Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier: vokrHf4JxcSVbJLL+C9ZSEzZYZR5+1WyB+Cd6uUuAJo=
Subject key identifier: 41:32:E1:9B:73:33:56:CB:66:C5:44:F8:3A:48:4E:CC:A4:67:0C:D8
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial: 0199FB7CD7F0144C07F829D14E8D918CF3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number: 125E
Signing time: Sun 19 Oct 2025 08:01:26 +0000
Manifest this update: Sun 19 Oct 2025 08:01:26 +0000
Manifest next update: Mon 20 Oct 2025 08:01:26 +0000
Files and hashes: 1: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: kiErTcefaffqh6eDR7IvoHnQ3iTue97P2O94NXllvjc=)
2: dNOgTjs7jrbB9SKSSUszlaLVAjo.roa (hash: 8MLaPme8W4wf5oENh8ADBmwmizbYMot4/vQ2rLYnm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d7:f0:14:4c:07:f8:29:d1:4e:8d:91:8c:f3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Validity
Not Before: Oct 19 08:01:26 2025 GMT
Not After : Oct 20 08:01:26 2025 GMT
Subject: CN=4132e19b733356cb66c544f83a484ecca4670cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:c0:75:7c:b0:63:42:ef:ca:52:10:c2:f0:
69:37:87:80:7f:87:c7:0b:1f:2f:98:bf:b0:e8:d2:
c2:1c:aa:59:72:53:a9:06:ad:8f:b1:7b:c9:1c:cd:
cc:4d:33:21:99:4b:ab:f9:dc:13:1d:ac:d9:cf:da:
e2:57:8b:4b:13:f9:bd:3c:63:24:23:2e:5e:78:73:
62:54:87:4e:0c:a0:d0:6f:f7:22:73:df:e2:7f:2a:
84:51:b9:90:3b:fb:69:46:63:58:c4:cd:b9:3e:7a:
75:f6:69:ab:3a:e7:e8:9d:9e:d5:54:29:7b:28:16:
2a:9b:8a:39:d9:00:a5:2b:f9:d5:70:80:f3:a4:98:
49:cc:91:15:f8:05:37:56:c6:5c:34:2d:7f:b5:52:
62:c6:a5:af:d7:d0:bf:11:53:b5:56:53:9c:56:76:
b4:a0:f0:60:69:fb:13:d7:30:d5:2c:cb:0b:b0:72:
fe:14:07:a0:bf:8e:21:38:e0:f4:4e:fd:b8:8a:4e:
73:2b:03:cc:8e:b7:70:ca:dd:c3:2f:0c:29:5b:2f:
22:0c:0c:e7:01:3b:3e:dd:ae:c2:eb:47:0c:f3:da:
dc:c4:5b:88:90:5a:61:b0:6b:b0:c1:b8:38:ef:cc:
8a:a7:39:ea:b7:24:48:fb:b4:c9:f4:3f:63:e9:70:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:32:E1:9B:73:33:56:CB:66:C5:44:F8:3A:48:4E:CC:A4:67:0C:D8
X509v3 Authority Key Identifier:
keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c8:51:a6:f1:c9:9f:dd:cc:ce:7e:00:fa:18:bb:cd:fc:66:
62:0b:7b:50:b8:b8:8b:7c:7c:bb:2a:cb:4a:81:c8:34:75:ae:
a8:e4:64:64:9a:ce:d7:a9:d7:bb:64:1b:7a:e0:68:3b:cc:61:
5a:1e:f5:82:b7:9e:99:df:7f:34:27:be:7a:2e:6b:97:06:0e:
98:5c:50:d6:72:ce:74:d8:6e:39:e9:cc:26:24:1e:90:0d:5d:
3d:1e:8b:a2:ca:5d:5b:2b:32:c2:3c:36:0a:72:c0:a0:05:81:
ae:b7:28:35:2e:8d:7a:45:08:2e:18:73:da:d7:e8:04:74:8a:
65:0f:63:d3:df:6c:95:a7:77:a5:66:64:e6:36:3e:4b:37:e3:
68:0d:a7:d5:6d:63:03:a3:39:d9:93:d0:58:66:fe:dc:77:9e:
eb:ec:14:bf:af:d0:11:6e:29:2c:7b:bb:c0:8a:b1:45:e9:f2:
bd:14:7a:69:8b:8a:77:dd:ed:e1:8d:27:3e:9e:df:6f:8e:a8:
3c:42:d0:58:04:72:82:aa:e1:ec:85:2e:8b:cf:7b:3d:24:07:
df:1e:65:b9:bb:5e:15:9c:ee:4e:81:36:1d:a3:1a:68:aa:22:
67:c9:3c:99:e7:5b:f1:88:28:68:38:c2:62:12:ff:15:49:75:
44:8e:49:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:21 2025 by rpki-client