Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
File: wBekqCFysgav7hwT0pbuJgOFtXE.mft (raw, json)
Hash identifier: igynLI1p8WWe0LyPtd1BVH4SzXOjuxk/SOPu9uhKwvk=
Subject key identifier: C1:97:97:DC:6B:7C:46:CB:F3:0A:48:57:44:D9:9D:38:FD:96:B8:BA
Authority key identifier: C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
Certificate issuer: /CN=c017a4a82172b206afee1c13d296ee260385b571
Certificate serial: 019A4D73A65BE4ED3278DA37AE62DA95BDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:16 +0000
Manifest this update: Tue 04 Nov 2025 06:00:16 +0000
Manifest next update: Wed 05 Nov 2025 06:00:16 +0000
Files and hashes: 1: dCiNIBkWF2RsTfBzLCoJZdfeZWw.roa (hash: YbTpFGUkZZd0ope4WSof9klg7VlGCuc2kGLkcWvVqI4=)
2: wBekqCFysgav7hwT0pbuJgOFtXE.crl (hash: VkArQ9hAarq+xVY1Og1O8v6s1FgWlaf6Ms5ghKbEoCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:a6:5b:e4:ed:32:78:da:37:ae:62:da:95:bd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c017a4a82172b206afee1c13d296ee260385b571
Validity
Not Before: Nov 4 06:00:16 2025 GMT
Not After : Nov 5 06:00:16 2025 GMT
Subject: CN=c19797dc6b7c46cbf30a485744d99d38fd96b8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:13:b4:9f:81:f1:d7:f5:25:17:cd:69:a2:
5d:9e:10:c9:c1:32:c3:c0:d5:6b:42:d0:40:14:8c:
eb:f6:1d:66:67:d6:65:b8:50:f2:c2:7b:3b:65:c9:
e3:72:14:f5:59:68:60:67:e0:d6:43:0e:ae:85:7a:
58:55:17:4c:14:15:cd:c3:97:04:51:21:77:d3:f1:
35:63:e9:97:ce:ea:0c:a7:2b:80:73:96:5b:6c:c6:
f5:5f:55:ef:a3:1f:66:44:d7:1a:48:80:b4:6a:0f:
b0:01:78:f9:c6:49:67:e0:83:9d:64:17:18:91:d8:
f9:63:95:af:ea:d9:e1:cc:05:11:b3:6c:9c:d0:51:
17:ab:bc:f0:e4:7d:6f:3f:55:74:db:53:69:7d:5f:
56:70:51:5a:06:0b:2e:ee:70:d8:7c:82:ea:62:c1:
2e:dd:8b:b1:10:64:22:d7:03:00:77:5c:65:46:c3:
c4:be:12:b5:cc:7d:c2:99:85:92:bd:27:dc:66:6a:
60:d0:ce:b5:1a:68:83:a1:59:18:e6:68:19:81:90:
bc:19:c8:45:dd:86:5e:8d:d2:4b:6c:23:ea:84:17:
c0:fe:27:1c:c3:cf:93:0a:cc:aa:2b:09:ca:98:2e:
14:00:bd:93:e2:0c:e5:7b:6c:d3:e9:92:55:2a:f0:
94:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:97:97:DC:6B:7C:46:CB:F3:0A:48:57:44:D9:9D:38:FD:96:B8:BA
X509v3 Authority Key Identifier:
keyid:C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:11:5d:1a:c7:89:35:e5:c4:64:11:e5:ad:65:44:51:40:92:
02:81:59:da:6e:22:ab:6a:37:1b:f0:6d:ad:13:e7:c0:e2:77:
38:25:d3:5f:04:5c:86:66:6d:3d:c8:17:27:46:60:13:f1:e2:
e9:bb:c1:d9:a9:68:99:00:58:e9:2f:d0:30:81:10:4d:e8:2e:
fb:a0:95:d2:fd:7c:74:32:83:68:56:73:59:40:ae:2a:28:b5:
99:2b:0c:84:34:73:26:f4:0a:0f:1a:ea:1f:f2:c2:40:7a:a3:
6d:2f:8a:af:90:4c:90:09:54:d4:11:09:5b:50:8b:fb:39:d1:
64:1f:d7:92:ef:30:3a:83:81:dd:db:9e:4f:a2:4d:66:6b:56:
49:71:37:2a:82:74:d6:e0:79:41:cf:1f:cf:d4:ea:2e:a8:73:
65:64:35:a5:1f:19:bf:08:1b:e8:a6:30:af:65:c0:9b:6a:2c:
47:8b:33:a9:aa:cb:e1:bf:83:da:15:69:f4:7d:20:ec:c2:cd:
69:07:d6:93:f3:b6:dd:d1:b4:89:73:05:81:f0:54:9a:23:54:
3a:95:4c:80:4f:cf:81:20:52:58:0d:f7:dd:11:3a:e7:fb:4b:
0f:7b:4e:d7:71:cb:47:24:98:e6:c2:44:91:e6:09:36:e0:9a:
58:2c:4d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:46 2025 by rpki-client