Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
File: WiHxhbSzhmdV26ABC88QuUqKpmw.mft (raw, json)
Hash identifier: OSArXf2NRlOZnmKHmdvWmPpphr+Gv6d04n0/SvsiVpc=
Subject key identifier: 90:D1:39:0A:0A:E2:B0:26:E7:BD:D9:B3:62:98:13:98:62:5B:AA:1E
Authority key identifier: 5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C
Certificate issuer: /CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
Certificate serial: 019A7226056597991EF0B1D63640E48B43EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
Manifest number: 16C2
Signing time: Tue 11 Nov 2025 09:01:25 +0000
Manifest this update: Tue 11 Nov 2025 09:01:25 +0000
Manifest next update: Wed 12 Nov 2025 09:01:25 +0000
Files and hashes: 1: MT9vPInoaysz5wep7peoXlzT3YM.roa (hash: 3Nc11g2iFkPxsowhqR+tamDkBXdlZBe0DtJ8wPuCW4E=)
2: WiHxhbSzhmdV26ABC88QuUqKpmw.crl (hash: G2r953nMIfWgdy2etS2Y5FYiLF0hlLN/TIgbrUFGx+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:05:65:97:99:1e:f0:b1:d6:36:40:e4:8b:43:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
Validity
Not Before: Nov 11 09:01:25 2025 GMT
Not After : Nov 12 09:01:25 2025 GMT
Subject: CN=90d1390a0ae2b026e7bdd9b362981398625baa1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:10:73:3f:13:56:50:c2:4e:fb:88:75:02:
aa:f4:f1:c0:09:de:0a:e2:3b:3f:7a:5e:b4:f2:cb:
08:77:0d:80:a5:6d:86:ee:f1:b7:10:97:40:94:40:
6e:24:b9:b1:c3:41:69:e3:21:3e:74:ef:db:bd:cd:
c2:24:2c:f7:2f:e2:25:62:02:56:62:52:8f:74:74:
a5:d7:62:ea:e3:cb:4b:9b:bf:13:85:96:12:43:e1:
54:ce:4f:76:a5:0e:c8:58:3e:5a:5f:dd:79:1d:cf:
4b:4b:f6:b0:f4:77:c2:27:d6:59:8d:1a:df:93:18:
3d:53:39:c6:53:3e:7f:3f:b7:3d:a3:66:9b:06:59:
df:53:80:7a:c6:53:5f:68:f3:66:28:6e:04:a2:e7:
a0:d5:31:1f:a9:27:cd:fa:2c:28:2d:6f:b9:2f:93:
b2:1c:2b:1a:2c:d7:f1:1e:7b:d4:7a:4a:fc:9a:f0:
05:58:94:25:f6:29:6d:1c:a2:82:a0:c3:b7:93:59:
17:d6:ae:40:ec:4b:eb:a1:b2:ce:7f:0a:59:3c:dc:
0d:39:5d:13:7c:f0:e7:c6:0e:f8:25:0f:b3:bd:b9:
7c:eb:90:e4:8a:cd:9c:75:37:51:dd:ad:8f:71:4a:
83:c4:ca:ab:dd:03:90:85:83:c8:7d:e7:83:0b:e1:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D1:39:0A:0A:E2:B0:26:E7:BD:D9:B3:62:98:13:98:62:5B:AA:1E
X509v3 Authority Key Identifier:
keyid:5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0c:0c:89:a3:40:18:43:8b:8c:79:ad:8a:16:4e:e2:a9:49:
b6:01:1b:df:83:39:f8:16:c4:5b:fd:d6:c8:f3:2c:8f:7c:5a:
9a:0e:e0:dd:8e:ec:ae:57:33:20:0a:55:34:ba:e2:d0:6d:f8:
f6:ea:44:f2:b4:ec:6c:24:42:dc:56:ae:17:d1:0b:10:72:24:
1e:30:57:6e:6a:65:1e:2d:45:02:b2:bd:c4:47:d6:4f:4c:92:
34:78:85:c7:06:0f:4e:5b:36:65:fd:63:9c:3d:4d:49:43:0c:
16:b4:02:1c:0f:78:66:8e:36:f7:2b:b7:25:f9:98:9f:1b:b5:
26:c6:84:cb:bb:84:5a:94:ca:fa:90:35:da:71:1e:1d:f8:d1:
58:94:75:53:4f:33:2e:8d:37:eb:01:a5:27:c1:f9:4e:71:34:
c2:d7:49:90:bb:59:e4:44:fb:62:56:4f:f1:98:2c:7c:9c:26:
52:e1:36:04:2c:15:87:3c:2f:39:64:47:8c:70:6b:96:88:aa:
04:32:77:b6:db:17:c0:a7:5e:76:d4:63:74:9c:57:9f:89:35:
9f:ac:56:3f:d7:aa:ef:0e:30:f8:09:70:9a:b4:cc:da:2e:92:
7f:a3:f0:af:d4:9b:c5:c3:65:3f:dd:2a:cd:76:5c:4d:0a:e9:
2b:a4:6f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:13:26 2025 by rpki-client