Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
File: WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft (raw, json)
Hash identifier: v4EIHsoAsXmsJ2uPp7D09ESYsfwpsxMMfyPUKWTAJr8=
Subject key identifier: 9A:3F:6F:E3:37:CA:F2:51:90:18:7D:D5:4B:D4:01:7E:93:F8:DF:22
Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
Certificate issuer: /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Certificate serial: 019A4EF4CBB6BC1CA19E01533DC324E5DD5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:00:57 +0000
Manifest this update: Tue 04 Nov 2025 13:00:57 +0000
Manifest next update: Wed 05 Nov 2025 13:00:57 +0000
Files and hashes: 1: N5lzNY_ASHzrKxE2-cr-dO0MhXU.roa (hash: Kidqbnzk9/6YevJVEsmBoo0YD5crOzBmyny1x/qR6+w=)
2: WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl (hash: wph4jrhb3v4aiouh7qf117+B8xyAqVyYY8I20YJ2xQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:cb:b6:bc:1c:a1:9e:01:53:3d:c3:24:e5:dd:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Validity
Not Before: Nov 4 13:00:57 2025 GMT
Not After : Nov 5 13:00:57 2025 GMT
Subject: CN=9a3f6fe337caf25190187dd54bd4017e93f8df22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:01:09:99:a2:0d:a5:dc:55:ff:9c:ae:d1:
b0:ef:9e:b3:0d:a9:3d:1b:8b:bc:90:4f:79:a1:9d:
72:c9:5f:a9:13:87:6d:87:ee:54:1f:f2:87:c9:16:
21:13:96:66:1c:26:3b:bb:f7:84:a5:db:e2:c2:d8:
e0:cb:8a:8c:af:1b:fc:6a:58:8e:17:a9:66:f6:21:
04:e1:33:d3:b0:62:7d:7a:87:4b:31:70:5e:c9:6f:
27:cb:cd:72:f7:35:76:ba:5a:44:8e:75:ec:ba:d6:
54:95:38:58:51:e8:93:15:31:76:42:f9:83:4c:24:
5b:cd:5f:77:05:1b:cc:0b:aa:8c:f1:49:62:14:d4:
66:a9:b3:90:d0:5c:99:0e:da:e6:2c:71:aa:b9:51:
3f:58:6d:a6:d6:9d:27:41:f9:84:d8:d9:65:35:e3:
40:88:67:f5:25:7f:17:24:0d:e6:fe:4f:b5:73:7b:
33:23:74:51:c4:fe:b9:d4:e6:62:45:2a:b2:93:a8:
e9:cd:30:13:f9:5a:73:65:7b:ec:aa:34:eb:1a:a4:
b9:b7:25:51:92:c7:3c:8c:c8:62:06:c4:ab:4e:8c:
83:78:d7:9c:64:1d:03:78:e5:72:42:68:ed:66:ee:
a2:b8:69:07:19:dd:be:e0:d7:d1:1b:0e:fc:f9:77:
19:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3F:6F:E3:37:CA:F2:51:90:18:7D:D5:4B:D4:01:7E:93:F8:DF:22
X509v3 Authority Key Identifier:
keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bc:44:98:e9:91:f9:70:d9:be:78:81:20:d4:47:60:58:c6:
00:b2:c7:72:50:cc:04:07:5c:34:44:b2:4f:0e:10:e4:96:93:
16:89:d9:91:9f:2c:5e:63:53:57:f9:42:4d:76:89:a5:34:6e:
01:21:82:80:6e:02:cb:fc:31:2b:6f:2b:82:d9:9c:30:8d:5c:
4d:ea:df:40:cd:08:4b:45:3c:01:5c:d4:df:c4:a2:06:ea:a9:
f1:7f:bf:19:06:1f:ec:78:95:6b:dd:65:57:96:e4:a8:77:9d:
cc:73:ab:3e:93:61:a5:4f:39:44:b1:5d:5f:92:11:1a:6b:47:
d6:68:be:91:36:d0:ae:c7:92:37:00:e6:dc:3d:af:c2:67:1a:
a6:ab:eb:db:41:c9:1b:fa:1d:44:00:cd:83:3f:4a:38:9d:c4:
0b:cd:62:7d:d0:ef:ab:99:11:e1:20:3c:81:dc:7c:f7:3a:fb:
ed:08:30:60:f1:72:9e:ee:3c:72:f4:86:65:72:15:bb:24:4e:
f5:09:54:06:fe:3b:94:f5:b4:36:7c:b6:d1:3c:b3:4e:27:ce:
fe:90:8a:f6:7f:82:7b:af:ef:89:65:4c:5d:d4:ad:c4:c8:5e:
77:34:bc:7c:6d:88:65:aa:93:4d:25:f2:f8:ac:ad:a9:e6:7c:
68:90:31:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:20 2025 by rpki-client