Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
File: WVt4mYk7niSL5hVd9EX2MK5daHI.mft (raw, json)
Hash identifier: ZrcmKNpmhtGV19uwuga8GCc2/Bk4qxwqa8AE2GRD/0E=
Subject key identifier: AA:7F:28:9C:58:AF:EB:AA:65:CF:E6:5C:D0:78:D1:8B:F3:A3:09:7D
Authority key identifier: 59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
Certificate issuer: /CN=595b7899893b9e248be6155df445f630ae5d6872
Certificate serial: 0199FCC651DFAA71B88E9DD791FAB51E2602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 14:01:19 +0000
Manifest this update: Sun 19 Oct 2025 14:01:19 +0000
Manifest next update: Mon 20 Oct 2025 14:01:19 +0000
Files and hashes: 1: 5-_m5sx2pOrKBnn6vsQwme9LIWs.roa (hash: h/D8Ki0B/ZgXWanH4BZ9jNHNZb1ZLuVPvKx+u3l030A=)
2: WVt4mYk7niSL5hVd9EX2MK5daHI.crl (hash: qWt5N6DhQK35ilt8RA5PvwPYHfkp8A0NuzpK8tN/4mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:51:df:aa:71:b8:8e:9d:d7:91:fa:b5:1e:26:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b7899893b9e248be6155df445f630ae5d6872
Validity
Not Before: Oct 19 14:01:19 2025 GMT
Not After : Oct 20 14:01:19 2025 GMT
Subject: CN=aa7f289c58afebaa65cfe65cd078d18bf3a3097d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:30:d1:e4:ba:3f:fb:d8:f0:24:20:2d:24:09:
44:7c:57:d2:e2:25:cf:d8:bf:85:44:be:9e:9d:66:
3c:bc:e7:e6:12:30:d2:9d:4b:d5:b6:50:f8:1e:9e:
0d:6e:5e:c7:85:6e:64:71:dd:a3:d8:b3:3b:8d:bc:
88:de:a0:10:ce:8c:11:59:1f:cb:c0:c5:8f:a3:60:
9e:62:60:36:86:f7:b1:de:87:1a:b3:98:5f:d0:12:
38:82:1e:1e:89:07:69:af:31:9a:3a:26:df:b8:54:
b6:e3:99:4c:0e:a8:1f:5f:ed:b1:79:a3:d7:60:eb:
ed:e3:da:d9:9a:04:78:45:9a:7f:0b:41:5b:b5:36:
ed:d5:eb:95:c2:55:5f:1c:29:10:06:f4:98:6a:01:
2b:84:b9:18:8b:d7:86:d3:9e:9f:09:cf:6a:0c:c5:
24:a3:c2:46:32:18:3a:16:9d:49:80:28:23:34:27:
ac:d7:30:e3:72:ee:b3:c5:8d:ad:1e:62:80:40:37:
6e:09:7c:b6:93:c9:bb:25:fe:a6:f8:25:52:a9:5c:
fd:4e:4f:81:2b:b7:11:5b:ef:e4:b7:aa:f0:07:79:
d1:82:6f:30:d7:41:c4:84:b1:24:78:fd:e7:ea:8b:
08:a6:3d:f0:c6:21:5f:01:49:66:1c:94:1b:0e:7e:
33:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7F:28:9C:58:AF:EB:AA:65:CF:E6:5C:D0:78:D1:8B:F3:A3:09:7D
X509v3 Authority Key Identifier:
keyid:59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2a:10:dd:cb:57:89:32:2d:16:ec:9a:4b:c2:2b:98:56:d3:
fb:d1:7d:4d:d6:84:0d:1f:a4:87:80:44:de:ea:11:82:e3:3a:
e3:39:f6:d5:97:f4:db:8a:fd:f3:a4:69:1d:75:67:a5:ad:7b:
00:9c:57:d6:45:64:80:cf:bf:64:53:d3:08:53:27:14:a7:a6:
02:f6:c8:77:f4:7c:75:4d:b6:aa:05:21:94:84:9a:91:19:0e:
6c:f6:69:f1:e6:3d:26:0f:ce:43:7a:b8:d6:09:a9:c5:c8:1e:
46:f5:a8:e8:90:d9:e8:f3:b8:cf:9f:97:ca:20:22:7d:eb:54:
08:16:bb:53:70:76:39:c6:c7:61:56:26:52:ac:87:8a:16:ac:
96:20:83:00:80:be:df:a4:26:c5:ff:7c:5b:10:79:42:d6:bd:
21:5a:ec:70:4e:37:95:1e:8b:8a:9d:41:37:80:00:19:4e:f7:
49:92:40:f1:ae:02:95:3f:51:82:d7:fe:55:6f:5c:e0:e1:f4:
3e:16:9b:c9:29:0f:8b:d6:7f:f8:98:64:c9:11:8f:ce:47:4a:
0d:2a:1f:10:48:e9:d6:c4:d9:9b:ac:13:d2:a8:f7:07:30:ab:
b5:bc:5e:fc:8e:4b:a3:51:4d:31:d5:90:12:71:7c:67:8b:90:
42:7b:a9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:36:14 2025 by rpki-client