Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
File: WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft (raw, json)
Hash identifier: 2qMtIUqdo8pDgx3r3/tuw+jeLO0lxVgiH2+XbJJrqLg=
Subject key identifier: 98:6B:F3:51:B5:3D:FC:DC:7E:C3:01:A6:52:80:1D:21:5B:92:89:1E
Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
Certificate issuer: /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Certificate serial: 019A2478357FD5A584B238908662F3FF89B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 07:00:49 +0000
Manifest this update: Mon 27 Oct 2025 07:00:49 +0000
Manifest next update: Tue 28 Oct 2025 07:00:49 +0000
Files and hashes: 1: N5lzNY_ASHzrKxE2-cr-dO0MhXU.roa (hash: Kidqbnzk9/6YevJVEsmBoo0YD5crOzBmyny1x/qR6+w=)
2: WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl (hash: RYbnwUfOG1Dr6SAL2kVrF3wMLCGJ6yBHqLOpnhvydk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:35:7f:d5:a5:84:b2:38:90:86:62:f3:ff:89:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Validity
Not Before: Oct 27 07:00:49 2025 GMT
Not After : Oct 28 07:00:49 2025 GMT
Subject: CN=986bf351b53dfcdc7ec301a652801d215b92891e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:92:3e:a4:eb:4a:18:6e:b8:23:d0:bc:c9:
95:c9:27:41:b7:c9:b3:12:ac:6d:99:dc:bd:03:58:
84:26:f8:b5:fd:18:51:f8:b4:0c:8d:38:26:4f:ab:
9b:31:3b:1b:ea:27:5c:07:74:b9:5d:df:d2:cb:85:
7e:03:96:dc:17:ef:bb:92:5d:68:91:ee:64:f9:d5:
69:ef:66:4b:c8:4c:1f:8e:a9:c4:0c:4f:67:c1:2a:
8b:4c:97:de:f9:02:57:24:68:3b:3e:97:0c:ce:6d:
20:b9:8a:04:b1:3b:1b:30:33:85:ac:e7:a9:0a:30:
aa:9b:d9:a1:17:8f:ba:c9:0d:0b:ca:67:74:52:0c:
48:9e:4b:f7:db:7f:5d:bb:8e:42:de:b0:9b:c9:da:
53:9c:90:08:bf:54:28:b6:f6:06:ba:1d:33:49:96:
36:e8:9e:f4:70:0d:15:9f:ec:af:80:98:60:34:ba:
5f:80:75:f2:5d:b1:a1:39:89:43:ef:45:fc:aa:35:
ef:f6:e1:6b:86:1a:4c:07:65:ec:f5:80:9e:97:19:
97:a4:8c:bf:99:16:b8:b3:36:97:89:3e:7c:f4:b8:
d3:36:f8:b4:f0:50:59:ee:b6:a5:e5:a0:63:f7:ff:
8a:b2:7c:15:02:20:67:60:5f:56:93:65:87:80:0f:
1a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6B:F3:51:B5:3D:FC:DC:7E:C3:01:A6:52:80:1D:21:5B:92:89:1E
X509v3 Authority Key Identifier:
keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ae:5d:34:45:cc:a7:36:cd:cf:df:52:de:9b:b4:c6:ea:85:
dc:99:95:bf:36:56:18:4f:3e:99:82:0f:57:6f:c5:e7:cc:6a:
3f:40:6b:14:30:e1:68:7c:b4:3c:27:42:34:76:4a:fa:03:3a:
53:7b:92:5e:93:80:3c:88:b9:ef:70:c5:24:da:bf:56:34:58:
39:55:f1:4c:f8:66:48:a9:dc:12:9c:4b:de:0a:f0:58:39:25:
42:7d:3e:ca:09:2f:48:bc:15:f5:fb:81:eb:bc:14:91:e0:74:
0f:61:28:96:00:94:2d:19:b1:69:cb:59:8b:8d:43:5e:8e:b8:
7d:1c:7b:46:2b:17:bc:7a:60:df:ff:ee:99:1d:8c:de:10:fb:
c7:f1:8d:25:b0:02:93:6c:55:db:3c:e7:46:7e:cd:09:c4:a8:
a2:c8:4a:c3:d6:18:ae:b1:6d:80:0a:79:39:2a:73:6a:51:da:
1b:71:c7:e0:0a:71:2f:78:4a:e4:ac:8f:b1:c6:b7:2f:29:70:
50:ba:f6:50:86:3c:ea:c9:a2:7c:ba:7a:54:b6:15:b5:01:b7:
cb:28:f1:21:78:56:4d:d0:99:0f:94:a9:4e:d4:23:52:c4:f1:
32:87:c9:82:e0:04:e7:31:f3:4f:40:43:90:83:1b:a1:72:1c:
6a:8d:97:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:29:35 2025 by rpki-client