Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File: wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier: fHNTIoor+syBfjEokv3azgJ/+ffX9O6p2P1odC3j4AM=
Subject key identifier: 70:83:69:38:0C:2D:C4:59:77:6A:2A:79:DC:34:00:28:4D:07:E2:BA
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer: /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial: 019A7112FBA331D6AE1F4B69991360E0BB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:01:00 +0000
Manifest this update: Tue 11 Nov 2025 04:01:00 +0000
Manifest next update: Wed 12 Nov 2025 04:01:00 +0000
Files and hashes: 1: Wxr7kgALDgcsOOCQfZoACHYOwbQ.roa (hash: B9f7m4dPaZeRMrrY3iGXe7xjmu9+7nX6lw2kW7YcneQ=)
2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: E//IEbj/xTrSS7zsI65YIMctPKa1c1fhJ9ZLaRetU9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:fb:a3:31:d6:ae:1f:4b:69:99:13:60:e0:bb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Validity
Not Before: Nov 11 04:01:00 2025 GMT
Not After : Nov 12 04:01:00 2025 GMT
Subject: CN=708369380c2dc459776a2a79dc3400284d07e2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:5d:c8:a2:ec:83:76:fe:a6:f1:8d:30:a6:
77:b7:7f:05:05:e3:79:0c:79:ad:e7:48:e9:a5:a7:
3c:74:f8:06:f7:3d:40:11:4f:ed:0b:b2:60:f0:cc:
11:5f:4a:3e:e8:7a:4e:3d:f2:39:90:0a:25:82:53:
0e:cc:04:5e:d9:75:f3:4c:86:04:06:65:55:12:21:
e9:62:c5:d7:cc:e3:01:1e:30:4f:6b:7b:6e:50:e6:
b7:eb:e3:67:5f:8d:cb:02:6a:44:a4:40:fa:c9:84:
51:13:b6:0f:17:13:57:a3:73:b3:d3:f9:c3:a0:05:
89:f0:49:07:b2:08:bc:98:fa:14:69:5b:81:d7:b0:
ed:d0:9e:18:5a:23:95:68:35:87:f9:e4:02:11:f6:
29:2c:a6:8f:69:b2:6a:c2:c4:ab:50:c9:9f:61:86:
11:d3:53:bc:b1:cf:9c:4d:a8:39:a0:77:e6:a3:70:
2f:3f:53:7a:f8:56:35:fb:c9:0d:95:2e:3e:74:3b:
30:0b:f6:53:97:ea:c8:62:9f:81:8e:d8:bf:2a:6b:
4a:8a:c4:47:e1:69:ef:ca:34:60:1a:ed:81:70:ef:
78:99:48:d2:78:0d:9c:b7:44:21:9b:a6:3c:4c:d4:
33:f6:87:75:ef:31:8b:56:7e:c2:f5:4d:96:c3:56:
9b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:83:69:38:0C:2D:C4:59:77:6A:2A:79:DC:34:00:28:4D:07:E2:BA
X509v3 Authority Key Identifier:
keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2b:bf:1a:5f:85:93:bd:87:92:f1:2d:44:05:57:45:fb:b6:
b6:45:79:98:a5:0d:db:04:fa:53:65:23:93:d6:c0:8f:51:ab:
78:73:38:cf:97:33:09:93:50:ca:09:b7:93:13:44:db:38:d3:
da:5b:03:4c:5b:41:0b:0c:63:ae:43:a3:78:cf:01:d0:eb:25:
59:68:92:df:88:b0:b4:f0:5c:c6:b8:b3:cf:c4:a5:55:33:f1:
eb:22:5e:22:58:10:7f:21:4e:81:31:51:38:db:16:4b:e4:f4:
e0:fd:93:29:65:c5:f0:3b:78:80:b8:ec:49:b4:e5:d1:01:b2:
cf:4b:c7:5c:b1:6c:74:2f:0d:15:17:df:71:a8:a1:4d:30:1d:
f4:16:83:b5:fa:22:21:7e:b0:e3:ca:cf:87:5a:47:3b:91:b2:
2f:8f:18:20:84:ab:d0:63:79:cd:8a:ed:1d:4a:5d:db:1e:a0:
17:82:82:bc:a4:4f:24:3d:46:6f:cc:6d:77:b4:fa:23:ed:fc:
69:d9:e0:1b:dd:29:81:d0:d7:d2:b6:fe:f1:13:a2:2e:d1:8b:
ce:fa:3c:ca:71:c8:2f:4a:81:eb:bf:18:13:a5:79:2b:02:5e:
3a:82:25:01:52:4e:a5:df:d9:cd:e6:3d:09:b7:20:c5:02:d5:
9a:5d:bf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:52 2025 by rpki-client