Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
File: wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft (raw, json)
Hash identifier: 3RnYMrK/PIMPz8hv/cVLW3gglQsF+RasSbimTYkFDtE=
Subject key identifier: 5B:1F:BF:9A:4E:B6:F8:5A:72:BF:FE:CD:8B:F4:14:C8:D0:7C:9D:57
Authority key identifier: C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6
Certificate issuer: /CN=c13f17541732f57abff1294c71b533eb56746fd6
Certificate serial: 019A209BAA90DF1B84B43D3B907C8CCF2A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 13:01:03 +0000
Manifest this update: Sun 26 Oct 2025 13:01:03 +0000
Manifest next update: Mon 27 Oct 2025 13:01:03 +0000
Files and hashes: 1: DljJr8JzJiVrlFsa4a_Y6aDbzLA.roa (hash: h/O87BR6bvL7AJdknAhnONrNppB3GhoL2ZES3kI48+0=)
2: wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl (hash: QeraF1DqFoBk+yU9XC1Hcu7V25vwQM6EyN7MD4G7/fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:aa:90:df:1b:84:b4:3d:3b:90:7c:8c:cf:2a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13f17541732f57abff1294c71b533eb56746fd6
Validity
Not Before: Oct 26 13:01:03 2025 GMT
Not After : Oct 27 13:01:03 2025 GMT
Subject: CN=5b1fbf9a4eb6f85a72bffecd8bf414c8d07c9d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:9f:12:c9:d9:60:e3:22:39:35:9a:33:97:
2c:89:8b:1c:b0:7e:b4:3a:9c:c6:4a:2d:5e:00:ec:
77:6f:3b:d3:bc:55:81:07:27:d6:79:7c:59:87:a9:
02:45:08:5d:9c:6c:45:40:63:4a:c2:4e:44:c6:1c:
fa:fe:a2:6b:9f:99:ec:05:1e:4c:8e:85:75:d5:fe:
cd:f9:4b:a1:ba:b0:35:c9:55:ea:4b:86:7c:f2:fe:
76:e8:69:c5:c2:fd:51:c2:6e:88:10:10:67:48:d2:
dd:4a:ac:d7:b8:5b:e6:a5:aa:00:e6:db:41:5a:11:
2d:dc:2f:03:0f:37:8e:6d:0a:e3:5a:24:35:11:e0:
6a:11:1c:39:0f:cd:77:bb:bc:07:2a:66:b5:37:17:
2c:a3:b0:9f:da:1f:03:82:ea:95:67:02:ce:f7:75:
95:b9:e7:ac:d4:39:52:89:2c:b5:56:7b:14:c3:99:
1f:72:be:4d:97:b7:d4:10:b9:be:bd:7b:ba:c0:b0:
4a:58:46:ce:1d:73:4f:77:1c:48:09:44:06:15:8c:
48:a6:24:26:7e:ea:b2:60:91:f2:ed:25:8c:77:13:
e8:03:7c:fa:3b:e1:65:ee:6b:52:fd:8e:5a:92:2e:
22:8e:7f:6d:89:34:97:65:ba:96:70:65:d7:c9:2e:
17:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1F:BF:9A:4E:B6:F8:5A:72:BF:FE:CD:8B:F4:14:C8:D0:7C:9D:57
X509v3 Authority Key Identifier:
keyid:C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:14:d8:4e:ef:c7:cc:ed:6f:16:36:3a:e8:f7:f7:33:ab:17:
8c:fe:f7:23:59:ba:12:4f:63:18:e7:cb:d2:5a:38:3f:b6:1d:
80:7f:af:00:ad:be:db:98:c1:2d:be:ed:ea:5d:1f:ab:02:b1:
71:20:e1:e0:7a:8f:7b:8a:dc:b7:b6:a6:ec:80:f6:2c:b7:08:
72:61:16:04:57:3c:5c:7a:f5:fc:c9:e1:67:47:42:f4:cc:6d:
72:fb:ce:36:7a:d5:57:79:e3:0c:49:35:0b:54:37:87:bd:24:
00:4d:d2:90:b1:05:53:b5:2c:e0:7e:93:bb:1a:ef:a9:1b:f7:
ce:75:1c:53:ff:8f:da:bb:86:05:fb:27:fa:30:36:40:9e:56:
25:59:b3:34:4c:40:96:80:c5:4b:9c:e7:2f:63:56:1e:19:8c:
ec:f9:99:cd:8e:36:0e:1a:77:ba:d2:c1:16:95:18:ec:2c:ff:
c0:72:c8:37:c1:3f:03:aa:f3:1e:bc:fd:e7:82:91:5b:5f:d4:
6a:5f:19:d6:0b:50:61:0b:93:62:be:dc:f9:af:33:c2:d5:c8:
a5:5c:6c:08:ad:a7:ca:e1:62:8d:08:cf:ff:b7:2f:65:5d:0f:
99:72:0c:8c:52:35:1d:c7:bf:02:a7:cf:aa:34:b0:91:7f:90:
7c:fd:1d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:48:41 2025 by rpki-client