Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
File: wIneL0L89EpNqraoJMEgq7i3Fl0.mft (raw, json)
Hash identifier: EIkawo/pgLuhBgh2aCsn8sRftbdiaA89B3AHUaeUwRM=
Subject key identifier: A5:88:C3:0D:F6:D4:AF:22:95:EB:4C:76:DC:ED:1E:E9:85:66:8E:AB
Authority key identifier: C0:89:DE:2F:42:FC:F4:4A:4D:AA:B6:A8:24:C1:20:AB:B8:B7:16:5D
Certificate issuer: /CN=c089de2f42fcf44a4daab6a824c120abb8b7165d
Certificate serial: 0199FAD84F32378E15ECD8689C854DB86A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
Manifest number: 90
Signing time: Sun 19 Oct 2025 05:01:43 +0000
Manifest this update: Sun 19 Oct 2025 05:01:43 +0000
Manifest next update: Mon 20 Oct 2025 05:01:43 +0000
Files and hashes: 1: H2BNPmlBfhtAsDApleTz64AWPsM.roa (hash: guAQsXA/mb8umz46ROZO5L8VAidQfknhPYv2sReEc38=)
2: trrjLXp7ppNA4f7ZBtou6UVNH0c.roa (hash: JoQ3eQtKyL6eTj4ubcRQEeezZNpu32gkn8SEO4tRm78=)
3: wIneL0L89EpNqraoJMEgq7i3Fl0.crl (hash: xFLc31YUvRKkGCiZAy/k0NPtbdbO4LeOK7wBs5XMIl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:4f:32:37:8e:15:ec:d8:68:9c:85:4d:b8:6a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089de2f42fcf44a4daab6a824c120abb8b7165d
Validity
Not Before: Oct 19 05:01:43 2025 GMT
Not After : Oct 20 05:01:43 2025 GMT
Subject: CN=a588c30df6d4af2295eb4c76dced1ee985668eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:1e:06:a1:44:69:a0:49:42:89:5f:a6:99:
c1:28:a9:06:a3:04:46:31:5c:d7:48:61:1d:03:64:
1d:ab:ef:b6:18:16:76:11:7c:75:79:cc:34:c4:0b:
b2:b1:8b:b9:59:03:20:7b:e8:68:fe:2e:88:49:c0:
07:de:64:19:1e:68:62:90:95:ce:7a:c2:09:03:e3:
1e:75:f8:a6:8e:84:86:a5:05:d9:9e:04:57:94:96:
0b:fb:0d:1e:bc:73:76:f2:14:bc:04:5d:a2:7f:d7:
3a:49:c9:68:bb:34:1e:be:9c:c0:4c:d5:bb:2a:72:
bf:81:60:db:87:7c:dd:68:47:05:39:3a:57:12:84:
2a:58:41:77:6a:a6:d7:09:ee:1c:52:fe:1d:6f:42:
08:5e:66:a2:55:5f:de:ec:56:c1:b7:a4:77:4a:f4:
b3:c7:90:e8:67:c3:69:d7:ae:39:ee:9c:ec:a2:1f:
98:da:9f:af:47:94:90:88:bd:b5:ed:e0:bf:9f:5a:
55:6f:d5:e3:66:b0:7d:7b:8b:2d:b3:5b:d2:de:52:
f9:8c:cf:33:d4:b0:ec:fe:7d:3f:f4:41:a8:26:5c:
e4:88:dc:73:84:4b:b5:c9:c4:06:24:8c:ee:35:8f:
16:20:3d:93:a0:14:a4:bd:26:d7:ad:a3:b4:55:dc:
85:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:88:C3:0D:F6:D4:AF:22:95:EB:4C:76:DC:ED:1E:E9:85:66:8E:AB
X509v3 Authority Key Identifier:
keyid:C0:89:DE:2F:42:FC:F4:4A:4D:AA:B6:A8:24:C1:20:AB:B8:B7:16:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3d:fe:74:ce:d0:a6:38:85:1a:3c:63:64:1d:aa:2f:46:1c:
99:69:d1:fd:64:fc:f9:3d:f1:e1:3d:a0:da:e3:3b:74:37:89:
db:96:82:58:f8:bd:c0:d8:c2:1d:1c:4a:ce:d1:75:e8:1a:5d:
70:6d:30:43:be:07:fb:f9:0b:23:5f:85:f5:63:86:d2:de:dc:
b2:08:2c:7e:6e:8e:95:4b:1f:29:ac:ad:2b:cd:1f:39:fb:7f:
fe:94:95:e7:d2:4e:aa:4b:20:1a:1e:4e:e5:d5:4c:aa:9c:a0:
1b:b7:f3:f5:02:28:a7:a5:91:3c:25:99:98:f7:b9:bd:79:82:
40:f4:f3:70:c3:6b:1d:fc:20:5a:da:19:8a:52:7a:ac:fa:09:
ba:e7:f3:f4:94:2c:7a:ce:a5:7b:e5:e9:d2:71:05:f7:5f:15:
53:6e:05:90:7c:6d:75:85:96:3f:73:8e:9e:81:3c:9e:70:f5:
5a:a5:71:30:48:32:67:a3:3f:5e:c4:0d:5a:5f:52:6b:c0:4e:
87:37:73:e1:3f:d4:7f:f7:77:cf:78:43:fa:e7:dd:cf:2b:d7:
6b:d7:c3:a2:6f:87:ba:c6:5f:c8:97:f3:96:59:63:14:bb:1f:
b3:55:f3:7f:8e:60:86:6b:f0:3c:44:ac:26:d3:11:6e:b7:91:
41:ff:03:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:54 2025 by rpki-client