Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
File: WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft (raw, json)
Hash identifier: YOJXKeCL9cerV5D97wzTfahSl7wmrRjU73iqBl7ssyM=
Subject key identifier: 44:58:82:35:E6:28:9B:50:3C:1C:5F:D0:AA:75:1F:0B:7A:59:10:AA
Authority key identifier: 58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
Certificate issuer: /CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Certificate serial: 0199FBEBC77F38C492189BA7A3E290D40CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
Manifest number: 0646
Signing time: Sun 19 Oct 2025 10:02:37 +0000
Manifest this update: Sun 19 Oct 2025 10:02:37 +0000
Manifest next update: Mon 20 Oct 2025 10:02:37 +0000
Files and hashes: 1: HdQg4z2Zf1RFHyfPIhhO8wU76o4.roa (hash: 6V9zMRoiTuGwCa4UmUjRFtWch8Ql0rvMtNhWDgEc7Wc=)
2: WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl (hash: GIrbp3averk+DYuorZGAmPWARXaF3LOmfw0GFgQ9iN0=)
3: rztsTufSoR-W_P1Ii78nFC4FuTk.roa (hash: xuo1Ar7awubUSeGyu2ODhUDhZtyEioCr27uE58GVZok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c7:7f:38:c4:92:18:9b:a7:a3:e2:90:d4:0c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Validity
Not Before: Oct 19 10:02:37 2025 GMT
Not After : Oct 20 10:02:37 2025 GMT
Subject: CN=44588235e6289b503c1c5fd0aa751f0b7a5910aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:51:1b:e5:14:7b:d3:6d:0d:b3:9d:4e:d2:
f7:a9:6b:f6:33:14:ab:33:e7:52:a2:78:bb:7b:63:
d7:53:cc:be:32:7d:b8:06:09:c7:f7:4c:e5:a2:74:
e6:53:f8:c4:55:ac:b7:58:b8:f5:b6:ea:09:36:8b:
99:fd:57:90:49:65:76:c2:af:21:1f:fc:af:e8:76:
2c:4b:9e:51:7e:63:74:3a:bf:90:f8:a8:63:c6:2e:
3e:a7:70:fd:7b:6f:50:fe:af:cb:33:94:bd:65:cd:
f5:1d:95:65:b1:27:dc:4c:42:a5:8d:e0:a8:11:ee:
d8:de:00:36:0b:a1:b9:4b:29:f8:f8:47:a9:8c:93:
5f:bb:03:aa:3e:16:38:51:49:14:32:4e:96:60:05:
d2:66:6c:39:9c:7f:d9:51:e7:4b:a8:cf:4e:6d:3f:
03:bc:da:10:7b:2e:41:17:08:7b:c9:dc:41:bf:16:
4f:93:e0:a8:07:d0:44:5b:b8:a4:5d:78:cd:7f:c7:
cb:d8:0e:8b:da:71:96:8a:bd:93:13:74:c5:6b:01:
1e:d5:e2:5a:7f:d4:5e:75:c4:49:e0:b4:a2:f9:aa:
47:cd:c8:76:a5:31:2f:d9:1e:2d:c4:c3:a0:4d:92:
09:d8:3a:fe:61:03:81:a0:9d:28:91:53:1d:db:5c:
f3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:58:82:35:E6:28:9B:50:3C:1C:5F:D0:AA:75:1F:0B:7A:59:10:AA
X509v3 Authority Key Identifier:
keyid:58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:74:04:30:71:df:ec:6e:d8:69:d6:60:34:bb:46:8f:31:9d:
9a:c3:f6:29:e8:be:2f:56:ed:3f:7d:2d:85:58:d4:95:51:7a:
8b:40:32:9c:25:b7:0c:78:e0:43:59:73:3f:88:15:dd:7a:29:
24:e3:b7:11:ce:3e:d9:47:df:83:a8:1a:7c:ac:ca:0c:e9:3f:
4b:62:6d:f4:a8:64:55:39:ec:70:46:05:79:f8:3c:7f:15:c5:
65:ee:88:8f:f8:0c:36:fd:cb:2f:2e:8a:e8:65:49:12:f7:f7:
28:30:b5:1a:a7:d4:ee:e9:a7:2a:ca:a7:76:29:1c:aa:ea:cd:
6f:fe:67:7c:c0:50:17:ba:cb:ba:6c:76:7f:e9:f0:0b:b0:1f:
6d:58:2a:af:17:34:f8:ce:ff:47:32:02:de:a2:bf:8f:73:ed:
fb:9b:d5:1d:96:42:30:ae:52:62:59:06:f2:34:b9:b8:95:d9:
68:4b:4a:31:a9:c7:b5:91:d7:24:f5:f5:08:7a:85:f1:6b:71:
95:0a:74:f2:7a:94:46:5a:46:eb:47:51:23:9c:0e:4b:16:94:
e7:39:ea:0c:d8:0e:f4:73:25:4e:75:11:7d:01:dc:09:8e:ab:
fe:20:b4:ee:f9:e0:db:2a:74:f9:53:6d:07:be:f3:0a:de:14:
3c:73:e9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:05 2025 by rpki-client