Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
File: WiHxhbSzhmdV26ABC88QuUqKpmw.mft (raw, json)
Hash identifier: SH4C/GMr/rGizZFHNnoNFfFhM+LzW/kAxwF8tIooaeY=
Subject key identifier: 0C:45:39:B3:3A:2D:E6:D3:A5:23:36:7C:DE:08:7A:DA:4A:94:A2:84
Authority key identifier: 5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C
Certificate issuer: /CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
Certificate serial: 019A51513DCBE22B391E65E315761205586B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
Manifest number: 16B1
Signing time: Wed 05 Nov 2025 00:01:09 +0000
Manifest this update: Wed 05 Nov 2025 00:01:09 +0000
Manifest next update: Thu 06 Nov 2025 00:01:09 +0000
Files and hashes: 1: MT9vPInoaysz5wep7peoXlzT3YM.roa (hash: 3Nc11g2iFkPxsowhqR+tamDkBXdlZBe0DtJ8wPuCW4E=)
2: WiHxhbSzhmdV26ABC88QuUqKpmw.crl (hash: Ktg4eWRFqAHoklOWXS9nbRiN0dV+w+BJyd/WNY08qFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:3d:cb:e2:2b:39:1e:65:e3:15:76:12:05:58:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
Validity
Not Before: Nov 5 00:01:09 2025 GMT
Not After : Nov 6 00:01:09 2025 GMT
Subject: CN=0c4539b33a2de6d3a523367cde087ada4a94a284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:44:e8:10:96:01:cb:e7:df:af:62:86:7d:
b7:87:c1:d2:f9:0f:94:0c:74:9b:be:67:c9:da:40:
53:46:74:0a:e6:a9:72:b3:22:ac:ea:a3:68:ff:48:
d0:b6:01:99:35:71:d6:60:f6:d0:de:09:16:5f:c3:
b9:a9:30:dc:47:be:86:0d:67:10:7d:28:36:ff:36:
3e:e5:d6:22:73:19:14:86:2c:87:db:05:d0:1f:d3:
43:d8:66:5b:2c:ce:ee:a0:61:8a:ce:98:00:00:66:
06:e7:30:4d:66:db:09:f3:97:ac:2d:df:35:04:5b:
33:a9:af:77:f0:70:a4:a8:f4:49:f0:2d:69:9b:ea:
96:42:13:f1:6c:cf:48:d4:d2:a4:bb:2c:ac:d6:84:
1d:72:d9:e9:d7:a4:10:7b:d0:99:0d:db:61:03:25:
6e:04:12:15:22:f3:89:f2:e8:4d:35:cf:6f:da:9c:
12:9a:df:de:a0:f0:60:93:6b:94:79:90:78:e1:ae:
3a:02:3a:e7:2e:ab:31:cf:a1:56:f3:24:b6:f3:b1:
5a:cc:43:ef:3f:51:29:41:ab:95:9d:8e:d8:b0:88:
b9:e9:0a:df:02:ae:fe:01:32:07:69:33:88:f4:ce:
bc:d7:27:67:83:58:ea:59:15:84:0d:e8:b5:f0:c8:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:45:39:B3:3A:2D:E6:D3:A5:23:36:7C:DE:08:7A:DA:4A:94:A2:84
X509v3 Authority Key Identifier:
keyid:5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7b:d2:ab:5a:0f:10:c3:96:ba:f8:93:2d:7a:1a:67:36:9f:
ee:9b:32:89:57:76:bf:f8:68:bf:32:19:1c:f0:bc:79:3b:ab:
b6:f1:f1:3a:69:90:aa:4f:f2:c6:a2:d3:ca:d0:7e:f6:96:f7:
53:90:7b:b5:ef:1b:04:22:17:17:3f:ed:36:65:e7:1d:96:a4:
f4:1b:d6:4c:58:f6:ba:d2:e2:b3:e7:f2:25:09:14:aa:c5:89:
d3:ac:10:52:8c:42:5a:49:21:4a:15:92:a5:66:5e:06:3f:d8:
f5:93:62:96:f1:87:74:bf:f4:85:f8:44:8d:46:ee:19:02:a3:
76:b0:73:f6:0d:02:ea:9d:fd:25:f1:07:14:f1:3e:a7:68:5b:
04:ba:0e:84:ec:a5:f9:cc:72:3a:77:ac:ea:fc:42:3d:c5:38:
3a:f9:f2:db:9b:f6:8a:4c:2d:f6:b1:ef:b8:4e:a4:21:a1:5c:
98:67:60:40:9c:00:71:12:b9:e3:21:74:7f:c2:1f:6e:bc:3b:
d5:7d:fb:aa:29:fb:08:11:74:a4:0c:b9:a7:d7:13:1b:9a:9a:
a6:85:29:39:99:c2:de:dc:4a:88:a9:39:af:56:5a:45:68:56:
d8:fb:b1:46:d6:7d:8c:fc:17:a5:18:42:4b:4a:dd:1f:86:c8:
e9:22:96:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:51:06 2025 by rpki-client