02:36:64:4b:91:64:31:24:98:e8:d7:d8:99:53:
29:65:5d:1d:23:ed:a9:73:1e:a0:c1:bb:67:4c:4f:83:dc:2f:
6b:a6:8b:72:23:ef:fa:dd:dd:57:31:f9:03:32:ad:6d:11:c1:
ad:3a:bb:b0:f8:f7:97:5c:21:99:36:b8:d0:28:59:4a:19:9d:
7e:73:e9:70:dd:81:62:52:d7:e7:01:ce:13:51:11:95:89:41:
49:56:51:14:cb:1f:72:c2:b5:75:37:ae:25:48:bf:60:24:ce:
6b:fb:19:2d:83:a0:2d:77:ff:73:46:07:b5:b3:f5:f2:81:3e:
e6:c5:87:93:2e:85:36:f3:11:d5:19:ff:60:e2:ce:f7:d6:90:
90:44:e2:5f:c7:05:51:80:f5:16:47:ee:d9:4d:c9:0c:2f:3f:
9b:e8:3c:42:91:4f:80:8c:52:ff:9e:41:92:cc:92:32:f7:04:
d8:f1:ad:fb:4e:01:ee:ee:11:02:3c:fa:e1:9d:54:da:0e:8c:
6b:95:fb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:53 2025 by rpki-client