Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File: wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier: LUhGF4B3lCHiJ9rgmTM9hJpH5vCEC69xc+KUfDcVXJI=
Subject key identifier: E8:FE:90:7A:1D:08:87:57:DF:8F:82:4C:5A:E3:DF:CA:1C:41:D0:63
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer: /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial: 019922FAD979278D4C4778237A4F897525F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 07:01:28 +0000
Manifest this update: Sun 07 Sep 2025 07:01:28 +0000
Manifest next update: Mon 08 Sep 2025 07:01:28 +0000
Files and hashes: 1: Wxr7kgALDgcsOOCQfZoACHYOwbQ.roa (hash: B9f7m4dPaZeRMrrY3iGXe7xjmu9+7nX6lw2kW7YcneQ=)
2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: Qo43WohcIIKHEK2M55FQeipUNTaYB9IWb0bWpfCUxcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:d9:79:27:8d:4c:47:78:23:7a:4f:89:75:25:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Validity
Not Before: Sep 7 07:01:28 2025 GMT
Not After : Sep 8 07:01:28 2025 GMT
Subject: CN=e8fe907a1d088757df8f824c5ae3dfca1c41d063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:2a:01:78:dc:b1:e0:5c:99:34:e4:17:1d:
cf:d5:67:38:52:ff:6f:7a:79:93:f5:97:09:1d:5d:
23:08:22:11:71:e1:e1:00:f7:30:a4:2a:03:46:92:
47:7d:9f:23:43:d9:4c:58:82:e7:34:fb:a6:29:ea:
4e:5b:e4:31:ff:1b:19:e9:f6:ec:8c:05:8f:40:88:
dd:53:55:07:78:2d:7d:da:45:90:79:0b:af:ac:04:
f3:07:87:72:b7:d2:e7:27:d8:25:86:16:c9:99:65:
39:f9:37:ba:1a:45:45:83:b3:d6:77:d1:6c:e3:30:
d3:c7:4c:76:59:c4:24:50:d4:ce:e1:fe:d0:84:f7:
a3:d3:29:9d:f8:e5:6f:44:e0:33:dd:5a:5b:f3:7c:
c3:8b:b7:eb:94:d2:34:78:1b:9e:17:43:8e:6c:35:
3d:17:eb:68:61:24:7a:00:35:2e:b1:4c:08:14:20:
f8:c1:99:35:57:da:19:e5:b3:b2:a3:82:27:3d:95:
83:0f:9a:98:5f:c6:20:18:0c:ea:bf:ec:28:9f:f2:
85:42:e5:0f:10:ce:89:f2:d6:eb:5a:ab:59:bf:e2:
68:c2:b9:57:3e:e5:d6:0a:1a:f1:d7:41:35:85:1c:
25:b3:e1:9c:2b:8d:b9:fb:b4:60:70:63:74:56:8d:
b8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FE:90:7A:1D:08:87:57:DF:8F:82:4C:5A:E3:DF:CA:1C:41:D0:63
X509v3 Authority Key Identifier:
keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:49:fc:65:57:58:33:5a:ad:c0:65:52:7f:9b:4c:a6:57:b3:
0d:7c:6d:3d:4c:74:9f:77:91:48:be:c8:2f:fd:d3:7d:43:5c:
a4:5b:3a:6d:49:59:d2:8b:64:41:82:fc:0f:73:e1:76:e5:d8:
cd:75:14:34:21:db:db:85:67:96:9c:66:6f:fc:a6:3f:72:2a:
38:11:0e:ca:5f:c1:d6:ba:69:99:07:df:2e:9b:7f:4f:9a:ae:
8b:ce:ea:ea:af:40:50:12:67:53:71:8c:70:d6:3f:80:72:5d:
0f:58:c8:74:dd:52:dd:99:96:be:76:4f:bf:ab:dc:2f:f1:0e:
96:36:7c:ca:d9:1b:15:5e:a6:14:df:23:0d:6f:89:38:67:c2:
6a:05:4d:55:38:21:c5:58:6a:31:c0:83:b9:48:2f:63:21:98:
22:18:8b:fd:d8:0e:14:90:d5:99:19:89:64:9b:8d:40:9b:8f:
4e:ec:26:3b:15:ec:65:b1:c4:c7:a8:9a:ea:60:e2:4e:7e:54:
85:26:8c:6b:f0:eb:d2:04:6b:14:be:c0:f3:21:07:8a:b0:00:
96:b0:b3:d6:28:69:fc:cc:fc:6e:f8:4b:a7:7b:70:47:6d:2e:
7f:93:c0:04:48:25:6a:24:fe:a1:d3:56:1a:79:63:2f:69:cd:
20:83:13:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:39 2025 by rpki-client