Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
File: wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft (raw, json)
Hash identifier: 8/vS2jmBIfdYRa62lwtMeHFNa6GN/cEVRAGUgvRJmoY=
Subject key identifier: 96:BE:7E:A2:A1:52:F0:00:7E:94:40:B2:A0:73:91:3E:98:68:8B:75
Authority key identifier: C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
Certificate issuer: /CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Certificate serial: 019A1AD0DAC555A560FA09341AD7A2DBD93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
Manifest number: 16F4
Signing time: Sat 25 Oct 2025 10:01:26 +0000
Manifest this update: Sat 25 Oct 2025 10:01:26 +0000
Manifest next update: Sun 26 Oct 2025 10:01:26 +0000
Files and hashes: 1: CMFtvIRrP8F50u4CVRtzzHXRYto.roa (hash: zBitZQVL6CHlOMMwjKpEh8Pxjt6+cJBsedg4te+yLPA=)
2: wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl (hash: huXSHzoJ+8jSoQtFGPUjB+ieJ6/XTaxoyJLUhzCMqbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d0:da:c5:55:a5:60:fa:09:34:1a:d7:a2:db:d9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Validity
Not Before: Oct 25 10:01:26 2025 GMT
Not After : Oct 26 10:01:26 2025 GMT
Subject: CN=96be7ea2a152f0007e9440b2a073913e98688b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:e1:77:e7:34:48:12:d3:77:05:54:7f:34:
14:6a:4d:ed:f8:96:27:93:6e:3c:0e:40:ff:94:03:
21:f7:17:6c:84:20:28:67:bd:60:52:44:eb:ab:27:
b9:0e:5e:bb:bf:b6:af:31:aa:41:0c:0d:fb:8b:a4:
07:8e:82:67:b3:66:e3:ce:4f:1e:76:cf:a8:4a:1d:
0b:f8:e0:bb:c6:f1:b5:24:08:0e:f1:fe:d2:27:97:
58:0b:0a:ff:f5:b1:32:b3:25:63:e0:e8:04:66:66:
b4:1c:05:86:63:8d:51:a8:91:0e:37:fa:38:5b:97:
f0:e1:e7:85:9f:d8:f6:1f:21:29:d2:6f:38:27:54:
fd:23:0f:42:97:ef:ec:02:29:7e:6f:bb:09:96:83:
2c:24:ce:8f:9a:ad:f7:b8:b8:56:cc:0d:c9:06:9f:
17:db:7c:7d:13:cb:a5:98:cb:8e:71:2b:81:9a:8f:
75:70:88:b5:62:36:4d:11:9c:84:8e:a9:6d:a7:02:
85:2a:c9:92:b0:54:df:d5:db:89:0d:53:98:fc:f8:
8c:1e:b8:fe:b1:be:ae:3d:ca:ba:b1:f3:67:0a:fa:
63:fa:bb:64:e6:b3:a0:2e:b1:67:30:ee:a9:a2:2c:
64:8e:ef:e6:0d:eb:04:75:01:1b:d2:4a:2b:ec:5c:
d8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BE:7E:A2:A1:52:F0:00:7E:94:40:B2:A0:73:91:3E:98:68:8B:75
X509v3 Authority Key Identifier:
keyid:C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:91:3a:43:69:9c:80:aa:ef:4b:fa:8a:8d:cf:4b:95:f7:f7:
d0:91:87:52:9b:6f:87:be:d5:5f:4e:67:e0:25:94:0f:05:51:
b6:be:76:5c:0d:34:27:c0:e5:bb:fc:59:67:88:99:2e:6b:4b:
77:ee:be:47:fa:80:1f:c3:4f:83:e2:e3:5b:0b:cc:72:5d:a6:
96:1e:89:da:d5:b3:62:b9:4c:70:8f:40:c0:15:12:80:a9:5c:
98:a5:52:41:62:e7:02:0d:7a:8e:eb:4c:b2:8c:b5:f8:03:ad:
ae:db:97:cc:bb:5d:6c:83:7b:4e:bc:03:d8:89:fd:29:99:52:
2e:14:c5:05:ee:76:27:76:2e:20:11:d7:37:f1:f1:76:e4:c6:
4c:b1:4d:19:a6:ae:d2:19:db:4d:85:70:ce:c1:89:ef:6a:1c:
99:39:98:3a:1d:d8:e7:e6:2a:84:49:56:17:99:0d:a7:f0:7f:
a6:24:7a:63:79:a1:f5:62:ef:9e:88:3f:1f:eb:6c:50:fd:c9:
a0:66:ae:85:03:ef:52:e3:e4:b5:05:dd:0d:ba:9e:db:f2:03:
67:cc:6a:1e:87:f3:fb:e4:e5:bc:96:eb:e8:8b:fc:e5:37:5b:
83:df:3a:bf:28:64:80:8b:3d:37:6f:32:1d:be:cc:13:fd:e4:
c9:aa:1b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:03:12 2025 by rpki-client