
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
File: wlEKilJdybHsCxVg0JCmQmjULsQ.mft (raw, json)
Hash identifier: sBM5r94N9Rb7E7tm/tv4Jqvps78OweeHkhlR8yuNYf0=
Subject key identifier: E2:10:BB:31:A8:81:AA:43:27:A9:64:49:37:07:41:A5:16:22:C3:DD
Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
Certificate issuer: /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Certificate serial: 019917643ACD2195257BB70A7FDE68B1AEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
Manifest number: 1616
Signing time: Fri 05 Sep 2025 01:01:08 +0000
Manifest this update: Fri 05 Sep 2025 01:01:08 +0000
Manifest next update: Sat 06 Sep 2025 01:01:08 +0000
Files and hashes: 1: FaPK4dABXX1JUG-DgodpiiYFyXk.roa (hash: 8EnGZIA4ScfpCaGufhHcnmIDRY1lMTTgXZqEJ9E7v2g=)
2: bYeYVYEdCXCzK3hGWezO0ZNHveg.roa (hash: UaiyZMeOYv/TRvUCkbZ9PcMP5ygVyQhx0p+DkQtZkYA=)
3: wlEKilJdybHsCxVg0JCmQmjULsQ.crl (hash: fPHnrj1RE92Xm5LPYRGCiMtmccS480ltUYhP6f1verI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:3a:cd:21:95:25:7b:b7:0a:7f:de:68:b1:ae:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Validity
Not Before: Sep 5 01:01:08 2025 GMT
Not After : Sep 6 01:01:08 2025 GMT
Subject: CN=e210bb31a881aa4327a96449370741a51622c3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c3:28:13:bd:c3:0b:f0:ed:8a:7e:ae:9f:00:
0e:3d:08:51:85:9a:b4:14:25:7c:85:cf:04:a7:79:
82:dc:c1:3f:db:e6:9a:8e:59:f7:92:7c:a0:62:6f:
b7:d1:a2:1b:59:c5:cb:87:09:e9:d9:65:e8:20:2e:
27:73:e7:7f:43:d5:e3:ed:66:e1:76:33:9e:e0:dc:
d2:a9:3b:f6:ba:a2:54:dd:65:69:cb:4a:fd:52:8e:
11:d0:49:f3:eb:fd:3d:0e:80:f7:e0:53:08:9c:14:
bd:8c:e3:d6:1c:ff:31:50:57:e3:83:c8:6e:b3:14:
ab:a3:f6:03:be:1b:7a:42:c9:5f:de:44:35:7b:71:
13:9d:fd:e4:69:f8:77:56:89:86:d5:ec:3b:31:cb:
d6:6b:a0:b7:16:51:d1:de:d4:de:5c:40:45:8a:4a:
29:e4:2a:cb:37:1e:0f:f4:29:41:e6:74:89:1f:04:
cc:da:ea:5f:fb:b5:d2:82:ba:20:45:35:0c:ed:b4:
d4:89:30:b2:28:7b:ab:bb:9f:f7:23:d8:e7:4e:61:
b7:2b:f7:d0:9d:03:ba:29:07:09:f4:f7:3f:4d:2d:
dc:18:d7:31:3f:d0:d6:a0:0b:5c:39:bf:11:e5:5f:
6c:7b:b0:3b:8c:78:fb:f8:28:8f:82:71:e7:2e:56:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:10:BB:31:A8:81:AA:43:27:A9:64:49:37:07:41:A5:16:22:C3:DD
X509v3 Authority Key Identifier:
keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:bf:e2:c3:99:f1:8c:95:11:e3:c5:b0:cd:75:eb:0f:67:a2:
12:e3:bb:79:98:2a:e9:3f:06:61:4c:cb:4a:6d:c9:e8:4c:3c:
63:e5:e9:f0:a4:94:fc:4a:c7:dd:b1:81:cd:31:64:75:aa:85:
e6:f2:bb:bb:b0:a4:0a:80:fe:17:02:87:65:3c:98:48:b2:67:
da:14:0f:b5:4d:7a:da:cf:3a:33:1b:88:45:1f:f6:94:a2:9b:
52:d0:f3:a3:ac:79:a5:20:4a:15:a3:a9:f8:ed:e3:1c:1b:00:
d0:1f:70:19:da:22:76:67:56:36:18:18:60:1f:7d:89:55:2d:
62:80:33:77:11:40:66:56:2f:26:c5:ef:b3:aa:13:5f:79:e4:
4d:82:26:de:02:c5:ec:75:73:51:7b:c9:86:7b:11:c7:6d:69:
91:33:48:72:10:e5:45:58:d3:36:4a:cf:07:38:25:6b:6d:c6:
69:ff:a0:8f:20:df:64:eb:00:b0:2d:64:ee:43:f6:29:95:fb:
64:7f:76:1f:3f:8d:31:4c:bb:4f:22:56:5f:3d:54:a3:42:a8:
ab:4e:17:94:09:b4:36:3b:1f:2f:98:3b:24:b5:43:8a:d5:0a:
91:0d:fd:10:94:fc:a6:75:0b:ba:d4:a8:1e:9c:01:0a:35:4b:
15:bb:4e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:35:57 2025 by rpki-client