Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
File: wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft (raw, json)
Hash identifier: 8TzUuWhSVe8ILEcKanPcG5Jkdle8JK7w9UKXDwAjezw=
Subject key identifier: 8A:48:F6:BD:E4:F7:F2:FA:39:21:AE:6F:65:67:B0:29:0E:A2:6A:16
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019A1F1AD61C07FB441956CEBDC0A377FB97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
Manifest number: 0B91
Signing time: Sun 26 Oct 2025 06:00:43 +0000
Manifest this update: Sun 26 Oct 2025 06:00:43 +0000
Manifest next update: Mon 27 Oct 2025 06:00:43 +0000
Files and hashes: 1: ICJFcNTwvBoTxR73h6RFC09rjcE.roa (hash: xTLqPPxBhdwsAxy9x/9cuJE08DZBHQ351Kx0d+iQE1E=)
2: MyqYBnhuQWC6jBgr6LglN2EYGOA.roa (hash: Di9sEIDs+wFzdjcM3rM7YUWhcIoWp5vrG4QyfmG810k=)
3: XrIe3RxS0PfS1KQwk38a9UzdLbU.roa (hash: TAdXiNpnMI8M4W6FRb8OCRV5yipTVzRnXpEPH/f9GFs=)
4: eM9eBjal4_y1POkPGbCQnwiZoSY.roa (hash: K0YjjeAMEyPylhZxZo/IupUyAhS45lKcJpo4UDpKlMI=)
5: sxZhzxshG4iLVLbCSoDb6rUQtZY.roa (hash: R1ZlZu84C6XGwKU+59ocGLP/4NsYVwyR2vdR/42i2m0=)
6: te98bJGGUvJI2dvVEFniebRE2-Q.roa (hash: YFZNKLPi4G/NTA6BGaRrsOjmLUpnVxIljNwYkPRZo1o=)
7: vMfdW02jbLqHp-27brKBsBhbgHY.roa (hash: oHK3CDonAtcVu8dAAlZMcFQZnOMNxTDFalDW/2pvfts=)
8: wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl (hash: JtpzZUxwSDwK+iNxxUhJpOQrZLnyeN15V2XdU+IRqRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1a:d6:1c:07:fb:44:19:56:ce:bd:c0:a3:77:fb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Oct 26 06:00:43 2025 GMT
Not After : Oct 27 06:00:43 2025 GMT
Subject: CN=8a48f6bde4f7f2fa3921ae6f6567b0290ea26a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:91:9b:a4:59:41:6f:27:ae:ad:94:ec:53:
dd:2c:f9:fe:16:6c:74:06:ab:a4:ca:c3:7c:9b:39:
c4:f0:e7:09:60:10:d3:a8:93:30:57:b4:51:78:70:
3b:20:32:21:e2:0d:4d:c8:87:4d:6a:8a:8f:c3:eb:
11:f8:74:bb:98:70:90:91:c1:d8:00:2a:f8:b8:0e:
79:f8:93:78:bb:c2:aa:b6:f6:4a:b4:dc:fc:94:de:
7a:51:0e:d2:9d:19:52:fc:1b:2c:a2:e9:28:cb:eb:
a9:89:d8:35:4d:10:f5:16:ac:e1:b1:b5:1a:de:02:
43:01:f6:25:b3:3e:25:c4:bd:31:c9:c6:e6:7b:fa:
64:13:c8:5d:52:7f:bb:4a:f4:9f:f4:82:2d:bf:7a:
43:c7:dd:d3:e6:2b:c8:a8:f5:9f:9d:a4:3c:31:4f:
d1:c4:d9:ce:0e:67:3f:d5:1e:68:40:9d:10:78:96:
fa:95:d4:82:c7:51:0f:b7:64:a5:5d:5b:ff:93:21:
8b:83:9f:87:b7:86:68:be:f2:e5:70:b2:2b:7e:59:
b5:8f:4c:31:c0:1a:ec:01:20:5c:31:56:ab:59:93:
4e:0c:0c:9a:88:57:c6:9f:3f:30:f2:19:09:c2:e8:
51:3a:ef:cc:00:b6:f5:cd:e0:18:f0:b9:26:24:79:
38:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:48:F6:BD:E4:F7:F2:FA:39:21:AE:6F:65:67:B0:29:0E:A2:6A:16
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:88:38:78:a0:9b:5a:a5:2e:47:51:14:6b:d3:33:4d:28:5e:
23:45:92:cd:b6:23:56:e0:37:1a:0a:7f:bd:0c:2f:a5:be:79:
cd:2d:ac:4a:79:00:8e:20:5b:8c:0c:18:da:41:21:78:6b:c8:
03:d1:6c:6c:df:1d:97:9e:be:8d:48:0d:7d:71:45:e3:05:70:
e7:13:24:da:21:0f:a4:8c:09:f7:94:f0:93:46:11:2f:d0:dc:
11:43:3b:3b:df:d0:d2:29:e2:8c:14:3d:a0:22:bd:6b:7f:ae:
29:7a:b5:4e:d6:3f:a4:c5:12:46:13:7d:cf:0f:f3:cd:64:27:
56:6a:cd:aa:45:4a:87:55:b8:f7:8c:15:d2:5a:d3:03:b1:27:
2f:2e:43:d2:a7:f0:bf:87:ff:f5:0f:d3:6b:91:bd:df:1a:66:
2e:e0:5c:b2:bd:b5:15:7d:b6:82:3b:2b:e6:61:e2:21:02:d0:
4a:9f:a8:24:18:00:2f:a6:bb:eb:df:90:d3:b7:74:01:f3:30:
d1:06:fb:34:3a:08:16:3b:32:c8:a7:01:fe:b4:66:e4:78:2f:
c1:31:48:f6:09:d1:d3:fe:0e:a6:3a:5d:75:c8:9d:e1:eb:aa:
88:dd:1d:4a:d9:12:97:8c:da:7b:e6:34:06:c1:55:a1:1b:0b:
e7:9a:b0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:31:14 2025 by rpki-client