Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json)
Hash identifier: M2huSm6GitNHNXTeC3MTLdRxwWKL4BLKbKE+sVp8JaA=
Subject key identifier: BD:35:CD:02:06:76:26:3F:FC:38:8B:84:4C:1A:83:CC:FF:91:69:CF
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial: 019A28C31D04D3EABDBE426809DEA46EAC3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
Manifest number: 16FE
Signing time: Tue 28 Oct 2025 03:01:06 +0000
Manifest this update: Tue 28 Oct 2025 03:01:06 +0000
Manifest next update: Wed 29 Oct 2025 03:01:06 +0000
Files and hashes: 1: 2ckuuQNGelqhfIDU0HMZ3G_jIN4.roa (hash: Ly3hlzB/x5T87M29FpEs5LMZzWEyS3uYaMyLbALjnTU=)
2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: ISXrFzWn7ol0YH8EDMlFQqGRI/JmD8hARHDFBb3HUYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c3:1d:04:d3:ea:bd:be:42:68:09:de:a4:6e:ac:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
Validity
Not Before: Oct 28 03:01:06 2025 GMT
Not After : Oct 29 03:01:06 2025 GMT
Subject: CN=bd35cd020676263ffc388b844c1a83ccff9169cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:0e:ed:28:77:ba:6a:ca:31:71:77:4c:dd:
20:41:d3:63:5e:76:60:14:f2:9f:65:5d:e7:96:a1:
58:49:3b:cd:19:86:da:0a:b7:06:9d:2d:31:6d:30:
91:40:15:53:c3:8e:93:de:0e:9d:4a:06:8d:30:31:
82:04:75:eb:80:aa:d4:97:12:81:28:4c:13:fe:4d:
1c:96:db:d3:2c:89:6a:db:91:af:aa:87:fb:81:4e:
47:88:d2:0f:6a:49:be:bc:7f:7a:0d:4e:6f:9c:eb:
68:20:25:a8:73:63:54:8f:88:2d:d0:7a:40:bf:7a:
83:0e:2b:6c:0e:d5:83:cd:d9:28:3f:a5:88:15:be:
12:74:5a:43:ba:44:0a:bf:83:26:97:c6:dc:b6:c7:
18:55:41:72:d9:66:4c:34:7b:f5:71:90:a9:35:23:
8c:a0:4e:67:57:f1:95:75:7f:49:bd:f2:22:a9:93:
6a:cf:35:80:b7:7f:aa:1d:36:35:9a:fa:2f:ef:c8:
66:8e:f7:e0:ae:1b:2c:03:27:bb:92:cd:33:17:cd:
14:cc:56:e5:6c:31:7d:ba:4f:ca:f5:92:50:bd:7e:
55:c1:5d:47:68:2f:b7:a0:ad:c9:84:f2:ef:2e:4f:
5e:a0:b4:fd:35:13:3e:39:d2:db:8d:d1:d7:bf:6c:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:35:CD:02:06:76:26:3F:FC:38:8B:84:4C:1A:83:CC:FF:91:69:CF
X509v3 Authority Key Identifier:
keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:02:1e:3f:b4:2f:c5:99:44:15:90:2c:b1:ae:88:2c:89:64:
2b:8f:ca:cc:79:82:35:53:06:65:9c:26:a9:4f:2d:f8:28:86:
5b:a8:6b:50:3c:e1:44:cf:29:75:eb:cf:a5:82:f2:fa:5c:0a:
2c:ac:d0:fc:82:34:0a:e4:92:fd:3b:68:9b:95:b9:73:6d:9c:
68:43:62:52:3d:de:31:fe:fb:a5:42:06:61:df:84:b1:62:04:
76:7d:be:e6:02:5f:8b:bc:c6:94:97:b2:37:f7:68:80:a1:33:
35:91:6c:04:00:7b:9b:3b:2a:87:06:68:dc:e2:09:b0:ee:e4:
6a:22:0d:99:05:9c:bd:82:9a:a1:a2:f3:ba:4a:a9:03:bf:96:
27:ee:08:93:9a:70:f5:8f:1c:7c:c8:eb:75:2d:0c:7a:d2:ae:
4c:4e:15:1c:9e:73:7d:65:0d:29:fd:06:c0:92:a3:eb:2d:d0:
f0:f6:6b:1d:b9:df:c0:b0:29:ed:35:46:4b:fe:bf:d0:1b:e1:
08:bb:48:b2:16:b2:0f:a8:7c:35:67:aa:57:f1:19:d9:f5:6f:
ea:4c:27:9c:8d:f2:f4:e5:62:b4:7e:4f:d4:72:05:58:c3:30:
4a:47:01:f1:8d:9e:e0:09:f2:7e:3a:94:cd:19:26:19:7a:d5:
22:7a:38:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:32:36 2025 by rpki-client