Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
File: wYXXJDrphs3khBTmrYHyIpwKV9g.mft (raw, json)
Hash identifier: oq2CNkSF8gK5kYv+East4H+bu2FSmLrV5F62DIIwJMc=
Subject key identifier: 5F:6B:87:D5:0C:86:BC:38:0B:24:C3:04:E3:55:25:D8:FE:86:8A:BF
Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
Certificate issuer: /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Certificate serial: 019A26669DCB1F56F5E6164A28F8EDC77A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
Manifest number: 164E
Signing time: Mon 27 Oct 2025 16:00:50 +0000
Manifest this update: Mon 27 Oct 2025 16:00:50 +0000
Manifest next update: Tue 28 Oct 2025 16:00:50 +0000
Files and hashes: 1: W8cSUwyXIXnz6M1NsyKlwsJXzJ4.roa (hash: rZPkwf4eFRkmaVkGU+tJg15LkBGz0xTeLhl3l0qmLag=)
2: wYXXJDrphs3khBTmrYHyIpwKV9g.crl (hash: KUIeocfXNvRSFwjc+ETm2a8wgQQBJTaBSCFenlE+S7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:9d:cb:1f:56:f5:e6:16:4a:28:f8:ed:c7:7a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Validity
Not Before: Oct 27 16:00:50 2025 GMT
Not After : Oct 28 16:00:50 2025 GMT
Subject: CN=5f6b87d50c86bc380b24c304e35525d8fe868abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:bf:b5:dd:20:2a:0a:3e:60:18:a1:53:8a:
91:2a:2c:1f:36:63:8a:7a:d1:13:67:82:7d:c6:d2:
16:50:d6:a1:df:38:1c:81:e7:50:ca:c4:08:eb:2c:
b4:69:83:ea:10:5f:13:e7:45:8d:c6:dd:64:5c:e2:
5c:e0:34:58:c0:b7:06:17:37:d9:ba:8f:a7:16:f0:
a6:bb:4c:b3:f0:81:65:5f:7a:94:c0:7d:4d:44:93:
b0:2a:46:87:d1:88:2c:c9:c5:66:d0:20:34:30:0c:
a2:a6:da:1b:7d:ac:3a:b7:e5:67:ea:46:ad:1a:f8:
f9:1f:8f:83:64:96:96:a4:6b:19:c9:26:2e:db:49:
31:bd:e6:29:60:68:3d:e0:d5:f7:8c:de:a7:8b:ea:
2d:da:db:0e:ff:8d:c6:7f:d4:77:79:1f:18:41:52:
0d:0e:01:60:05:23:11:d4:5b:b9:c4:83:90:62:85:
ec:70:4d:cb:bf:0f:33:69:60:72:3d:05:d9:4b:dd:
56:7f:04:ff:27:f4:8b:45:42:f1:02:64:9b:74:39:
3c:57:f2:4b:d3:ef:6d:4a:92:48:66:b8:57:5e:1e:
50:06:44:8e:f6:96:df:6a:a7:02:68:b5:9c:3a:2c:
fa:45:b0:1b:49:77:11:aa:d0:56:c6:70:73:dd:9a:
13:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6B:87:D5:0C:86:BC:38:0B:24:C3:04:E3:55:25:D8:FE:86:8A:BF
X509v3 Authority Key Identifier:
keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a1:39:1d:e5:61:10:4c:63:58:16:c1:4a:b5:e2:45:b4:66:
74:df:f4:ff:f3:e1:ed:12:be:9e:d8:0a:05:90:c1:36:5e:73:
97:32:de:03:cd:d0:ef:a1:e4:00:cc:8a:8b:27:2c:60:95:8a:
00:a0:b9:ca:b6:7c:16:19:52:a7:9e:d9:ab:84:65:e3:88:f2:
94:fb:54:0c:df:d2:4c:80:c9:95:e5:8f:d3:1b:6d:86:ce:9c:
52:92:36:39:16:eb:09:91:cc:bb:a5:e6:b6:d0:bf:b7:84:b2:
ad:94:c0:68:8a:5e:c3:97:2a:2d:04:3f:71:ff:d4:5a:cd:25:
a5:90:1c:1e:05:bf:6f:23:7a:f8:38:8b:a1:0c:3b:52:9b:b4:
f1:48:6a:78:ef:55:86:36:0a:b1:57:f6:23:39:91:1c:2a:fc:
46:82:5c:97:5f:0a:87:87:78:de:eb:dd:f3:29:be:e1:b4:78:
f8:1f:2f:7a:b0:d5:25:de:ac:26:bd:e8:b6:65:19:5b:57:28:
b1:19:3f:c6:d3:9e:ef:5a:4d:b3:6a:70:48:4d:25:65:f6:d5:
62:b7:9f:01:9c:bf:ca:1a:d9:98:63:01:12:9d:44:f5:7f:27:
82:b1:d5:4a:7b:fb:6e:1c:11:9f:21:db:5d:92:85:d4:f1:81:
67:a1:96:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:40:28 2025 by rpki-client