Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
File: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft (raw, json)
Hash identifier: ddDj10VUjEPFE8ru+AlEmV+E8UzMK59nkYHIRdCmFfA=
Subject key identifier: 8D:3A:06:2B:98:CF:38:E7:01:00:82:A9:1C:02:E7:50:29:B9:18:73
Authority key identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
Certificate issuer: /CN=5aae19678aa37525512229a94e7890147183273c
Certificate serial: 0199FEB52539082B0FC86141F6A903B42F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
Manifest number: 16B8
Signing time: Sun 19 Oct 2025 23:01:48 +0000
Manifest this update: Sun 19 Oct 2025 23:01:48 +0000
Manifest next update: Mon 20 Oct 2025 23:01:48 +0000
Files and hashes: 1: 0ehbELwlxIROAJUXnHI7q0hHZvU.roa (hash: I3OhyXjmUaPoDinsu8stBnr83W6cuJYkPeqcRDRwksw=)
2: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl (hash: s9hG9fSp9rt3pSK8xGldFTEk+/k1mHj2a07FSdZhc5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:25:39:08:2b:0f:c8:61:41:f6:a9:03:b4:2f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aae19678aa37525512229a94e7890147183273c
Validity
Not Before: Oct 19 23:01:48 2025 GMT
Not After : Oct 20 23:01:48 2025 GMT
Subject: CN=8d3a062b98cf38e7010082a91c02e75029b91873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:23:84:4a:20:d4:ba:71:2e:fa:8b:65:16:
94:79:2c:34:05:9a:81:91:72:a5:95:8e:53:52:c7:
c6:74:67:7a:2e:25:2a:c8:76:85:62:3e:b2:58:56:
2a:f0:65:fb:d6:af:6e:cc:4b:d4:a6:c4:64:36:be:
b0:90:8b:fd:05:75:ad:9f:d9:74:7d:69:a1:bd:7e:
c8:48:59:be:3c:12:34:aa:14:38:fa:c1:de:44:f2:
f9:00:29:bb:80:98:79:c1:5f:35:7e:07:88:7b:ca:
f2:4c:7e:de:d0:b4:a1:6f:5b:c6:c2:f4:55:4a:59:
e1:37:c6:fb:b5:f6:c5:46:a1:ad:fc:11:a0:2d:a3:
26:6a:c1:fb:a6:74:3c:77:14:8d:01:7d:ec:fd:11:
e7:a1:29:21:6f:c6:fe:aa:13:29:05:01:b1:b4:a9:
8c:a5:c8:63:cb:f0:11:9a:4d:95:1c:b5:e9:f3:4b:
c4:63:ee:ae:82:c0:14:00:61:db:50:bd:35:e9:3f:
7f:1c:11:09:15:15:c1:23:60:48:4e:ec:13:b1:70:
fb:58:87:ab:92:4e:48:fb:33:33:09:1c:c2:0b:db:
16:ed:62:0c:52:fb:46:a3:14:af:4a:94:6e:f3:4a:
66:9b:22:81:0d:46:98:1c:7b:f3:96:d6:d5:07:6e:
cb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3A:06:2B:98:CF:38:E7:01:00:82:A9:1C:02:E7:50:29:B9:18:73
X509v3 Authority Key Identifier:
keyid:5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:36:0b:ab:a0:7c:23:b2:62:64:1c:1e:be:3f:d5:d1:95:b2:
0b:4c:62:c3:e0:8e:c1:cb:eb:f4:74:63:a9:f5:bb:21:39:77:
09:6d:a9:27:2c:ad:12:68:43:fb:60:df:2a:f1:a7:53:7e:2a:
86:b3:34:22:22:54:27:4b:56:b4:72:f4:34:c9:76:17:e3:9a:
c3:ba:79:6e:76:4c:ac:9e:b5:e5:57:39:a4:73:24:2a:58:90:
d5:47:dc:03:38:11:b7:40:98:61:66:a8:bf:ca:3a:52:2a:21:
fc:8b:af:0f:70:36:10:a5:e5:82:e6:1b:8b:eb:4f:58:3b:43:
95:bd:2a:fb:30:f6:e6:60:d9:67:76:4e:f7:70:45:12:aa:1d:
32:01:3d:61:66:89:39:4d:1c:8a:bc:99:df:44:fc:5a:6d:9f:
2a:e0:b7:4d:d3:44:a4:88:e9:2a:09:c0:96:14:59:ca:5c:2f:
05:c3:26:89:59:f4:8d:26:1c:c1:c2:d0:69:72:94:37:c2:e5:
fc:7c:a3:46:a8:c4:94:fc:81:94:94:0b:1b:c9:10:61:01:af:
8e:68:c5:75:89:09:7c:b1:0a:b4:e5:67:09:06:c5:2c:e7:72:
bf:5f:e6:3a:47:42:93:3d:68:31:17:96:2a:ba:ba:ea:cd:4b:
4e:92:82:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:24:32 2025 by rpki-client