Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
File: wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json)
Hash identifier: X3Bbc9ReslHRFj3KB35ZcRNDnQr9A1UP4HcOtmTWw7I=
Subject key identifier: 75:B6:80:10:37:33:45:CF:B5:E5:BC:78:F5:18:22:70:E8:4C:1B:FA
Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Certificate serial: 019A202D33037C66231031158A711DA9396B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
Manifest number: 04DB
Signing time: Sun 26 Oct 2025 11:00:24 +0000
Manifest this update: Sun 26 Oct 2025 11:00:24 +0000
Manifest next update: Mon 27 Oct 2025 11:00:24 +0000
Files and hashes: 1: nvT_HNaheF7AuMYSBVzSYd3DVGE.roa (hash: f440eLAYfJKuxJN3bKdcZpOgumvQKi1Mg+JrUe7gMQo=)
2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: h3M9MmcjfrAR9Pm+a461GO8tuHtE+G5PQ3y041VBpIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:33:03:7c:66:23:10:31:15:8a:71:1d:a9:39:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Validity
Not Before: Oct 26 11:00:24 2025 GMT
Not After : Oct 27 11:00:24 2025 GMT
Subject: CN=75b68010373345cfb5e5bc78f5182270e84c1bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:17:6c:1f:93:12:a2:a0:e8:43:22:e8:0e:b0:
7a:f4:ee:3f:f5:74:83:41:3a:f2:ad:dd:57:53:ea:
3a:e6:05:6b:4d:2b:9a:5c:63:52:09:28:72:db:b7:
54:4c:e1:34:01:a9:e7:c5:62:3b:b9:e5:05:5c:a2:
d2:85:38:83:73:51:ef:0a:72:22:00:70:b0:b4:df:
6e:8c:6b:ea:4a:1b:32:02:84:cc:db:e6:4e:24:3a:
11:b4:95:f0:53:19:69:41:6c:56:1f:a4:bf:e3:48:
9e:e5:55:32:61:ce:31:95:ec:ac:93:86:46:a3:6b:
21:6b:f0:79:ef:74:42:88:31:9d:89:a0:41:a7:f3:
af:c1:69:f1:e4:3b:0b:5a:ce:f2:ed:1c:08:87:13:
b1:8b:d2:47:54:fa:7d:4b:47:cc:47:bf:d7:38:87:
e4:30:a4:0f:29:7d:30:da:cd:80:62:c6:77:7a:62:
8e:b3:1e:7e:5c:87:56:b2:36:42:52:8c:ff:29:02:
1b:0f:46:e9:db:72:f2:3d:02:dd:3b:45:c4:d8:ae:
4f:85:fd:56:63:a9:f4:ac:ea:89:7b:c2:ae:3e:32:
97:c6:39:b5:1d:a7:09:7d:40:b3:28:9c:17:32:6d:
8c:40:2b:65:7f:d7:ca:21:9d:38:74:da:c1:6e:c9:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B6:80:10:37:33:45:CF:B5:E5:BC:78:F5:18:22:70:E8:4C:1B:FA
X509v3 Authority Key Identifier:
keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c2:3e:c5:3d:0b:e3:28:fb:c2:66:f4:a0:51:ea:09:1d:57:
80:94:6f:57:f6:64:6b:f7:68:a0:54:57:df:88:66:ea:47:3d:
44:9f:26:a3:06:d5:f9:f6:b4:44:8d:fd:3f:af:c8:d6:02:02:
76:82:d7:6c:25:5f:8d:d5:ed:03:ca:43:7e:ad:29:5f:f9:94:
70:ed:7b:5f:fb:da:6f:7e:0e:6e:72:34:b0:4e:8e:f0:fc:c5:
e1:e3:49:c1:94:6b:64:4a:bc:82:83:da:d9:bb:78:b1:de:c6:
44:9a:77:6b:c4:dc:f7:5f:b7:f4:fa:79:59:ac:54:5b:94:55:
02:49:a7:3f:7d:df:b3:3c:a6:be:97:d4:e4:a3:41:fe:65:02:
49:26:76:44:fe:6f:49:90:ac:42:d8:95:14:87:cc:02:e7:7f:
4b:fe:8d:f4:10:9d:64:42:6f:77:22:71:1e:63:3e:95:a5:3f:
68:81:b3:b8:8b:26:a6:fb:5a:ea:0c:b8:34:4e:86:4a:35:9a:
56:73:78:17:82:2b:86:90:af:ea:0e:5e:a4:5f:a4:68:23:7d:
d3:0b:e2:9d:19:e2:9f:6a:fa:7e:01:91:fe:b6:9e:af:f2:b2:
17:78:c2:e5:2d:9e:30:fc:67:18:91:44:e3:17:00:ad:f7:85:
93:81:65:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:49 2025 by rpki-client