Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
File: WvHVJdnhyP7n9RySmYQyGRL_80w.mft (raw, json)
Hash identifier: SF8Ml9TYhbmMfiqYRzyB+Z/CI7RxKnJYUs9e7uFBLbw=
Subject key identifier: B0:E6:3F:9B:B6:24:E6:E6:38:D1:62:C4:20:C4:AF:31:A9:BB:5B:96
Authority key identifier: 5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C
Certificate issuer: /CN=5af1d525d9e1c8fee7f51c929984321912fff34c
Certificate serial: 0199FEEBA98DE148D14E32232AC7BCA59C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 00:01:21 +0000
Manifest this update: Mon 20 Oct 2025 00:01:21 +0000
Manifest next update: Tue 21 Oct 2025 00:01:21 +0000
Files and hashes: 1: QHN1mo-chw8woBmyHxpHaobOHVY.roa (hash: xauKLlFs3GtWKAmak4uwPaBujz4eKBRABiwipmCaZzM=)
2: WvHVJdnhyP7n9RySmYQyGRL_80w.crl (hash: /R1rrWiYCpt0WW82bT575gqzaXmHV4C8UzzErlTOYmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:a9:8d:e1:48:d1:4e:32:23:2a:c7:bc:a5:9c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af1d525d9e1c8fee7f51c929984321912fff34c
Validity
Not Before: Oct 20 00:01:21 2025 GMT
Not After : Oct 21 00:01:21 2025 GMT
Subject: CN=b0e63f9bb624e6e638d162c420c4af31a9bb5b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f3:72:f6:aa:b0:67:2f:65:26:b7:7f:b1:d1:
4d:0e:56:7b:c9:69:a8:10:eb:50:8a:8b:84:b4:b3:
5b:57:f7:6d:d3:54:2a:76:37:3a:45:f8:99:f1:59:
4e:b2:c5:4b:f6:4b:97:6c:18:15:fc:a6:18:a7:aa:
45:f0:f0:7d:14:59:7d:cc:04:be:43:a3:52:a7:0c:
9d:e6:45:a7:dc:a0:36:11:4d:1e:96:f7:6f:35:73:
94:64:8e:68:d7:73:b6:78:08:32:19:f3:2a:ac:e6:
9b:47:75:09:5e:64:b6:ee:c7:cd:ea:78:aa:2e:e6:
42:d0:af:6a:01:ac:0c:a4:d3:c2:db:1a:e5:89:db:
4c:71:81:cd:ec:aa:00:9b:9b:81:fa:7c:f0:32:3a:
ef:f6:58:ac:57:f3:a4:1a:b3:19:ca:60:35:89:da:
49:39:db:dd:0d:2d:bc:c7:05:b4:42:a9:e6:46:27:
59:c7:c2:1a:47:4b:e9:30:ff:ba:08:0d:11:ee:6b:
58:6e:1b:ba:ea:2e:f7:a9:0d:58:dc:05:b0:71:2e:
22:7e:bd:ce:c8:a8:62:e5:87:35:4e:b0:94:33:df:
9d:c0:a1:68:a4:16:6d:be:ae:e0:97:72:f6:56:eb:
f0:49:70:86:9f:f8:70:06:1f:d4:0a:ab:6d:ae:ee:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E6:3F:9B:B6:24:E6:E6:38:D1:62:C4:20:C4:AF:31:A9:BB:5B:96
X509v3 Authority Key Identifier:
keyid:5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:20:28:ca:d3:e2:17:b6:d3:bb:4b:ee:41:4e:b3:fe:00:81:
73:88:de:5f:9c:ea:6a:f8:aa:14:97:83:7c:59:4d:34:47:72:
e6:24:53:8c:35:74:31:f4:a0:a0:a0:1a:99:d0:14:9d:72:2a:
70:c8:ff:0a:6d:c7:73:0f:b4:e5:c0:63:90:88:97:3d:99:0d:
1f:ea:87:28:2e:47:5c:96:ec:75:5a:3c:92:89:11:96:df:24:
21:9d:9f:fa:3b:ca:8e:cd:33:cd:7e:04:42:d4:e6:59:50:28:
12:53:ec:b0:1e:82:4c:a3:52:55:a7:a9:9a:f5:8d:f0:04:d8:
04:dc:b0:54:28:bf:4b:5b:fe:b3:f6:b2:27:21:fd:c3:5a:f0:
ab:26:20:0c:24:fb:dd:ce:da:6e:b0:17:4a:77:7f:3e:81:19:
fd:78:36:68:ff:91:5b:0a:58:5d:3d:3f:30:77:c6:bd:53:51:
b4:f5:14:ee:72:60:ee:af:4b:74:a7:7b:ee:35:54:24:45:f9:
40:6c:e1:33:35:40:19:da:58:ed:4b:0a:09:ad:6e:c3:92:57:
b4:89:39:55:77:16:25:59:78:ad:b2:4f:c6:94:78:7a:2b:9e:
1c:5d:07:4a:96:9d:d5:37:5d:76:f8:f0:25:dd:69:35:54:11:
5e:b7:7b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:51:13 2025 by rpki-client