Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
File: WwyVAj-g0zsibu8vIsjso5BSa_A.mft (raw, json)
Hash identifier: WUcDKRinnL8M9Ds4bUSj81nPSkYI4t96bUEAZmJ9IHk=
Subject key identifier: 16:6C:E9:E9:98:1C:16:5C:F0:43:73:28:F0:ED:BE:A2:36:F5:A1:A6
Authority key identifier: 5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
Certificate issuer: /CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Certificate serial: 0199FD340DEB30B0A0E4F34E273EC8096355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
Manifest number: 0E17
Signing time: Sun 19 Oct 2025 16:01:11 +0000
Manifest this update: Sun 19 Oct 2025 16:01:11 +0000
Manifest next update: Mon 20 Oct 2025 16:01:11 +0000
Files and hashes: 1: WwyVAj-g0zsibu8vIsjso5BSa_A.crl (hash: ZI0Y85R3+yfBlX3RsMrdscacuGNZjdIl1JJX1RggIkU=)
2: wllNqt1P393lVw_WgHLjVq0jQ3M.roa (hash: BBqAMtasXCpwxv6WN/tQ+Ub2hvQgjIJGzl78O7sCb5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:0d:eb:30:b0:a0:e4:f3:4e:27:3e:c8:09:63:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Validity
Not Before: Oct 19 16:01:11 2025 GMT
Not After : Oct 20 16:01:11 2025 GMT
Subject: CN=166ce9e9981c165cf0437328f0edbea236f5a1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a5:c9:27:6a:d2:11:db:a2:a0:5a:91:00:8c:
81:67:ae:b7:9a:9f:37:93:aa:ff:ac:09:6a:3a:df:
ae:dc:b9:e1:5a:95:ec:02:7f:76:e3:8f:dc:b7:14:
db:86:51:10:b0:8c:66:e3:4e:12:49:72:99:44:1a:
97:2b:ff:17:48:8d:e9:19:d4:53:a1:54:80:0d:30:
69:9b:94:52:92:1b:4e:fc:58:0b:42:d4:6f:ae:fb:
07:5b:23:60:71:65:7c:3b:63:20:04:32:dd:bb:6b:
dd:0a:57:d7:05:0e:98:e0:9d:d9:78:af:0b:97:f2:
bf:df:ba:7e:6b:e4:c0:5a:70:ec:b9:a4:73:aa:80:
48:a7:00:13:57:f4:c7:20:c8:29:69:46:37:34:f4:
9c:f1:0a:4a:63:16:3f:12:ac:ed:5e:85:a1:d4:55:
57:83:5b:36:8f:c8:5a:38:aa:4b:b6:c3:f2:a0:39:
8a:8c:f4:12:9c:46:44:65:55:f9:95:08:e9:7a:a8:
25:17:d9:2a:4e:6a:6d:c1:b7:6c:da:2c:98:04:93:
a1:cd:be:82:37:a9:fd:d6:62:36:49:55:a6:2d:c3:
2a:d0:70:b8:03:69:cb:ed:39:aa:08:59:ef:9c:39:
84:c7:cc:b1:a9:c6:22:27:ed:23:55:8c:6f:87:7e:
be:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6C:E9:E9:98:1C:16:5C:F0:43:73:28:F0:ED:BE:A2:36:F5:A1:A6
X509v3 Authority Key Identifier:
keyid:5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:47:6f:07:1a:78:0f:b4:3b:f8:39:f7:8a:34:9e:97:3f:98:
39:66:f7:cf:65:8b:ac:ac:cd:d1:10:85:40:b5:70:bf:6d:59:
61:ab:df:d2:c6:33:10:3f:04:05:19:47:3e:47:19:a7:2c:b3:
30:d6:9d:f5:18:57:db:2b:fd:27:27:80:f3:f9:d1:13:48:0f:
33:08:ea:5c:6c:ae:4a:7d:c9:51:b2:3a:e0:2f:af:b1:0d:12:
4b:fb:8a:35:53:ee:60:6a:8b:5b:87:2f:af:7c:09:1b:fe:94:
e1:46:4a:df:06:61:c8:6a:80:38:a2:77:90:3d:d2:5e:65:54:
8f:52:6a:20:59:83:54:88:01:82:17:de:e1:8e:49:19:6d:f3:
39:a8:84:a5:23:44:90:62:95:13:d2:8c:3f:ac:3c:1a:68:46:
e8:79:e3:59:f5:e3:67:5a:10:57:2a:2c:61:8c:4d:9e:7b:9a:
64:29:85:ef:da:89:c7:3c:cd:88:de:93:30:30:9d:fd:64:1b:
6c:d8:74:0e:62:b9:79:22:34:6d:95:17:cd:45:7d:01:a3:a1:
b4:73:56:d2:70:a1:61:88:cc:19:4a:ff:c5:86:fa:0f:35:62:
02:cf:9a:e2:da:77:2d:64:6d:65:e0:bc:7a:f4:d5:b2:3d:8e:
d6:5c:67:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:21 2025 by rpki-client