Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
File: WCroA98isFXHTl_o8R2UQIlWDtI.mft (raw, json)
Hash identifier: Ro02xvVqGcbF5KXl649TahJMAQAinrKwlvVXbxjBCNE=
Subject key identifier: 7D:D4:DD:74:CA:C0:B8:7F:8C:95:C4:1F:09:F1:5B:DA:B9:07:C6:26
Authority key identifier: 58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2
Certificate issuer: /CN=582ae803df22b055c74e5fe8f11d944089560ed2
Certificate serial: 0199FC58C4480DDFE49856E523BBE35D25DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
Manifest number: 0171
Signing time: Sun 19 Oct 2025 12:01:39 +0000
Manifest this update: Sun 19 Oct 2025 12:01:39 +0000
Manifest next update: Mon 20 Oct 2025 12:01:39 +0000
Files and hashes: 1: 5Vle3KGfqnVJEdmvBasCstldoz8.roa (hash: Rl95m9yb5FSNGdnRgF3OQpiAhZ5L8MWgdG8dVfAGWKo=)
2: WCroA98isFXHTl_o8R2UQIlWDtI.crl (hash: rk1aAEB5HQsFcbhejX+RtS7qu0rE7lnSATSqjtJyTaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c4:48:0d:df:e4:98:56:e5:23:bb:e3:5d:25:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582ae803df22b055c74e5fe8f11d944089560ed2
Validity
Not Before: Oct 19 12:01:39 2025 GMT
Not After : Oct 20 12:01:39 2025 GMT
Subject: CN=7dd4dd74cac0b87f8c95c41f09f15bdab907c626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:cc:0a:28:23:b0:0e:50:76:8f:3a:de:27:
df:a8:a5:f6:ff:36:61:60:5b:4e:a7:67:25:86:eb:
e2:05:58:91:a6:0d:00:6e:2a:bc:58:19:03:2b:f1:
c3:8f:87:dc:4a:4f:cf:f6:f9:b7:94:31:e9:50:d1:
a2:72:3a:1a:8c:fa:bd:4a:af:fb:35:a1:0f:81:d9:
14:36:78:33:7e:41:d7:e8:98:b4:61:e6:d8:3e:0b:
08:77:bf:32:be:bf:9c:96:a9:a5:c6:8c:3c:6b:e0:
a6:4b:b9:93:b3:d9:c5:15:7e:f8:84:f2:fe:37:e6:
56:7d:c3:c6:d9:70:56:e9:71:30:80:0a:7c:e4:22:
3d:ee:08:06:d1:29:68:99:42:6f:37:6a:78:c7:02:
72:57:27:43:35:7f:c2:bd:25:46:89:d0:b7:82:bd:
06:96:a5:a5:12:a5:c1:37:2f:fc:97:37:78:83:c7:
b2:db:d3:e5:2e:c0:64:19:d3:12:66:7f:d2:fd:b8:
c5:e7:c7:c4:e0:e4:1e:47:ad:8e:68:4a:4d:59:21:
6a:1f:09:19:0c:3a:5a:39:76:5e:51:5d:20:c7:22:
f8:60:8a:c0:87:38:08:3c:a6:ac:e6:82:e8:be:c9:
4c:d8:21:66:f8:d0:ce:73:7c:dd:bf:8f:99:ea:61:
9f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D4:DD:74:CA:C0:B8:7F:8C:95:C4:1F:09:F1:5B:DA:B9:07:C6:26
X509v3 Authority Key Identifier:
keyid:58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:21:23:30:90:d9:21:ba:50:5e:38:3a:3b:6b:bd:4c:96:0a:
2b:3c:13:2f:13:6f:55:1d:d4:8d:a9:9a:44:1f:c7:70:61:8e:
b6:ac:02:82:0f:4e:21:86:23:e3:09:78:b2:f0:41:56:d6:4a:
57:2f:6e:09:26:4d:6e:d8:25:a1:24:29:23:ff:48:2d:cc:00:
3f:8a:04:a2:34:0a:0c:51:78:84:7a:2e:7a:a1:a7:69:fa:dd:
b5:18:60:b5:25:31:04:5c:70:5c:e8:fc:fe:0d:5c:b5:6b:0f:
65:fc:13:ab:26:09:1f:09:19:56:d5:73:8c:cf:81:bb:5f:25:
b9:53:85:57:a5:c2:ab:15:26:98:f8:9f:92:7c:61:d8:03:6a:
4d:c8:92:36:2c:a7:73:f1:2c:8c:2d:22:ab:0a:b3:d7:d3:78:
90:d1:dd:3f:45:52:70:ad:5c:52:94:c2:e9:b6:66:6e:22:33:
03:3a:60:20:f7:a5:90:3d:9b:ad:ad:a4:da:c9:a7:73:56:2a:
53:ee:31:a4:fa:c6:2a:6f:29:c7:fd:2f:51:12:1b:33:13:c8:
55:d9:92:4c:ed:84:c5:32:fe:88:73:4d:fc:74:c2:b4:ae:78:
82:7c:fa:ef:c4:11:cf:04:03:b8:1b:d2:93:30:a0:e0:6c:91:
83:5d:32:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:00 2025 by rpki-client