Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
File: wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft (raw, json)
Hash identifier: dwnjAjKFpROQbe0rcXo3l516H8UtwQm7jZ16w7zA1xw=
Subject key identifier: BC:55:72:2F:A3:DD:04:36:D3:B1:14:B4:18:EA:BD:E7:DF:A7:D5:B0
Authority key identifier: C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC
Certificate issuer: /CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
Certificate serial: 019A2365A643DAFDEA8F15AEC4569A62C2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
Manifest number: 03FC
Signing time: Mon 27 Oct 2025 02:00:55 +0000
Manifest this update: Mon 27 Oct 2025 02:00:55 +0000
Manifest next update: Tue 28 Oct 2025 02:00:55 +0000
Files and hashes: 1: L4zdfpQTMapiD2xjjc9b_8rVphY.roa (hash: X4ulaYGn7ALPkkvP3AdThxBx//teLK+YYJfbh5wE5to=)
2: wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl (hash: uH6pMCouX+EpjpCTt2dMEB0G6+UV/1Ij6UibbgLJVUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:a6:43:da:fd:ea:8f:15:ae:c4:56:9a:62:c2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
Validity
Not Before: Oct 27 02:00:55 2025 GMT
Not After : Oct 28 02:00:55 2025 GMT
Subject: CN=bc55722fa3dd0436d3b114b418eabde7dfa7d5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:01:8a:f8:f6:88:cb:4e:13:ce:c2:fc:d5:
df:62:36:d9:bd:3d:20:18:0a:30:c8:5e:ae:0e:e2:
e5:42:5c:b8:5a:65:1a:8b:66:ae:8a:4a:0d:85:7b:
f5:36:71:dc:9e:f9:76:c7:9a:da:49:e5:3b:90:4c:
f6:cf:93:53:ee:46:22:98:b3:f0:b5:1c:7a:fe:53:
60:ca:4d:57:15:b0:4a:9b:8f:7f:85:f4:54:e5:7c:
2e:57:f3:14:1b:6e:84:0a:23:48:eb:7c:ec:f7:e0:
3c:05:f6:25:36:1c:53:56:a0:ac:0c:17:76:4d:6e:
23:43:24:76:ae:e9:44:f1:2a:9d:59:bd:83:98:00:
fb:97:f2:52:6c:e2:91:75:65:2a:a9:18:f3:c0:b7:
46:f2:77:32:ab:2f:b2:97:76:6e:67:b7:3b:21:7b:
c0:0d:90:37:33:3f:1b:2c:ca:78:43:94:cc:86:2a:
f8:b2:c8:36:df:34:89:ea:d6:87:fc:2d:e1:f0:1e:
1d:b0:c3:cd:cb:69:3c:1c:e5:84:a4:20:04:32:db:
7c:eb:bd:26:cc:9e:6b:8e:ec:af:0a:fb:2f:3f:19:
19:f7:16:b2:37:51:9d:2f:19:11:99:a0:c1:e2:bf:
1f:0f:a2:33:db:45:73:2f:95:35:d2:62:81:4c:54:
cc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:55:72:2F:A3:DD:04:36:D3:B1:14:B4:18:EA:BD:E7:DF:A7:D5:B0
X509v3 Authority Key Identifier:
keyid:C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e3:ea:b1:1d:5d:06:c2:93:4c:68:06:8c:fb:56:9b:0f:43:
29:0e:67:e4:4a:e2:19:78:d2:f9:b1:d7:fc:35:6c:14:0e:27:
9c:8b:d4:03:81:6a:77:72:f1:15:3c:ea:50:f3:78:fb:52:35:
e5:42:5e:be:5a:c4:f1:d6:6b:29:48:49:e3:10:19:6a:58:65:
b9:e6:58:db:63:3d:c1:69:f4:ad:47:4a:e2:5e:72:cd:a6:49:
ac:4a:39:1a:47:d7:3c:1e:83:bc:d1:d4:1b:75:b1:f1:01:2f:
b8:b6:fc:02:7d:fa:4d:13:3f:2c:19:a1:f2:8c:68:9e:fe:c6:
4f:7f:fc:60:86:79:b0:e5:80:86:65:31:ad:1d:57:84:bf:85:
49:63:a4:32:0f:25:a9:09:b8:cb:62:68:52:5a:d0:74:99:c0:
30:51:c2:34:84:d8:f8:bd:db:b9:61:cf:8c:ce:b9:ae:47:7c:
b7:3d:9b:c0:a8:b4:5b:c0:66:5c:20:8c:76:3e:41:ef:b8:36:
2b:d3:ea:cd:87:ea:14:12:db:03:78:a4:8f:a6:55:1a:ec:8b:
97:32:e9:31:19:7a:aa:8c:d3:25:37:53:93:8f:a6:bd:a5:a8:
4a:0a:5a:d3:c8:09:c9:42:1b:88:19:3f:79:ba:b1:26:ee:d6:
7f:aa:c5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:18:32 2025 by rpki-client