Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
File: Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft (raw, json)
Hash identifier: UMkT8TmirvlzARamEFQrsq90xuJ3NOeZUyLCoGRC+7Y=
Subject key identifier: F9:96:FE:BA:B9:78:5E:1E:E7:F8:8E:8B:62:9F:DF:BC:04:45:ED:DB
Authority key identifier: 5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87
Certificate issuer: /CN=5afdbf9883c18c4ce165d8b8503c6201745d6887
Certificate serial: 019A003504E345A94471446764C8013200B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
Manifest number: 1151
Signing time: Mon 20 Oct 2025 06:01:05 +0000
Manifest this update: Mon 20 Oct 2025 06:01:05 +0000
Manifest next update: Tue 21 Oct 2025 06:01:05 +0000
Files and hashes: 1: ORzdYgpKmwSJL1fVNUo6LmyhjSk.roa (hash: LmFlM+n+lX0yoflgNqGYgZ3G5C5DbphEooeee/wY1iM=)
2: Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl (hash: RejIMoHSizE71TLWwvI8X+mhLPz+NSSuZTIImn9wvo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:04:e3:45:a9:44:71:44:67:64:c8:01:32:00:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afdbf9883c18c4ce165d8b8503c6201745d6887
Validity
Not Before: Oct 20 06:01:05 2025 GMT
Not After : Oct 21 06:01:05 2025 GMT
Subject: CN=f996febab9785e1ee7f88e8b629fdfbc0445eddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:75:a6:d0:7c:d7:b0:cf:ba:27:b6:bf:fe:02:
4b:5d:cd:f0:32:da:8b:e4:cb:61:fc:83:1c:1a:a0:
6f:56:c2:c1:3d:b1:a3:fc:b1:c8:73:07:70:bd:ec:
bc:4c:c4:d3:4e:6f:fa:45:c1:d8:ce:39:f2:9e:ca:
ba:f2:68:f9:6e:9f:7f:cf:7b:6f:d6:dd:36:be:fd:
5b:7d:71:36:6b:ea:a1:41:6c:f7:7e:e8:11:31:9d:
a5:4a:4d:fa:90:32:42:01:68:7e:4d:9b:27:ae:f8:
40:10:bb:c1:e7:a7:d4:a4:d4:ce:14:e4:de:9e:af:
bd:8c:bd:76:20:ec:dc:f9:e7:25:15:13:d9:0d:18:
f3:52:35:f4:2f:95:ab:a2:82:8f:d6:ba:22:b6:20:
c7:ac:ca:c4:40:01:3d:7c:ed:d1:a9:38:a2:da:c6:
fa:de:79:7b:77:d9:55:69:25:a5:b9:da:12:1c:7d:
b5:6a:b5:a7:73:db:60:34:12:e8:d4:fc:c2:90:9a:
49:10:5f:7e:b9:17:85:a3:7c:95:5a:0b:ac:17:2f:
d3:15:10:72:2f:e6:ee:9b:b4:30:ee:9e:c5:e1:b9:
34:bd:50:81:d7:8e:db:2f:d0:2f:d0:40:5a:95:84:
e8:31:82:f1:53:c5:af:30:d8:24:cb:e4:27:bf:b8:
b8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:96:FE:BA:B9:78:5E:1E:E7:F8:8E:8B:62:9F:DF:BC:04:45:ED:DB
X509v3 Authority Key Identifier:
keyid:5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c2:8f:6c:e2:5f:f4:8b:7d:d8:e6:5e:1d:de:e7:32:f8:d7:
2c:31:65:ad:fb:45:a9:8e:5e:c1:dd:a7:57:7f:37:ae:54:24:
e7:5a:9d:48:99:8d:96:9c:52:d8:dd:af:d1:08:10:61:6f:0d:
4b:87:da:0f:65:b5:22:8e:4a:c0:1b:25:ea:fc:e0:39:12:dc:
e1:73:fc:c8:8c:99:1b:35:79:38:f7:c7:ea:91:ed:57:bf:3f:
73:1f:c9:36:f3:fa:0e:5e:92:9c:6d:b9:ab:5a:ec:d2:36:de:
1f:65:2b:77:05:a8:a5:2e:4a:a8:8c:55:99:14:ea:34:59:95:
90:a1:fe:67:d9:88:47:96:9c:38:f7:0b:82:47:c6:f1:06:6a:
93:b4:10:2e:eb:37:e6:57:b9:c0:e3:fe:48:4f:af:e4:9c:7b:
07:4f:e6:d4:cc:26:f2:7f:bb:00:6a:46:4e:db:7b:b5:d9:80:
5b:76:08:3f:e1:45:23:1b:c1:4d:76:51:55:07:62:e2:0f:de:
b9:a8:d9:a3:16:f7:6e:60:e8:7c:96:d4:7f:e8:f0:19:03:8b:
1d:eb:39:f3:99:d5:c1:af:c6:cd:f9:e8:67:e6:c0:88:78:9e:
bf:f1:72:ff:35:ef:2b:10:61:b5:6d:27:96:ff:b9:b8:90:bd:
fe:3f:fa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:41 2025 by rpki-client