
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
File: wBWqbOyG3yEV4qEOkgnYqi35i78.mft (raw, json)
Hash identifier: SJNmiSLhhMXlakfIZTfXjWdQZInwdsx1/xj2qhHg5BY=
Subject key identifier: CA:27:13:CA:AC:B3:35:7A:93:F5:4E:10:1C:18:C8:53:FC:D1:B7:BC
Authority key identifier: C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF
Certificate issuer: /CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf
Certificate serial: 019A2289CCCEC8C2E0EA0AA0556B7F831B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
Manifest number: 01B6
Signing time: Sun 26 Oct 2025 22:00:47 +0000
Manifest this update: Sun 26 Oct 2025 22:00:47 +0000
Manifest next update: Mon 27 Oct 2025 22:00:47 +0000
Files and hashes: 1: u0y20R9QTPyQ909oZwz8h1z4D_c.roa (hash: JOHDDdtCt33NzefI4pce2GppbGjse6UDJKzNAqgwUuA=)
2: wBWqbOyG3yEV4qEOkgnYqi35i78.crl (hash: HZaxiQ7UAJEK2MI7eCJBzhdys66UVUmxF1KSJFUuBu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:cc:ce:c8:c2:e0:ea:0a:a0:55:6b:7f:83:1b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf
Validity
Not Before: Oct 26 22:00:47 2025 GMT
Not After : Oct 27 22:00:47 2025 GMT
Subject: CN=ca2713caacb3357a93f54e101c18c853fcd1b7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:9f:e6:4a:25:29:71:b2:18:b9:dc:8d:3c:
01:0f:cc:0d:a3:12:35:f6:82:c4:cc:a7:90:d3:c9:
e4:fd:6d:4e:d0:70:a9:7e:54:c2:20:a3:0d:07:c1:
c1:aa:2d:29:a9:14:04:c5:a6:cc:c9:9d:d8:39:0e:
45:04:eb:6d:d4:26:5a:2b:ad:11:df:87:4a:ac:55:
a6:76:c0:c7:9d:9c:c9:fa:d8:16:0d:cd:4b:e7:04:
c4:4b:4d:8c:d3:34:68:b9:cc:eb:75:34:db:3e:fe:
0b:21:90:0f:cc:4b:e4:7d:a2:6f:99:f9:56:b9:d3:
09:6d:97:63:e0:90:1e:f7:6f:d1:84:38:aa:b2:a6:
e5:31:f9:84:53:14:83:be:1d:f7:59:c6:0c:d2:df:
a6:e0:28:e0:43:08:ab:13:22:6c:44:cd:ad:69:a6:
0a:f8:aa:af:54:eb:da:d3:54:88:1e:44:aa:31:a6:
ca:4d:ec:a3:c2:2c:ef:52:c9:6b:11:23:d4:c7:27:
8d:54:95:ce:07:4f:e8:8a:55:25:dd:00:8a:74:a6:
77:e3:c1:45:2b:03:49:33:cd:fd:b6:eb:bc:ae:64:
87:88:5f:ea:6c:13:70:97:61:21:53:03:db:24:cd:
1f:75:29:68:e6:32:00:a3:94:44:d8:31:19:e4:81:
d4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:27:13:CA:AC:B3:35:7A:93:F5:4E:10:1C:18:C8:53:FC:D1:B7:BC
X509v3 Authority Key Identifier:
keyid:C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e3:04:c3:f7:61:5e:1b:a4:3a:d2:a1:77:11:c6:af:41:20:
d8:3f:e3:19:7e:f6:5a:a3:81:7e:a8:bd:f5:f8:41:34:aa:6f:
9a:fb:94:4a:fc:d9:9e:23:44:c6:82:a9:73:97:39:97:b8:21:
57:47:e2:be:ae:00:c7:e1:d2:fd:19:4a:a3:75:76:2f:c9:b6:
e0:08:6c:cd:dc:7d:c4:fe:d8:34:56:8c:d9:86:3e:b1:4a:c4:
13:c5:34:1b:c4:0e:65:d6:4b:a3:98:e1:00:dd:0f:fb:f4:ae:
4a:5d:d4:29:8c:c1:a8:69:d1:8e:82:73:bd:79:39:9c:33:42:
3e:d4:4d:b9:e5:09:be:66:cf:73:10:1c:9b:52:1c:2e:68:00:
9d:71:ee:a9:65:03:f9:f0:da:35:18:9d:69:c3:33:05:d0:5c:
17:38:7a:2b:7b:b8:d7:58:95:9e:b7:e9:34:45:fe:21:26:cf:
f7:07:52:29:d2:69:90:9a:55:cd:97:31:b5:3d:fd:f3:2c:21:
84:2f:07:89:c0:fa:f6:61:b3:57:0a:c7:f2:34:0a:3a:0d:d9:
db:8f:e5:de:4c:64:ca:b1:db:34:63:32:97:a8:15:46:db:82:
5a:aa:f3:d2:f0:27:fa:63:5c:6e:bd:e3:54:bc:d2:47:9a:64:
4b:bd:6e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:39 2025 by rpki-client