Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
File: wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft (raw, json)
Hash identifier: VpooCBmJaYmVGwBLylGmk2LHgw7IybsaH0YYzCBqk6Q=
Subject key identifier: 14:09:BD:7A:A1:F4:1F:1E:BC:30:6C:ED:E1:2C:D8:3D:D2:91:12:61
Authority key identifier: C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
Certificate issuer: /CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
Certificate serial: 019A288B8AF71DF53707DC4231D2182E3C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
Manifest number: 16FC
Signing time: Tue 28 Oct 2025 02:00:24 +0000
Manifest this update: Tue 28 Oct 2025 02:00:24 +0000
Manifest next update: Wed 29 Oct 2025 02:00:24 +0000
Files and hashes: 1: I0H7qSqQ0AzLSSpiXqiH1EQi7-Q.roa (hash: Jow46MXmNk+mUHCbkELVJdKY8Y06A4U2s/PAO/haQb0=)
2: wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl (hash: sUSjqP57iwpWMSLKCk3vCqxYHJu3grntsrX5WgEhrOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:8b:8a:f7:1d:f5:37:07:dc:42:31:d2:18:2e:3c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
Validity
Not Before: Oct 28 02:00:24 2025 GMT
Not After : Oct 29 02:00:24 2025 GMT
Subject: CN=1409bd7aa1f41f1ebc306cede12cd83dd2911261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:47:b1:65:b1:2d:09:fc:c5:0c:e5:8c:48:
9d:98:9c:c4:c2:d9:13:ca:8d:1e:83:7c:0b:5e:b2:
2e:61:f6:75:93:55:c9:25:84:f9:9b:19:a6:70:a2:
da:45:c3:4e:aa:56:d7:77:a4:43:bc:ac:a9:65:45:
29:ad:b0:2e:e0:ee:a2:49:da:5a:bd:b7:72:2b:60:
f5:1b:96:26:cc:e0:d9:78:38:b9:96:8e:85:d7:f0:
d1:f2:bc:d8:64:14:b3:3c:f0:4e:56:da:e0:8a:75:
d2:76:cd:37:dc:48:31:07:de:a2:ec:1f:cd:86:eb:
ac:7f:70:b2:70:98:cc:88:4a:ad:d1:eb:31:8c:5a:
56:98:5a:9c:f1:5e:73:0d:44:0f:8b:65:76:2e:82:
c5:9a:ad:f5:85:e4:b5:6b:8c:44:cb:3b:4e:95:db:
e0:c7:f9:cf:ab:89:82:e9:24:db:1c:1b:05:8c:5b:
90:a7:7f:0c:9c:8e:ad:6e:1f:d1:ed:f8:82:3e:9a:
3d:e8:19:5e:85:8d:4b:df:48:55:b0:9e:bb:21:ba:
00:43:3a:16:32:2d:49:69:50:a0:bb:58:d4:83:6d:
9f:9d:d8:09:62:f3:8c:2c:5d:be:e6:bd:90:1d:3b:
90:ef:68:4d:a4:a5:b6:c1:33:7d:0a:c1:b0:51:9e:
63:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:09:BD:7A:A1:F4:1F:1E:BC:30:6C:ED:E1:2C:D8:3D:D2:91:12:61
X509v3 Authority Key Identifier:
keyid:C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:63:b4:23:e5:54:c6:13:94:c5:e5:5a:78:2f:28:94:0a:8e:
aa:30:55:4e:b8:60:ec:c2:f2:19:d5:2e:26:45:53:19:24:42:
1f:06:db:24:d7:cf:35:f8:a7:7d:11:ed:c8:c0:fa:ec:ba:9b:
b8:f8:c9:9b:55:53:66:4b:55:9d:ae:62:9b:cc:d8:66:31:9e:
d4:88:27:27:35:9b:bb:42:10:8f:10:af:e9:0f:4c:1f:2c:75:
da:07:3c:c8:01:e7:b1:d2:cf:7b:21:96:29:bf:21:b3:81:3c:
6b:20:4f:7b:8d:13:5d:4e:64:93:50:98:35:cf:fe:6e:ef:a3:
d8:f1:a6:09:ac:b6:a4:fb:02:58:ef:ae:fd:de:e2:0b:30:28:
84:73:00:9c:ab:9d:6f:12:ee:eb:85:77:ff:17:85:ec:23:25:
5b:31:13:59:21:69:db:40:76:09:93:55:40:5e:35:43:f6:d3:
e8:a1:b8:7d:8f:67:a5:99:ca:a3:e1:c7:0e:00:2b:b0:9c:43:
75:d2:df:62:59:e5:f3:33:61:86:64:d3:37:85:74:57:09:8e:
b4:90:b9:70:9e:f7:a3:3f:d2:34:95:0c:8e:9c:8b:12:8d:60:
54:14:5d:6d:a2:db:8b:ef:c0:e7:1a:54:9f:db:fb:99:67:e8:
a1:0f:21:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:09:15 2025 by rpki-client