Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
File: wBOZtGfJBmYt4A7HZsx-AA6uwns.mft (raw, json)
Hash identifier: FKu5pqMjwOVg4SN0mwnEW0pbesX9XICLgqEosxwFaTo=
Subject key identifier: 63:4A:4C:93:5E:C8:BB:03:C1:51:79:55:F1:22:A2:A8:F4:B9:F0:B4
Authority key identifier: C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
Certificate issuer: /CN=c01399b467c906662de00ec766cc7e000eaec27b
Certificate serial: 0199FDD94D048280AB1F4E4056509D7893F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
Manifest number: EC
Signing time: Sun 19 Oct 2025 19:01:40 +0000
Manifest this update: Sun 19 Oct 2025 19:01:40 +0000
Manifest next update: Mon 20 Oct 2025 19:01:40 +0000
Files and hashes: 1: 6dPthsF1SSLUrw-8wd5QNobYALo.roa (hash: CmnlVEiEx4rD/KLQtwZBi42ENs4iCe+rnAiQ+mn7tNY=)
2: AM62_hNG9hkzgdOgJu_7Pl-u4oI.roa (hash: aTW9umwh2RX7kyAdVmGDBiqiexRFNiZSuIDuhZf0vOA=)
3: wBOZtGfJBmYt4A7HZsx-AA6uwns.crl (hash: SgLQDXOMf6Lfp6jy+RM4cRldsaSloTsgzIx5GCwloJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:4d:04:82:80:ab:1f:4e:40:56:50:9d:78:93:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01399b467c906662de00ec766cc7e000eaec27b
Validity
Not Before: Oct 19 19:01:40 2025 GMT
Not After : Oct 20 19:01:40 2025 GMT
Subject: CN=634a4c935ec8bb03c1517955f122a2a8f4b9f0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:64:29:0a:75:13:e3:eb:7d:79:0d:74:d5:
d1:19:40:58:fb:30:f8:b9:6a:7b:65:e8:c4:a8:5a:
ed:7a:c4:46:53:52:89:55:a7:b1:40:b3:8c:a2:3b:
f6:a6:71:6d:5b:7f:fa:17:07:ac:b9:52:bf:16:9f:
8f:d6:85:f5:cc:0c:a7:92:e5:73:9e:cb:5e:9a:b7:
0f:84:1c:ee:db:74:08:a4:fe:88:fc:8f:72:8f:1f:
1f:a0:87:02:c4:96:cb:72:6b:20:bc:67:74:f5:3c:
1c:d0:61:ca:03:70:54:ef:04:1a:fb:74:c8:6f:da:
82:ff:c3:77:c2:ea:ba:3c:72:28:89:f0:33:fb:a6:
c0:fb:11:75:60:0a:30:c0:a3:f8:89:e7:2c:4c:dd:
54:63:e7:94:33:88:fa:0b:63:65:86:7e:b6:29:67:
fd:1b:f2:95:58:d9:40:de:8d:77:8c:0f:23:71:a4:
1f:da:97:79:b6:b3:78:99:b7:67:22:0f:10:62:8d:
aa:33:29:74:99:4a:73:32:e0:76:09:16:0a:c5:64:
a0:9d:d1:1b:21:d8:af:de:e3:80:5a:f1:c2:a6:3c:
8a:80:3e:9b:9f:ca:f7:8c:f9:79:6a:b0:cc:07:66:
4b:00:8e:88:62:76:02:4c:b0:83:e9:2f:e9:03:78:
e8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4A:4C:93:5E:C8:BB:03:C1:51:79:55:F1:22:A2:A8:F4:B9:F0:B4
X509v3 Authority Key Identifier:
keyid:C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:70:ea:d0:02:99:b6:45:c0:df:4e:36:00:3a:63:11:55:12:
a3:ae:28:aa:77:2b:dc:d7:25:5b:b1:a8:b2:77:67:d4:b9:1c:
26:ac:76:32:45:9d:31:4b:3f:9f:58:92:ee:e6:d3:6a:16:99:
01:37:06:50:37:cd:05:87:0d:dd:f8:a2:3f:b4:7f:f2:ad:f7:
06:c0:1a:e6:43:f2:93:02:9f:f2:b9:03:ce:3d:33:14:89:01:
2f:1c:1a:d3:30:f2:8a:5c:a1:b9:f2:69:81:88:97:65:d9:48:
d8:a3:25:30:06:2e:e9:75:c5:0b:0d:bd:fe:93:6a:50:da:f5:
46:a7:39:4f:5e:45:07:61:78:f3:e1:a3:73:53:93:e9:de:ce:
9a:f9:14:26:89:b9:cf:b3:a4:33:af:7a:2e:77:d9:dd:52:1d:
32:b6:1a:1e:29:51:2a:6c:b1:f7:1a:11:b7:a6:f9:fe:3a:08:
45:cd:49:c0:64:f6:45:ef:98:8c:c4:82:fa:0d:4d:f1:e0:c2:
22:86:80:b5:0b:7b:f0:bd:f5:c0:f2:34:a4:dc:74:d0:7d:a5:
b6:d0:43:e4:fc:8b:83:86:8f:f5:b2:69:7d:7e:1e:30:74:68:
bf:2f:01:9d:f2:86:39:d4:51:fd:c6:b9:25:09:f7:07:24:e7:
01:7e:83:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:03 2025 by rpki-client