Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
File: wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft (raw, json)
Hash identifier: DFaB8Fdb/VSFwATcrZs2a5eSWiBKvjN0J8RPqm7ACX4=
Subject key identifier: 8A:F1:9F:FF:9D:C0:AB:83:65:1E:3D:0E:00:4A:86:21:D0:AE:65:16
Authority key identifier: C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
Certificate issuer: /CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Certificate serial: 01992F35213C0597531629B138380A58E5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
Manifest number: 167A
Signing time: Tue 09 Sep 2025 16:00:35 +0000
Manifest this update: Tue 09 Sep 2025 16:00:35 +0000
Manifest next update: Wed 10 Sep 2025 16:00:35 +0000
Files and hashes: 1: CMFtvIRrP8F50u4CVRtzzHXRYto.roa (hash: zBitZQVL6CHlOMMwjKpEh8Pxjt6+cJBsedg4te+yLPA=)
2: wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl (hash: 4xScjS4cS+C9O0SE1FwBvaINRKbFmmPhmW37t6lsv3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:35:21:3c:05:97:53:16:29:b1:38:38:0a:58:e5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Validity
Not Before: Sep 9 16:00:35 2025 GMT
Not After : Sep 10 16:00:35 2025 GMT
Subject: CN=8af19fff9dc0ab83651e3d0e004a8621d0ae6516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:dd:e9:db:95:18:31:e1:7f:1b:00:43:34:
3a:70:56:03:f2:0d:51:51:ba:12:35:86:cf:7b:81:
32:2e:27:c3:fe:a6:84:3b:5a:67:e7:69:14:e2:85:
75:76:b7:ca:10:87:76:8a:0b:ab:6f:cc:86:d9:5c:
24:9d:3f:75:10:3b:03:03:3b:a3:a8:fd:3a:3a:79:
33:d3:b5:80:76:90:9c:d6:b8:1f:d0:0e:05:a8:44:
73:2e:90:2a:1d:10:93:25:ca:a5:cb:d8:2f:87:1b:
fa:64:4d:d0:73:27:e8:57:87:e4:af:ee:de:2d:34:
97:0d:30:a1:7a:f3:72:fd:47:ba:44:b6:f3:2a:e7:
61:ec:d2:7c:a5:89:3f:ea:ff:8c:7c:de:a3:36:87:
88:b0:c8:68:c4:b8:21:9f:ac:8c:e1:a5:f8:7b:7b:
b1:9a:ed:50:d4:41:59:24:84:77:8e:7f:b0:06:46:
74:e7:f2:9c:df:8e:57:86:fe:08:70:e4:95:b9:17:
bc:75:0f:d3:2e:b7:54:22:bc:cb:83:3f:aa:c6:1c:
40:f5:87:e3:2d:cb:ea:6c:df:2e:61:e0:a4:28:62:
8d:77:a5:2d:41:bd:09:47:54:ec:50:82:75:f6:78:
a9:34:b3:4a:00:ea:8c:98:b6:39:08:9a:f6:22:53:
db:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F1:9F:FF:9D:C0:AB:83:65:1E:3D:0E:00:4A:86:21:D0:AE:65:16
X509v3 Authority Key Identifier:
keyid:C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0a:81:2a:3c:8f:01:98:7b:b3:d3:d9:96:e4:c3:70:3e:e2:
a7:c6:f0:cd:34:91:65:7a:5c:c8:cf:41:4a:9e:c8:16:b4:e0:
8c:19:3c:21:d8:14:dc:98:d8:cb:87:bf:62:22:df:15:b5:ac:
b9:e2:46:88:66:48:96:e4:dc:91:d2:3d:bd:4c:8b:e9:25:3b:
8b:3f:9c:f8:a6:27:16:11:62:17:8a:44:fb:18:8f:ec:aa:e7:
8d:06:77:fc:40:1f:df:43:e9:e4:3a:3b:83:a2:c5:36:86:a6:
23:dd:e6:41:0a:3e:3c:9e:d5:7b:57:69:5d:46:62:09:98:7d:
b8:ac:ae:38:07:2d:6a:9a:30:f6:c3:30:78:ff:e4:26:7e:44:
06:da:a6:e9:3d:ab:2b:19:77:79:29:b8:dc:01:ac:a1:19:d9:
69:01:1c:32:6d:cd:fb:38:17:2a:92:1d:44:88:f9:e6:d9:c3:
8c:d3:4a:84:98:d7:cc:cf:24:97:8e:e8:41:1e:ce:02:b4:79:
e4:ad:ef:1c:1a:e3:72:67:94:5d:85:57:3b:88:3b:37:df:09:
fc:0a:e5:30:c2:98:79:63:ac:c7:6c:bd:6e:53:19:1a:3a:1b:
30:2d:a2:2c:2b:64:fa:23:f6:68:c2:9b:5d:c1:9d:8f:26:b1:
ed:25:06:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 00:47:40 2025 by rpki-client