Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
File: wXPRwALuqv2ht1iN1WIcTm_Jn64.mft (raw, json)
Hash identifier: 1m9Py69/0DACfmVd1KJtxv7F5LeF+lMUu/QE2SUOoik=
Subject key identifier: 6A:B8:F4:A2:6F:8C:15:DD:0B:E7:05:8B:5E:29:37:BC:16:97:F2:E5
Authority key identifier: C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE
Certificate issuer: /CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
Certificate serial: 019A24788D0E7A834179B258928D01E6BFAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
Manifest number: 05BB
Signing time: Mon 27 Oct 2025 07:01:11 +0000
Manifest this update: Mon 27 Oct 2025 07:01:11 +0000
Manifest next update: Tue 28 Oct 2025 07:01:11 +0000
Files and hashes: 1: JVqwz5mxYEMKGOHUiJ_GpSZnGN0.roa (hash: h8BGg/oG3iccU6NMytqMgx4YDS4KmCfVV7fVMEeYu2Y=)
2: wXPRwALuqv2ht1iN1WIcTm_Jn64.crl (hash: 1I9UlXLJVsjfXJgf4LM07UHOzuNj/lDS1o+GxIM84BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:8d:0e:7a:83:41:79:b2:58:92:8d:01:e6:bf:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
Validity
Not Before: Oct 27 07:01:11 2025 GMT
Not After : Oct 28 07:01:11 2025 GMT
Subject: CN=6ab8f4a26f8c15dd0be7058b5e2937bc1697f2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:52:cd:8b:d3:86:b2:aa:91:a5:5c:2c:fe:25:
23:d6:b5:72:2c:55:73:bf:49:5f:6d:d8:9b:a0:a1:
70:55:0d:c5:7f:eb:c4:8a:8e:53:64:01:c2:9d:53:
6a:6e:fa:01:b2:a1:82:fb:a6:b6:f3:09:08:f8:85:
37:f7:dc:e2:02:56:ec:c0:fd:bf:ae:ce:6e:bd:c3:
c3:99:aa:fa:64:a0:0d:c8:21:79:63:a0:29:68:37:
3d:3e:de:68:48:e9:0e:fa:f9:4b:15:86:e1:fa:a6:
9e:ce:02:6e:26:7a:69:9c:78:88:b4:36:a2:05:3e:
79:e4:07:db:13:e4:bc:26:bb:6d:48:3d:7b:5f:4f:
cf:15:2a:02:1b:67:f0:82:61:05:6a:59:b5:be:43:
0d:a2:f9:51:13:16:a4:74:3d:5d:4c:a2:50:37:9e:
a4:cb:28:80:9f:f0:eb:58:d4:d1:7d:b9:a2:66:83:
c2:85:04:b7:7e:fb:1c:26:f7:5f:2b:e4:fb:98:91:
6d:df:7a:72:6b:25:66:73:4b:f1:eb:78:07:bb:cb:
ed:77:ba:49:e7:9a:5e:3d:29:03:b6:76:49:f2:88:
6e:b8:fd:d7:d8:b1:4f:d0:e7:19:14:e4:30:0a:0a:
93:e9:ae:53:c4:01:24:ca:a1:88:00:96:20:0f:6b:
81:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B8:F4:A2:6F:8C:15:DD:0B:E7:05:8B:5E:29:37:BC:16:97:F2:E5
X509v3 Authority Key Identifier:
keyid:C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e7:0f:89:3d:5c:f2:6e:41:60:93:c6:e2:98:87:1d:e7:cf:
09:92:eb:33:9c:9d:e8:8a:31:02:46:d9:1f:b0:4e:60:05:42:
ae:be:fa:d5:c7:27:ac:b6:a1:2f:37:98:7c:90:e6:d8:9d:9e:
8b:2d:64:b6:21:6c:56:02:31:f7:b6:13:01:b1:78:24:a6:26:
60:1f:4a:2b:73:bd:e1:b9:fd:fe:63:6f:cf:c8:d1:a9:bd:69:
68:0f:98:6b:8d:89:ba:85:fc:ee:2f:68:7f:0d:b2:f6:ad:08:
c9:4f:09:54:ec:6c:03:ed:9d:27:f5:ca:f4:dd:41:11:22:19:
13:dd:f7:30:3b:0a:a3:cd:b4:f3:16:e8:bc:19:09:65:43:ff:
68:f8:77:eb:cb:8a:b4:f7:2a:3c:7c:4f:7a:a8:7a:06:e3:47:
a6:3f:fc:ce:fb:63:dc:1a:f7:ba:c9:39:64:1f:e8:ad:d9:6f:
ed:5c:a6:ad:6e:48:f7:dc:ce:4c:96:a6:b3:fc:0c:0b:84:0e:
89:6f:29:7b:bd:97:0e:96:aa:ca:c6:aa:fa:12:11:e9:30:28:
24:48:d1:62:62:4e:a9:08:2f:0f:4d:75:ee:28:65:8e:92:ed:
95:7a:22:a0:d0:38:93:a1:9a:96:d5:02:8c:9a:79:5f:c1:38:
89:fc:29:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:15:48 2025 by rpki-client