Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
File: wFlbbIrobPkGmro-um3fKmgjfwg.mft (raw, json)
Hash identifier: o5Iakaifd2sdemyCY0cQRzJPDiXGFDjz47xsT2daoxQ=
Subject key identifier: C4:0B:EF:F0:6A:71:EA:60:EF:E4:AF:70:78:E0:A3:E5:C3:E7:5B:5D
Authority key identifier: C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08
Certificate issuer: /CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
Certificate serial: 019A4E18937045BA01DDA8306CAC65C7A526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
Manifest number: 06B8
Signing time: Tue 04 Nov 2025 09:00:24 +0000
Manifest this update: Tue 04 Nov 2025 09:00:24 +0000
Manifest next update: Wed 05 Nov 2025 09:00:24 +0000
Files and hashes: 1: 8UgkBAZONepNyI81FukUfi25Kao.roa (hash: rpUHlCnR+nUi3dHMj1nsfDs3V156wUfOtUa+u9zdDrQ=)
2: wFlbbIrobPkGmro-um3fKmgjfwg.crl (hash: VGv0x6p1o7toCfLvBJtp1gDvS1G84P7jjpZb7S3wjSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:93:70:45:ba:01:dd:a8:30:6c:ac:65:c7:a5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
Validity
Not Before: Nov 4 09:00:24 2025 GMT
Not After : Nov 5 09:00:24 2025 GMT
Subject: CN=c40beff06a71ea60efe4af7078e0a3e5c3e75b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:f2:80:3c:56:a7:d5:70:b5:0b:15:24:9e:
a2:64:19:30:bb:9f:a7:f7:f1:d4:8d:49:40:53:b3:
f0:82:9b:b1:25:68:b8:b1:1f:bd:66:8b:e4:cc:07:
04:03:7f:52:d4:49:a9:bd:c0:8b:3e:40:95:10:78:
8c:44:be:22:86:0a:72:98:ed:66:8d:32:8d:9c:65:
28:d8:ab:73:f8:8c:9d:a6:66:a3:25:da:f8:ef:95:
e4:e5:4c:81:8c:0b:5d:fe:d8:34:c4:59:c2:06:49:
c8:e1:bd:f3:a8:20:49:2d:e8:63:5c:36:85:0d:2d:
22:9c:91:6a:1c:64:5e:3d:f9:00:c8:1b:0b:9d:67:
d8:b1:a0:c0:a6:40:22:6f:b4:07:51:ee:a4:c8:e5:
32:db:cf:6a:52:b3:ac:04:de:87:fb:53:72:e9:c2:
bb:d2:fa:e7:4f:4c:46:53:fc:9e:1d:d7:0e:cb:48:
fd:b2:c6:d0:c8:4a:ca:11:76:56:c9:02:92:66:63:
2b:03:17:a0:dc:ec:a1:90:d0:56:c4:3e:89:65:d8:
18:63:e7:0f:1f:7f:b0:ac:1f:ae:ae:55:dd:69:f5:
88:47:aa:8b:21:64:5c:69:c1:b3:e9:f4:42:f6:a9:
d0:05:62:55:b6:d3:24:62:48:55:0d:10:7b:56:13:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0B:EF:F0:6A:71:EA:60:EF:E4:AF:70:78:E0:A3:E5:C3:E7:5B:5D
X509v3 Authority Key Identifier:
keyid:C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c3:a8:a8:5c:fb:ae:f3:ac:60:cd:15:f2:2c:de:d3:61:5a:
6a:10:c5:bb:3d:6c:3a:67:2f:ab:39:4c:01:8a:d2:f5:ab:a0:
5e:8a:73:45:87:40:3c:03:aa:a6:a0:b8:c4:6c:a5:51:c5:30:
a7:26:81:b5:fc:9f:1d:33:26:e7:09:54:51:11:91:13:6d:59:
23:1c:d7:67:20:fd:56:07:8a:09:d1:1c:c7:88:a7:e0:e4:e0:
7b:5b:70:fb:e1:db:77:0b:43:3b:a9:3c:1d:1e:d8:f8:3e:16:
26:0f:db:c6:e1:53:7d:46:19:21:92:85:7b:bb:70:90:36:97:
1d:2c:46:31:25:bb:f7:9c:1d:31:8e:dd:af:ed:7f:13:c4:f9:
16:54:cd:ed:5f:3e:3b:b5:57:0e:39:80:e6:7d:19:38:9a:83:
7c:d4:af:b3:55:41:28:f6:50:4d:7e:3f:77:79:82:f3:c3:67:
87:45:12:b1:cc:35:a7:1b:9a:57:ae:b8:73:2a:b9:2d:50:b1:
6c:c2:25:c2:41:4e:a1:6b:be:21:0a:35:16:3e:9e:aa:1f:ba:
84:cd:23:21:52:b5:a7:67:c9:5e:db:d4:d2:23:1d:fc:25:c6:
c3:2b:00:a6:f1:1c:fd:57:9d:50:6c:42:b5:fa:1b:b2:ee:17:
46:9c:7f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:53 2025 by rpki-client