Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
File: wBekqCFysgav7hwT0pbuJgOFtXE.mft (raw, json)
Hash identifier: /SEvLsZq9MkhuHRUacfiiJ+ZDjH2imveb4hijXlEgxo=
Subject key identifier: 4F:AE:AB:15:BB:4A:6A:82:39:57:CD:7D:BC:00:2B:82:2B:93:24:D6
Authority key identifier: C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
Certificate issuer: /CN=c017a4a82172b206afee1c13d296ee260385b571
Certificate serial: 01989712DC35FA6ADE6A6106F7A2CB0912ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 03:00:52 +0000
Manifest this update: Mon 11 Aug 2025 03:00:52 +0000
Manifest next update: Tue 12 Aug 2025 03:00:52 +0000
Files and hashes: 1: dCiNIBkWF2RsTfBzLCoJZdfeZWw.roa (hash: YbTpFGUkZZd0ope4WSof9klg7VlGCuc2kGLkcWvVqI4=)
2: wBekqCFysgav7hwT0pbuJgOFtXE.crl (hash: HofT/GkMA6M5j0u9RdnMkK3nFTL6OQbpffHLEuQ24zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:dc:35:fa:6a:de:6a:61:06:f7:a2:cb:09:12:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c017a4a82172b206afee1c13d296ee260385b571
Validity
Not Before: Aug 11 03:00:52 2025 GMT
Not After : Aug 12 03:00:52 2025 GMT
Subject: CN=4faeab15bb4a6a823957cd7dbc002b822b9324d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:0a:2a:7f:35:2a:92:b3:1f:77:5a:2f:f3:
7c:f9:ab:f1:e0:6e:aa:95:4c:90:40:64:86:82:85:
9d:6f:62:b8:9f:d9:4b:81:a0:db:2b:ed:8a:75:5c:
46:97:b3:58:e0:c0:97:2f:a8:d5:f2:b1:8f:ba:99:
e9:31:5a:02:85:4d:ab:1f:0a:11:6b:5e:b6:dd:cb:
e9:42:48:28:77:21:06:df:33:b8:ca:fe:75:bc:30:
c1:df:3b:3e:43:0f:e6:91:72:d1:24:56:6b:61:ab:
3f:9b:3e:1f:f1:98:e3:bf:0f:80:76:f1:2e:84:7c:
2d:92:26:96:4a:bd:81:82:42:18:ae:7e:fd:26:f5:
6a:e3:6b:58:39:8e:d8:e8:71:ea:47:59:37:05:b7:
73:c0:5a:84:a8:c7:06:bc:e5:5e:44:2f:5e:34:26:
b2:7c:30:0e:d4:7d:7e:5d:cd:ac:a5:c7:9e:12:9e:
1d:8f:8d:8e:35:81:1e:cb:bb:24:7c:45:da:2f:e3:
f5:f5:1b:cb:bc:00:b5:2d:c1:89:7c:c9:42:b4:e1:
a9:2e:41:78:84:a4:9f:8b:a4:12:44:f4:ee:db:d8:
83:60:c7:a5:d3:be:4a:68:7a:6d:49:83:8e:95:45:
a0:7f:4a:e3:f6:1b:c0:81:44:48:91:49:c6:2d:e4:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AE:AB:15:BB:4A:6A:82:39:57:CD:7D:BC:00:2B:82:2B:93:24:D6
X509v3 Authority Key Identifier:
keyid:C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:30:fa:f8:b2:8a:24:3d:f9:4a:cb:42:fa:44:c7:f9:5d:2a:
42:6f:25:f8:2e:0b:93:f4:de:e8:37:ef:38:6b:13:93:99:f2:
8b:f2:e8:0b:eb:d4:5e:18:f4:8c:5b:d3:28:ab:f5:d9:1a:0b:
b7:c8:b5:36:0f:b2:c7:51:b4:00:28:d4:c7:66:ec:5f:c7:64:
1a:0c:ec:10:af:64:ea:8e:f0:1a:8b:ac:64:5d:8c:1d:ce:82:
79:e0:7d:dd:4b:7f:e7:a8:8c:4c:d3:ff:59:0c:c6:9a:54:0f:
a6:16:ae:98:93:d5:00:2d:b2:65:39:b4:1d:17:b9:88:b1:5e:
17:54:84:3f:87:a2:d8:a1:fb:bd:f2:6c:42:fd:76:43:75:9c:
b3:87:2c:68:24:51:88:1a:36:fd:7a:32:c3:8f:fa:32:5f:49:
d1:bb:2d:cf:96:87:c3:30:fd:a9:4a:50:7d:aa:aa:c2:bb:5a:
9b:d9:ba:c6:52:e7:5b:6c:df:4d:32:1d:a9:ba:3a:39:03:7c:
95:7e:ad:23:6a:b4:8c:de:c5:26:2c:da:43:e5:f6:92:0d:c6:
a5:5d:ce:87:ea:a1:bb:a0:c3:ad:9d:cc:e4:b8:96:2a:8e:da:
1b:6d:32:0d:67:cd:b6:0c:f7:97:3d:9d:1e:fc:ad:05:1e:22:
6c:9b:c9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:26:15 2025 by rpki-client