Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
File: WF2Wj1vhzmceINWDHBcAAfNy090.mft (raw, json)
Hash identifier: CEbVX/N/zFIc0eEyienSQtbGd053QGsQXRH1ZdJW1Ls=
Subject key identifier: 53:4A:A3:33:5F:22:18:3E:22:BB:3C:15:2A:03:F4:68:FF:96:13:F4
Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
Certificate issuer: /CN=585d968f5be1ce671e20d5831c170001f372d3dd
Certificate serial: 0199FAD7ED1D7B0EF1ED505BC3C8EB2D91FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
Manifest number: 1690
Signing time: Sun 19 Oct 2025 05:01:18 +0000
Manifest this update: Sun 19 Oct 2025 05:01:18 +0000
Manifest next update: Mon 20 Oct 2025 05:01:18 +0000
Files and hashes: 1: WF2Wj1vhzmceINWDHBcAAfNy090.crl (hash: umHCiTcUeK8+u4xxbJc47SfTgK13WhHiGN5GEDdHkDM=)
2: kMkaJavkPA06Y44CWRSY630HVLw.roa (hash: T85LjnoIHLJZIbJyI8O+ldJqpb1UlV1mAtOahfZHzpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:ed:1d:7b:0e:f1:ed:50:5b:c3:c8:eb:2d:91:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd
Validity
Not Before: Oct 19 05:01:18 2025 GMT
Not After : Oct 20 05:01:18 2025 GMT
Subject: CN=534aa3335f22183e22bb3c152a03f468ff9613f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:53:97:7c:53:f1:79:60:31:3e:48:cb:66:
65:25:1d:02:31:10:57:52:1e:e7:d4:ba:21:2a:d4:
53:9b:c1:d2:4b:1b:e5:ab:56:6d:dc:78:9d:c6:3e:
89:2e:3d:d6:1e:27:91:af:50:0c:a5:0f:39:6e:c3:
e2:12:9f:e0:02:1b:7d:25:f9:e1:83:e5:01:e9:3e:
01:10:4a:9f:50:a7:7a:f5:69:81:1e:6d:37:c2:ac:
63:b2:62:50:e1:3e:03:fc:f6:f3:ee:15:c1:bf:d1:
6a:47:3e:9b:b3:1a:91:07:98:85:bb:ab:02:8f:a0:
28:f7:a8:22:a7:9a:6d:00:ab:a5:87:9d:2a:05:20:
3a:62:aa:44:bc:c0:2d:59:ec:f9:c5:80:5c:df:db:
2f:80:20:bf:49:97:03:4a:93:3b:d9:22:b3:8a:c6:
06:e9:bc:7f:93:65:4f:e3:29:4b:e2:bb:b1:67:9f:
f5:14:6c:cf:e0:ed:bf:25:ad:9c:aa:c0:b0:9b:49:
ee:e0:fa:e3:e4:f6:43:b1:96:f4:69:38:3c:18:ee:
f7:9e:2f:fd:ab:de:89:0c:2d:9c:0e:d4:dc:31:ab:
ef:52:43:5b:29:ff:40:59:3d:ca:a0:48:bd:cb:88:
e3:a0:11:f9:44:79:36:fa:29:65:c2:fe:d2:5b:02:
20:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4A:A3:33:5F:22:18:3E:22:BB:3C:15:2A:03:F4:68:FF:96:13:F4
X509v3 Authority Key Identifier:
keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:85:8b:bf:22:44:af:97:3d:25:bd:ae:66:95:1b:79:bb:87:
97:d7:5f:bc:04:ec:dd:1e:ae:85:73:94:37:7a:a2:0d:aa:5b:
6d:36:02:58:76:33:4f:13:76:dd:d2:46:a0:4d:8c:5f:3e:8a:
8a:54:65:38:3a:d9:c0:a0:8a:f4:6b:18:93:7d:99:d1:78:42:
26:63:8e:04:9a:40:cc:f0:9c:d7:8b:04:4c:0e:fe:61:4e:ad:
65:10:e8:b9:e5:fe:52:66:56:86:c6:50:6b:d5:b0:98:d1:cf:
9c:79:d6:f4:76:90:d9:b3:5e:87:10:be:78:24:cb:b0:f1:9a:
34:72:a2:1a:9a:1b:59:77:f3:0b:28:1e:ba:f0:fd:89:73:ea:
ba:83:d9:b6:8e:33:17:70:7d:00:df:09:e7:d5:4a:be:95:c0:
f8:23:0e:74:37:af:59:98:b4:c6:01:25:b6:af:20:64:9e:67:
02:52:79:1c:70:86:9c:7f:73:06:be:95:69:a0:4d:6a:86:33:
a6:91:8c:e7:04:60:a2:89:15:39:1e:8f:4d:ab:7f:0a:61:f8:
9b:83:c0:50:9c:f6:d1:45:0c:59:ca:cc:9f:1a:24:d9:26:6b:
c8:d5:6a:82:f6:84:ae:c2:74:b6:05:dc:24:36:22:c2:9c:11:
a3:f1:0d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:23 2025 by rpki-client