Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
File: wlEKilJdybHsCxVg0JCmQmjULsQ.mft (raw, json)
Hash identifier: isk92kizjeH4Ou9KgWVxhE5LdRWppDjB58TY0K1pZh8=
Subject key identifier: 2C:B9:B0:1D:A9:A4:A2:BB:3B:3D:DC:F4:C8:5C:82:78:7D:CB:BF:CE
Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
Certificate issuer: /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Certificate serial: 019A4C617F39957D1B069D8372CD9A9B5FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
Manifest number: 16B6
Signing time: Tue 04 Nov 2025 01:00:49 +0000
Manifest this update: Tue 04 Nov 2025 01:00:49 +0000
Manifest next update: Wed 05 Nov 2025 01:00:49 +0000
Files and hashes: 1: FaPK4dABXX1JUG-DgodpiiYFyXk.roa (hash: 8EnGZIA4ScfpCaGufhHcnmIDRY1lMTTgXZqEJ9E7v2g=)
2: bYeYVYEdCXCzK3hGWezO0ZNHveg.roa (hash: UaiyZMeOYv/TRvUCkbZ9PcMP5ygVyQhx0p+DkQtZkYA=)
3: wlEKilJdybHsCxVg0JCmQmjULsQ.crl (hash: c/5jdxrYwbOoKFxhS3c9gjAQW1vvP8i8oVBPQ8YxV5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:7f:39:95:7d:1b:06:9d:83:72:cd:9a:9b:5f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Validity
Not Before: Nov 4 01:00:49 2025 GMT
Not After : Nov 5 01:00:49 2025 GMT
Subject: CN=2cb9b01da9a4a2bb3b3ddcf4c85c82787dcbbfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:b0:36:de:7c:ed:88:62:f6:ee:ac:81:02:
35:ac:c9:0e:48:04:05:ca:15:cc:ba:ae:43:d9:81:
da:bc:45:28:1d:7c:ca:80:16:de:7f:c5:bb:96:90:
f0:0b:88:49:b1:0c:f6:c4:27:2e:bc:80:00:74:6c:
c1:de:5f:5c:f5:e4:62:b7:a2:6d:ea:64:fe:7f:76:
ad:d6:32:1d:a0:5e:fd:8d:86:29:5f:f0:25:85:4c:
42:ec:5d:bc:71:78:4b:c3:63:b4:e3:6f:a9:94:e0:
d9:e9:7d:1d:4d:7c:c7:ad:be:dc:93:cd:d3:9b:ab:
d7:4c:94:50:3e:da:a4:0b:f5:4d:63:d3:1b:62:6e:
d8:bd:9e:68:b9:02:33:97:7e:fa:c7:fd:24:54:84:
94:04:3d:bf:6a:a6:0e:4f:c8:cf:62:dc:f6:6c:9b:
d1:aa:83:67:a9:ca:ea:4d:85:b4:23:64:2e:9b:eb:
4b:96:cc:c5:4b:81:67:6a:57:f2:49:94:ec:d6:8f:
4d:63:42:e4:a1:91:c6:26:99:2b:a9:53:c9:46:fd:
cc:dc:03:e5:41:e4:a0:e2:89:6f:2b:39:41:25:11:
e8:08:93:a5:bd:1c:18:ea:3a:15:d0:2e:ac:22:14:
79:e5:75:7b:ad:a4:83:a0:a5:60:06:f6:d7:0c:08:
ed:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B9:B0:1D:A9:A4:A2:BB:3B:3D:DC:F4:C8:5C:82:78:7D:CB:BF:CE
X509v3 Authority Key Identifier:
keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:75:09:1c:26:f8:1b:ba:a7:d5:ee:20:8f:d1:51:b2:4c:31:
90:a5:05:ff:b5:a6:bf:b7:76:b2:48:b8:8b:c3:10:76:af:74:
51:16:15:e6:d7:a4:49:e3:be:02:b9:ca:43:c9:ce:8f:24:b4:
cb:4c:19:17:44:fd:5f:d4:ba:f3:77:52:b1:91:0a:17:ca:cb:
2b:54:b5:9f:7a:a5:67:02:d5:13:13:b5:7e:ef:8d:bd:b1:ee:
48:8e:73:a4:1e:a9:b6:dd:02:5a:0f:4a:76:93:6d:c5:c6:2d:
2c:fa:25:01:b5:fa:f0:3e:f2:0f:da:85:e6:6a:7c:a8:a9:07:
e9:c2:66:51:ad:e4:fd:90:25:43:c9:00:61:ec:34:22:ed:be:
64:96:2a:51:f5:d9:68:a0:96:8b:b9:47:bd:06:53:cf:44:2e:
6b:02:48:1a:4d:d0:89:29:3f:3a:ab:c3:d5:6d:75:62:fb:7b:
9f:c7:82:4f:3d:6d:ab:fc:ad:0c:61:5b:52:65:5b:7b:ea:1d:
e9:85:78:54:2c:68:ae:e6:87:65:19:50:76:d2:67:92:bd:35:
67:ca:5f:61:2f:92:97:dd:6f:bc:a0:f4:d9:de:23:46:60:b8:
4c:bd:37:e5:e4:f8:34:98:c4:b4:3c:46:0d:09:d8:c2:0a:01:
bd:08:42:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:36 2025 by rpki-client