Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
File: wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft (raw, json)
Hash identifier: Pib7jH0+lJkl50l36Hns+eFGrnZJRYo+ACcMn54RTPk=
Subject key identifier: BA:6B:B7:9A:C8:12:2B:EB:CE:B1:42:A9:18:51:FC:60:24:D7:37:CE
Authority key identifier: C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC
Certificate issuer: /CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
Certificate serial: 019A4F6293826B15880670FEA1B386F75CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 15:00:51 +0000
Manifest this update: Tue 04 Nov 2025 15:00:51 +0000
Manifest next update: Wed 05 Nov 2025 15:00:51 +0000
Files and hashes: 1: BN13x-ZjA4mHaBlOmgwvor1JO1c.roa (hash: Uuj6BFZWiA+duiDnobx+mZ0HHXgVtqFptRYnRQ3IF9I=)
2: wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl (hash: z0GOULXvbBei5tqQGoA627r1tM7Wzu5oJjUtgnlp+lI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:93:82:6b:15:88:06:70:fe:a1:b3:86:f7:5c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
Validity
Not Before: Nov 4 15:00:51 2025 GMT
Not After : Nov 5 15:00:51 2025 GMT
Subject: CN=ba6bb79ac8122bebceb142a91851fc6024d737ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a0:7f:41:e0:67:4e:9e:01:a2:76:3e:ee:9a:
0d:fc:c4:25:46:c7:4a:2e:7b:20:c5:ad:b3:76:5e:
25:a5:36:a9:f3:15:9a:16:04:ba:70:a5:1a:d7:83:
2f:d7:4c:9f:b0:92:93:f3:a9:af:a9:0e:7d:8b:b7:
11:1e:91:ce:23:cc:a3:1e:89:55:a8:23:1b:89:14:
a4:c4:a0:4c:24:27:cc:64:6f:3a:6a:da:eb:03:03:
7a:7e:97:ee:d5:77:65:72:77:14:ad:3c:4b:1d:ad:
73:de:88:07:b7:a5:b4:54:95:cd:fb:ab:64:74:74:
a6:67:15:40:d1:29:3b:5b:e5:f4:db:1b:07:34:31:
3d:c1:62:2d:5c:b0:5e:73:ca:68:02:a7:2d:f4:fe:
6c:74:27:fb:86:8a:f5:fc:4a:66:bc:3c:a0:10:58:
03:64:00:0a:11:65:18:6d:30:1d:75:05:17:f4:8d:
9f:2d:4e:69:ed:58:85:f1:fd:48:7b:07:56:ba:9f:
51:d3:79:26:2f:5d:c6:cc:2c:78:71:4f:9f:89:9a:
ca:19:25:08:51:9c:53:67:61:8b:60:d3:75:2f:ac:
3f:b6:7f:ee:c8:14:54:0a:d6:4a:6e:04:ae:13:d1:
e1:da:08:31:3d:ea:d3:39:7a:92:b1:54:74:af:d2:
b2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6B:B7:9A:C8:12:2B:EB:CE:B1:42:A9:18:51:FC:60:24:D7:37:CE
X509v3 Authority Key Identifier:
keyid:C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ea:86:15:b3:47:04:df:4e:42:69:5a:3f:d0:33:62:66:a7:
25:91:e9:5f:79:95:fc:92:29:2f:de:8d:4c:bc:71:d7:8e:05:
e9:d8:a9:18:fa:14:a5:6a:3e:cc:8e:61:7c:ef:e1:89:c5:36:
03:49:22:0b:e1:21:43:86:df:26:9f:25:f5:68:f8:1f:d2:ad:
00:b2:ef:90:25:70:ab:52:9f:31:90:f1:82:fc:70:97:fa:9b:
e3:e9:cd:74:2a:13:62:31:04:79:f5:60:44:b2:ef:99:ef:b0:
b9:e2:de:b9:5c:2c:9f:1b:4d:d5:ee:32:0a:21:88:bb:00:a1:
3f:0b:e8:d7:86:af:24:0b:64:34:4c:57:3e:7c:d0:b5:27:2d:
6d:71:5c:f7:6d:f5:18:45:87:10:92:88:b0:96:36:46:a0:9d:
17:98:ad:54:e3:8e:4c:2b:0c:3a:b1:7f:1f:d2:ef:ed:e7:47:
02:0e:7a:61:53:da:74:43:11:53:c6:f4:dd:dc:9e:00:2c:e7:
a6:d8:20:d3:f9:e2:64:da:be:37:38:c8:59:2e:7f:27:fb:6b:
41:b2:46:e1:c9:60:7e:6a:43:19:78:8b:f5:b1:fb:32:b1:fd:
8f:23:08:3f:15:a5:43:59:24:e6:0b:49:15:6a:81:10:04:11:
75:5f:b0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:28:15 2025 by rpki-client