Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File: WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier: p/8KY/YpShSlbvoEbbNV55yZakAxVv9aVMqDMGOAEVc=
Subject key identifier: 43:5E:3E:F5:F8:98:BF:98:BC:7A:CC:8B:CF:A0:CF:FB:45:E6:E6:6F
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 0199FAA0D1CA7CAF4F3ECB80E5A287147785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number: 1162
Signing time: Sun 19 Oct 2025 04:01:07 +0000
Manifest this update: Sun 19 Oct 2025 04:01:07 +0000
Manifest next update: Mon 20 Oct 2025 04:01:07 +0000
Files and hashes: 1: 4jM0JVjRqyqNZv5MXvbIPvqtPak.roa (hash: esLYhdOdh3leFG/PbeUzrVs3Llk7R0kG4kYUF7ITJVs=)
2: Fk-RTc_x_EZ5p-h1OUyJsVVtDV0.roa (hash: oolZPOnT9pMIdCNLzjvt7CZ7qXkkFGvNdRAoF9kj0Tw=)
3: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: mlsoUS+vxUOowEkc/czIYTdP3NLBJ8mQLbgzWRg/4TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:d1:ca:7c:af:4f:3e:cb:80:e5:a2:87:14:77:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Oct 19 04:01:07 2025 GMT
Not After : Oct 20 04:01:07 2025 GMT
Subject: CN=435e3ef5f898bf98bc7acc8bcfa0cffb45e6e66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:30:a0:5e:ef:35:c6:d0:c9:e4:64:c0:a5:0d:
ee:3d:ab:e2:51:22:da:d6:a3:b1:b1:22:aa:f0:39:
0e:0b:e4:a0:d1:f8:48:2f:68:4b:12:70:f1:d0:96:
81:c8:0f:62:64:dd:04:e8:07:6d:be:87:7c:39:b3:
dd:a6:aa:90:b4:ee:7c:30:6b:12:fc:ab:3a:75:a2:
c0:e9:f8:74:23:12:03:4c:12:c6:49:29:bf:e2:ce:
96:a5:67:9d:87:bb:16:d4:f4:7f:4d:30:b2:49:4c:
96:d0:dc:3e:d2:85:98:c4:91:9a:19:49:e9:67:4e:
24:90:78:20:69:55:c3:b4:6b:ed:1c:f2:a5:cc:46:
15:ac:c8:49:7d:60:bb:cc:4f:9b:3b:81:7d:24:56:
c7:b0:10:07:ec:2c:af:c5:46:3d:76:cf:c4:39:72:
03:b4:44:61:f5:a9:fc:e1:9a:2a:32:19:39:c3:57:
32:4e:28:26:bd:79:4f:c4:2b:ae:6e:0b:74:7e:be:
ea:2b:4f:81:48:5e:88:81:68:06:37:68:61:3c:56:
99:71:66:be:73:3d:a9:d2:a6:c0:14:bd:ae:de:4f:
51:e9:f7:ac:d9:63:68:79:42:06:28:bf:c7:5f:29:
e6:ab:82:80:c3:25:d5:62:e2:e9:e0:c8:70:01:20:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5E:3E:F5:F8:98:BF:98:BC:7A:CC:8B:CF:A0:CF:FB:45:E6:E6:6F
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4b:fe:59:99:80:29:2b:96:c0:9b:fa:99:65:aa:1c:c9:e5:
ed:6f:3f:3f:23:a5:18:a7:a8:a0:b1:ce:b2:5f:1d:19:75:57:
a6:7f:f0:14:4a:3f:a0:e0:a2:14:e4:8d:2d:bf:42:20:24:da:
9e:7a:02:30:09:6a:e0:75:fc:a4:c7:b5:3d:89:ee:7e:09:41:
9d:43:70:ff:a2:0e:15:cc:fa:1e:95:e8:90:b3:ec:8f:ee:1f:
3f:e3:98:d0:20:2b:f8:f4:40:6d:17:89:a6:23:66:8a:51:5a:
65:72:6b:ee:8c:03:70:92:47:ea:27:04:cb:37:6b:b6:0c:97:
20:69:9d:8a:81:2e:29:05:75:b2:8f:7b:44:ac:9e:9c:37:df:
8d:93:85:ed:b2:07:d2:63:9e:b8:64:58:d0:af:fe:10:bb:96:
9b:4a:9b:b5:cf:95:73:44:b4:4d:62:97:1e:98:18:ab:cd:86:
6b:56:52:22:e2:56:dc:52:da:b5:57:22:ac:c5:71:7c:5d:af:
55:bd:1d:ba:24:e2:93:50:af:89:13:53:da:4f:51:6d:86:fa:
d9:2d:ac:e3:a0:aa:e3:07:20:f3:44:d1:26:2d:40:f8:be:82:
c1:a1:fe:17:c8:cc:77:9f:04:b6:a6:a4:6e:87:1d:75:cc:17:
89:04:5d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:19 2025 by rpki-client