Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
File: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json)
Hash identifier: hrqnAjk0odN3Qx42nSZR11s6GiIe9x2AAL2K5kxl3+8=
Subject key identifier: FC:4C:FC:59:32:CC:5A:87:E8:F8:2A:CC:1E:C4:5D:F7:63:A7:C5:2D
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Certificate issuer: /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial: 019A04ECC73BA06FBAAA282D788154CD4DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
Manifest number: 16E6
Signing time: Tue 21 Oct 2025 04:00:17 +0000
Manifest this update: Tue 21 Oct 2025 04:00:17 +0000
Manifest next update: Wed 22 Oct 2025 04:00:17 +0000
Files and hashes: 1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: aZQGhsjko5yuBOAaV3MwR7+Kza5qxWfQyHVSbA1ETOg=)
2: x87acQDfo7zGs3qirjlrzwnM_hA.roa (hash: U4EKqslx/+4i2YtDzAzEmDv7ojb2iGPFBdKGnVtkCzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:ec:c7:3b:a0:6f:ba:aa:28:2d:78:81:54:cd:4d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Validity
Not Before: Oct 21 04:00:17 2025 GMT
Not After : Oct 22 04:00:17 2025 GMT
Subject: CN=fc4cfc5932cc5a87e8f82acc1ec45df763a7c52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:2b:45:da:64:b7:21:1a:fd:6f:34:11:ec:
c1:3f:73:e7:f2:ad:99:10:39:c0:b8:0c:73:22:64:
ec:8b:c7:9b:97:1b:8e:e2:cf:80:d2:ce:4a:fe:62:
63:27:e7:e0:a1:f2:1a:99:e3:9b:8f:4b:61:b8:07:
41:5b:43:ad:13:82:a1:89:95:ed:00:4a:29:85:ec:
64:9f:95:ef:f5:16:83:5e:04:4b:ba:45:2c:2d:b8:
60:2b:d7:08:ce:c2:c8:8f:b0:53:b3:49:e7:b3:6e:
49:4a:33:80:df:2b:e3:53:46:72:0a:89:1a:93:a4:
b8:7f:21:a9:9c:4c:11:74:77:af:a7:79:aa:1c:60:
64:e4:2b:04:28:13:94:c6:19:05:39:2a:89:f2:67:
49:cb:19:19:56:38:c6:12:f9:c6:08:59:dc:17:b1:
cc:9d:ea:63:24:0a:b5:da:bd:67:95:83:cc:71:fe:
5b:14:9d:13:ed:2b:58:3a:5f:17:a4:c8:2f:e7:97:
04:28:8f:96:a8:1d:cd:8e:74:a8:5c:7c:5e:61:9d:
02:68:67:5c:74:79:d9:85:cd:6d:66:95:be:9d:15:
dc:1f:58:3f:64:12:92:ac:e5:03:44:85:e6:0e:77:
8e:78:a3:0d:09:89:f2:60:3b:43:f4:45:bb:b4:ea:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4C:FC:59:32:CC:5A:87:E8:F8:2A:CC:1E:C4:5D:F7:63:A7:C5:2D
X509v3 Authority Key Identifier:
keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d4:b1:18:fb:44:30:4c:a1:10:eb:c3:d7:2a:f3:a5:69:d3:
45:2b:5c:69:d5:85:0e:21:05:a6:45:36:5e:15:6f:d1:98:22:
0c:5e:3f:f9:90:af:27:a6:95:41:84:b9:9b:43:25:5d:40:a6:
21:08:17:18:b7:d3:54:fd:d8:ec:75:de:58:d0:e3:a0:09:00:
43:bb:6e:36:fe:6a:5c:4a:cb:78:29:55:40:ed:26:b1:d2:c2:
df:95:14:4f:c2:0d:71:85:28:5b:26:ea:27:68:5c:a3:d4:a6:
ff:79:3a:7d:b6:7a:e7:87:47:3a:50:4e:09:c9:b3:2b:c0:fd:
d9:ff:6a:ea:b3:f7:36:61:2e:00:3d:a3:70:d2:ec:40:b4:30:
f2:71:c0:9a:b5:3c:92:0f:45:20:e6:df:95:31:42:67:f3:cc:
2f:67:27:85:29:d3:35:b7:e9:d8:43:a7:6f:01:f8:49:ef:05:
90:0d:03:fb:c2:75:a4:b6:61:9b:87:61:0b:c5:76:0c:ca:08:
06:b9:95:b8:23:cf:5c:a5:1b:fd:15:bb:27:9b:fb:a6:26:59:
c5:c6:c6:52:93:08:eb:d6:ee:ec:54:c6:02:35:d6:9b:ca:3a:
c3:21:a6:a2:d8:14:82:a6:c8:33:f9:d9:8f:2d:37:45:42:bd:
cc:ec:18:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 14:13:06 2025 by rpki-client