Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier: WBOhOUb9B8G6xLKoyutNxYP7lTd2ovJ5VE9iXOWlJXo=
Subject key identifier: 9E:E7:3D:67:9A:88:BD:BD:46:21:F3:33:96:EC:7D:E0:D6:D6:51:A5
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial: 019A1AD059F4EDE906BC2AC4C0A3E4409990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number: 069D
Signing time: Sat 25 Oct 2025 10:00:53 +0000
Manifest this update: Sat 25 Oct 2025 10:00:53 +0000
Manifest next update: Sun 26 Oct 2025 10:00:53 +0000
Files and hashes: 1: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: WdLIBr1He2IfH+KojHPn2CwhA8MYVsVYVgxpddEI1Tg=)
2: s8WA6XbVKkNfKDWyIPbKv2MkdEI.roa (hash: cSlX1MSZ3bjIwkd1nKlEU1sHjeRq7ybsweqaQYPJx58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d0:59:f4:ed:e9:06:bc:2a:c4:c0:a3:e4:40:99:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Validity
Not Before: Oct 25 10:00:53 2025 GMT
Not After : Oct 26 10:00:53 2025 GMT
Subject: CN=9ee73d679a88bdbd4621f33396ec7de0d6d651a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:aa:c1:84:eb:fa:0b:f9:62:a5:01:d6:06:
bb:9d:33:64:3d:99:39:35:ad:e5:19:12:ea:92:4f:
7d:ad:7d:6e:e6:da:8c:b1:d1:17:28:a5:56:df:c7:
f6:a5:8d:07:97:96:b8:6b:a9:32:ad:f0:79:42:6b:
54:7d:12:b3:ba:37:c0:49:16:c6:89:72:9e:4b:3b:
54:24:82:6f:8b:67:16:93:23:bc:20:de:45:8a:05:
52:cf:ec:5f:92:69:ec:fc:ac:9f:a3:b7:98:cb:a9:
3d:b0:7f:ef:8d:24:a0:03:7e:c2:6b:bc:0a:7b:fd:
56:02:fe:c9:32:19:46:83:54:41:e1:27:1a:21:3d:
d5:d6:c3:a7:24:8b:3d:e9:e9:f0:80:53:5b:51:1c:
eb:d5:69:11:70:f6:87:76:ad:41:a7:fd:87:1a:bd:
e4:54:e3:2a:78:00:23:d3:45:a4:e3:af:a7:f6:cc:
30:7e:e6:30:08:6d:37:b8:7b:f6:93:3e:dd:74:b8:
50:79:e7:b4:3a:f9:12:97:68:dc:be:1c:e2:30:a8:
0c:61:86:68:71:14:cf:00:cf:c9:f1:dc:18:62:23:
64:50:53:74:f6:f0:68:10:52:72:c4:e2:c5:d8:4c:
43:d6:a4:52:09:0a:49:78:22:3b:dc:73:80:89:4f:
6b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E7:3D:67:9A:88:BD:BD:46:21:F3:33:96:EC:7D:E0:D6:D6:51:A5
X509v3 Authority Key Identifier:
keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8d:28:ff:95:2b:95:ef:50:cc:b5:54:f4:f1:58:0b:8d:51:
82:5a:d4:32:14:83:e9:10:e4:d4:3b:95:17:8d:a3:57:09:fe:
52:c5:4d:f7:37:9d:4a:ee:8e:24:b5:96:b6:23:f0:80:87:b0:
3f:ca:f2:c7:5a:87:6e:44:0b:b9:40:6b:0b:fd:a6:63:bf:8d:
1e:7b:ac:5e:08:3e:14:fb:7d:4c:d2:37:de:44:13:20:89:cf:
c8:e3:20:9d:64:6e:e9:7d:92:e6:9d:52:16:be:a5:05:78:5e:
4a:78:08:95:5e:94:4c:a4:fd:59:ff:20:c0:2d:bd:a6:fb:7c:
74:51:7d:83:fb:1f:a2:80:01:d2:a1:b9:8f:86:3f:89:1e:a8:
e5:b9:f1:b9:b2:8b:25:6f:29:7c:8f:73:3f:c6:80:b5:b5:7b:
f0:c3:74:ef:87:7c:35:ab:bb:4c:83:00:66:7c:33:c7:0f:cb:
81:76:b2:e6:47:6c:ae:8e:30:0b:f7:f2:43:69:0d:cd:d1:e0:
60:bb:40:d8:74:95:7c:7a:7e:95:e0:16:d9:b1:7a:71:77:b9:
16:27:0a:7c:32:82:96:9d:33:ac:99:dd:62:04:07:97:ed:6d:
0b:e5:3e:ed:57:d5:d5:98:61:de:7c:1e:7c:9f:f3:9c:60:2a:
c1:9b:72:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 15:41:40 2025 by rpki-client