Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
File: wZ91slk8orGwpf0MVAFd4wbEfuY.mft (raw, json)
Hash identifier: wVO+hU27+zMUKpF1I4cUMmRbJthCzNMp+Bnur7a/foA=
Subject key identifier: B8:16:36:4F:41:0D:45:26:B9:08:F3:BC:60:B8:9F:04:C8:FD:C8:A8
Authority key identifier: C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
Certificate issuer: /CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Certificate serial: 019A221B8CEBF92C370534FCC171B6FB050C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
Manifest number: 16FA
Signing time: Sun 26 Oct 2025 20:00:22 +0000
Manifest this update: Sun 26 Oct 2025 20:00:22 +0000
Manifest next update: Mon 27 Oct 2025 20:00:22 +0000
Files and hashes: 1: NcyIXNvoa22SJL0FsYyeOTgc_BE.roa (hash: I7SWTbgf+E38lSjzpIc20ooNKJL8yjb7efp//cF2mds=)
2: wZ91slk8orGwpf0MVAFd4wbEfuY.crl (hash: h8BP8393u0kyXBPiWy8naACgJBeO+QkqvflPjpq14/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:8c:eb:f9:2c:37:05:34:fc:c1:71:b6:fb:05:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Validity
Not Before: Oct 26 20:00:22 2025 GMT
Not After : Oct 27 20:00:22 2025 GMT
Subject: CN=b816364f410d4526b908f3bc60b89f04c8fdc8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:83:76:95:6f:db:89:53:e8:e7:b5:d0:44:
39:90:19:9d:6f:01:96:48:ac:8f:66:36:49:a6:df:
46:5e:1b:7e:fc:25:dc:94:9b:bb:94:5b:1b:96:80:
e6:7f:2c:5c:84:3c:7e:9d:3f:8a:10:e9:92:bd:7a:
e3:a0:4c:29:46:cc:95:bb:91:fe:a9:f6:40:e9:f4:
dd:fe:1c:60:dc:9f:56:18:b1:88:5d:ac:0a:68:21:
19:92:59:92:bb:7a:bb:05:8e:16:74:65:80:d5:89:
8a:3b:93:e7:49:17:77:e6:0e:68:ba:e7:aa:15:b2:
d6:0f:3f:a1:f8:d1:ac:a6:d0:5d:e9:29:dc:d5:1b:
9d:eb:a9:db:90:53:34:fd:f5:8f:72:96:d2:e5:7e:
5c:28:0a:33:8c:e7:5f:a9:63:47:59:be:d9:9f:fa:
57:66:c5:91:fd:0f:36:83:d3:73:2c:80:8b:bf:c2:
01:08:7f:a4:db:3d:6b:58:29:8c:a9:35:f4:d7:66:
fb:55:08:e4:15:bc:61:20:a6:58:42:62:5a:35:4d:
e5:53:86:cd:8e:ce:19:70:d4:23:6f:5c:ae:d3:71:
79:44:97:25:5f:2a:40:b5:14:12:bb:3b:f4:76:b2:
70:f4:36:09:16:c3:85:4a:a1:f9:c5:1f:55:6f:28:
01:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:16:36:4F:41:0D:45:26:B9:08:F3:BC:60:B8:9F:04:C8:FD:C8:A8
X509v3 Authority Key Identifier:
keyid:C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c0:1b:36:b2:1a:fb:ae:38:5c:9f:24:4e:dd:e9:9f:0c:aa:
f7:c1:93:a8:96:fe:32:ff:f4:2d:73:2b:89:3e:fa:a1:6a:59:
ef:db:da:b4:4a:50:fb:34:ca:6e:6b:65:ec:b9:57:1f:2f:4b:
af:53:41:e3:e6:5e:d4:c3:d0:18:0c:99:d5:13:ff:8b:25:ae:
e1:fe:07:b3:4b:ff:f2:46:be:79:4a:0d:4b:f2:3a:69:24:bd:
91:f1:2c:3a:cf:1d:2e:8d:61:f9:bc:44:74:b5:82:0c:18:44:
b0:51:46:07:89:30:b9:88:31:ee:0c:20:48:38:fc:6a:ac:e6:
72:8e:7d:ca:94:b0:d1:9b:b2:70:dc:70:0e:a5:6c:59:07:f9:
6a:cf:84:bd:7d:98:f0:13:76:73:58:3e:44:5e:c2:27:9c:67:
64:c0:3e:08:7c:18:c3:73:ac:bc:88:1e:8c:22:b1:09:5b:71:
e6:c7:0c:d8:14:11:ba:32:7e:cf:f1:e2:ff:f9:b1:d2:82:63:
20:f6:6c:f9:ee:d4:22:3b:8d:39:11:5e:47:ac:22:94:b7:37:
af:d8:88:5b:c0:40:a2:a5:59:36:a7:f9:b0:b5:1c:ce:d0:64:
f6:e8:25:c6:d6:b8:61:67:ed:f4:da:ef:cb:b2:6d:23:67:b3:
b7:0e:3b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:40:27 2025 by rpki-client