Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
File: WEfx9Pa8sqR1isipl7wQgADkGNE.mft (raw, json)
Hash identifier: +Sry6L3rXTwTTt3Pdc5OheIo0/gBa6cpLxdijvAchb0=
Subject key identifier: D1:FF:46:1D:15:C2:FF:52:CF:94:40:7B:9E:57:B6:98:71:95:BF:B5
Authority key identifier: 58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
Certificate issuer: /CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Certificate serial: 0199FFC7CDEED951E4FA8B9DDB8AF8A8726E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
Manifest number: 0A6E
Signing time: Mon 20 Oct 2025 04:01:48 +0000
Manifest this update: Mon 20 Oct 2025 04:01:48 +0000
Manifest next update: Tue 21 Oct 2025 04:01:48 +0000
Files and hashes: 1: WEfx9Pa8sqR1isipl7wQgADkGNE.crl (hash: Ta4H9qV7jkVEc2nfRgj7RqfhI+6auEDuUxy7z4srttc=)
2: wIsKAJrVffRqz6laEWhWTAS6tTY.roa (hash: V1Qapun8icHJI/Zpv+MiEjbXSsE72DuavneqFQZT08I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:cd:ee:d9:51:e4:fa:8b:9d:db:8a:f8:a8:72:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Validity
Not Before: Oct 20 04:01:48 2025 GMT
Not After : Oct 21 04:01:48 2025 GMT
Subject: CN=d1ff461d15c2ff52cf94407b9e57b6987195bfb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:e3:2e:64:25:f5:c1:dc:4b:a3:4e:54:a5:
ea:f0:9c:9b:da:f2:61:bd:21:79:06:08:9e:a0:22:
08:82:ab:c8:23:50:16:69:0e:0f:2a:e5:7b:13:b7:
97:0c:c3:8a:ca:3d:f3:a2:5f:f2:5a:df:c0:b5:9c:
dd:75:e1:0b:5f:dc:f7:3d:1b:7a:96:b4:95:f8:72:
fa:38:69:cd:8f:3e:83:9f:6d:91:68:49:45:c0:08:
c6:fa:5f:c1:74:d5:bf:0f:6f:7e:4e:08:aa:21:89:
d5:27:e8:79:73:a1:7c:33:16:49:30:6b:f9:6b:6a:
a6:f8:81:bb:15:a3:3e:2e:7d:76:2a:4f:dd:18:27:
a1:51:c7:23:5e:e7:e2:6d:41:bb:ad:d1:fe:61:61:
94:04:09:17:ec:90:0c:40:18:b2:5b:96:a0:de:11:
df:ff:71:00:9a:2a:5a:be:34:83:25:6f:fb:d7:8e:
93:dc:56:1b:cc:80:74:8e:a5:9e:be:70:e0:16:3f:
c2:58:a3:3b:81:ac:fb:87:16:5e:a9:3b:28:bd:bf:
ca:4b:5d:9d:b1:86:f8:29:37:4c:b6:cc:ff:3d:87:
96:86:83:b9:76:4b:d4:7a:03:f7:6b:83:0c:37:b0:
ed:2d:63:0e:30:e2:64:a4:f4:62:d4:3e:28:3b:73:
da:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FF:46:1D:15:C2:FF:52:CF:94:40:7B:9E:57:B6:98:71:95:BF:B5
X509v3 Authority Key Identifier:
keyid:58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6f:f2:88:f2:ff:7c:72:3a:6e:c3:24:10:97:7f:ab:48:66:
1b:51:a7:ae:cb:1e:7e:d3:e8:fc:02:cc:4c:f0:3d:a7:90:b4:
b7:ce:b0:e1:12:cf:ed:28:22:2d:80:67:cc:25:e8:e3:68:d2:
70:f0:dc:aa:1f:e3:58:95:6b:bf:3a:26:f8:b6:06:14:bb:9b:
bf:dc:3c:3e:bd:8e:40:1d:9b:32:1f:22:21:59:d7:06:bc:3d:
47:3f:7d:1e:1f:e9:80:0c:6a:33:67:46:b0:7e:60:a6:4b:8e:
6e:32:34:18:62:4f:d0:00:09:39:0e:35:86:4b:0b:69:80:e3:
b5:cf:47:b0:7a:c6:9f:2b:85:00:fa:3a:5d:06:95:5b:04:44:
b2:47:d9:84:d0:df:ac:b1:c8:a9:43:41:61:58:85:49:23:43:
5a:2d:55:2d:ec:cc:80:f3:e9:b0:b4:2c:fb:5e:ea:06:c5:b0:
b8:5d:f5:d4:cf:0b:6b:4c:e5:0e:97:32:b4:4f:08:1f:a3:44:
a7:8a:82:a8:83:b5:cf:43:cb:87:c6:0e:9d:57:43:e3:3c:8f:
59:d4:1c:b3:1f:9d:0b:7e:3b:56:c9:c4:7b:c7:85:44:5a:1a:
61:80:f7:82:52:72:79:2a:3b:41:86:86:2f:ea:dc:43:0e:1b:
69:72:4c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:21:11 2025 by rpki-client