Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
File: wv6ZPR8xDoFzwXzpJ48en44i48I.mft (raw, json)
Hash identifier: Vrk5VjT5IFlGJ93YazZxaxz2/1raizME+fCn+P49ivg=
Subject key identifier: FF:AF:C0:E1:07:01:00:91:E3:05:08:2F:5E:DF:31:F8:91:6B:AB:CB
Authority key identifier: C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2
Certificate issuer: /CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
Certificate serial: 0199FBEBE7651CCE2A3E05E71E6632262BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:45 +0000
Manifest this update: Sun 19 Oct 2025 10:02:45 +0000
Manifest next update: Mon 20 Oct 2025 10:02:45 +0000
Files and hashes: 1: Mp1fGdgDn3PJKQzmX0OXaKwztw8.roa (hash: r365CtsIuSw4zwNKBRELvDJ1xes0I/H0wB5Xk0xJ+cE=)
2: wv6ZPR8xDoFzwXzpJ48en44i48I.crl (hash: 7OEvvfl7GUGx0muW4UlkQLRi/F4HPMyrMpaGKOpSeTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e7:65:1c:ce:2a:3e:05:e7:1e:66:32:26:2b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
Validity
Not Before: Oct 19 10:02:45 2025 GMT
Not After : Oct 20 10:02:45 2025 GMT
Subject: CN=ffafc0e107010091e305082f5edf31f8916babcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:d0:56:d3:96:19:c8:e7:90:be:b5:26:56:
65:ac:86:31:0c:d7:da:d8:2d:20:5c:e2:71:6e:ff:
b4:12:8a:03:24:b7:7b:87:f6:08:6a:ab:0d:4d:6e:
ee:4d:f1:af:ce:bb:5a:90:5b:ba:87:9c:26:9d:f5:
f9:1c:53:18:2b:a6:a1:33:ab:b5:87:9e:86:71:bd:
48:be:dc:ed:56:81:60:8e:5b:2d:15:0a:1d:55:f4:
8c:07:31:a3:a1:20:ef:2d:8c:74:83:62:ff:2e:13:
a3:4a:1a:2d:fd:91:25:fe:c0:18:15:42:6b:e5:63:
bd:80:55:21:83:33:fb:56:6f:88:ba:de:2a:7f:33:
5f:de:9e:6c:96:49:e5:a4:b1:12:b5:d8:0a:02:2f:
04:37:24:03:ba:39:01:80:7b:c2:9b:cf:f6:d1:f6:
a2:cf:9e:31:78:6f:50:57:9a:c6:9e:aa:b7:a9:ff:
91:82:7f:70:a9:93:b3:68:ce:3c:cc:fb:7d:34:00:
83:63:d3:5b:4a:64:19:ad:cc:c7:97:89:11:75:eb:
be:85:1c:bb:3d:dd:3a:84:a0:3b:cc:49:22:e9:68:
f6:f7:02:30:bd:fd:f8:56:8d:3e:2e:96:c3:15:b3:
39:85:9a:b9:93:42:03:4e:57:c1:e7:63:02:63:5c:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AF:C0:E1:07:01:00:91:E3:05:08:2F:5E:DF:31:F8:91:6B:AB:CB
X509v3 Authority Key Identifier:
keyid:C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2e:10:3e:51:20:1c:ab:4d:e0:44:18:9b:7f:de:fd:81:3e:
32:e1:a8:50:39:15:3b:8b:65:eb:2b:f9:88:9c:0e:21:c0:cc:
10:54:92:70:aa:bd:55:e1:a7:c2:fb:61:7f:fa:75:9b:ec:5f:
bf:40:22:e1:c6:70:40:ee:0d:9a:61:7e:af:20:ce:19:70:cc:
11:57:c0:bc:86:a2:2e:e4:87:51:b6:6d:25:ff:9e:f8:22:7e:
a3:08:b2:d8:ba:99:5f:b2:5f:60:8e:fd:85:d9:f9:2a:d4:ae:
0f:fb:e9:58:f1:d5:10:62:c9:6b:47:7c:87:19:21:06:0b:57:
13:45:de:df:d2:26:02:4d:82:d4:ab:bc:dc:9d:5e:fd:ae:a6:
d9:f9:dd:d0:ec:1e:2f:df:26:6a:b6:ac:9e:bb:4f:af:7f:a4:
29:12:3e:39:58:3a:43:ef:2a:00:e1:90:5e:63:c8:4e:f2:96:
ac:11:3d:88:ba:cd:23:c7:26:8f:4b:5d:89:9b:78:f9:6e:18:
73:b9:fa:ac:98:07:f8:ce:26:a8:d3:f9:d2:55:b4:fb:e0:73:
02:c0:fb:3f:cd:fb:2a:47:68:e2:b0:d8:95:f1:ac:c4:0b:cc:
8f:b6:3b:2b:35:f6:62:d0:d4:ac:6b:8d:ed:5a:c1:cc:6f:33:
e1:3b:95:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:58 2025 by rpki-client