Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
File: Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json)
Hash identifier: sxBWH3cqrTExKoxkgZ2Qeu+ivVVVFIlJAQ8o3yotfcA=
Subject key identifier: 67:A6:F5:58:68:16:2E:FD:D9:9D:9E:F7:1F:04:7E:89:15:29:73:1C
Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa
Certificate serial: 019A01B4EE0B93887E78EDFF47ED4FB57CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
Manifest number: 1516
Signing time: Mon 20 Oct 2025 13:00:25 +0000
Manifest this update: Mon 20 Oct 2025 13:00:25 +0000
Manifest next update: Tue 21 Oct 2025 13:00:25 +0000
Files and hashes: 1: 60T6Ej2ZJn4yFg_MS6n2i1jF0Qw.roa (hash: ixHsF6czewFe6nz5GWBS6cLi+9EpZcSZ2ufhT1ecw/Y=)
2: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: 7x1JykcXZ7ySyco3NdfN0zdMwo0XDfwZHh232qAl8j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:ee:0b:93:88:7e:78:ed:ff:47:ed:4f:b5:7c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa
Validity
Not Before: Oct 20 13:00:25 2025 GMT
Not After : Oct 21 13:00:25 2025 GMT
Subject: CN=67a6f55868162efdd99d9ef71f047e891529731c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:6e:5e:ef:39:19:20:9f:a8:b3:9f:37:a1:
92:34:a4:7e:eb:12:86:16:66:fa:ab:37:d9:ca:ee:
e8:32:aa:3e:e2:cb:6d:b0:76:51:e5:e7:02:bc:ce:
a3:38:b2:88:c7:b2:19:59:26:0e:4f:73:41:af:dc:
3a:c4:f5:6e:54:f5:96:15:e7:5b:2d:2b:da:8c:db:
07:07:3d:39:b5:3f:6c:32:79:f5:c8:fa:cc:72:1d:
ff:f9:21:c0:91:9a:2d:1b:52:67:57:2b:24:42:5a:
32:3e:e3:f8:ff:a4:70:55:19:ec:a4:bf:ce:c8:ac:
f2:55:1e:a4:90:fb:eb:7b:4c:1b:9c:83:18:50:42:
61:a3:0d:b5:ca:8d:be:5b:89:7c:dc:f0:2f:d6:11:
c6:ca:35:3e:8d:35:a5:51:db:90:7e:68:c7:bd:4e:
2a:b4:45:84:d9:6a:5a:26:6b:77:30:bb:95:1f:ba:
8c:2b:3f:b0:f2:00:6a:ce:36:f0:ec:61:4b:2a:10:
40:f2:c8:7b:17:a5:1e:7b:9a:b3:a3:2b:53:81:d1:
b0:34:a2:54:4f:17:ff:50:9d:c9:66:75:e5:10:39:
58:b6:8e:99:83:c0:69:15:e9:c8:1b:47:1a:b4:94:
e7:a5:26:de:59:24:c5:66:3b:84:a4:c0:12:01:11:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A6:F5:58:68:16:2E:FD:D9:9D:9E:F7:1F:04:7E:89:15:29:73:1C
X509v3 Authority Key Identifier:
keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:3b:08:4b:ae:63:be:da:ad:bc:67:ab:6a:fe:64:89:97:6d:
74:40:e5:d6:e5:c1:64:b5:df:9e:ec:8b:44:cd:fd:88:98:a1:
98:00:2a:74:ab:b2:af:af:c6:5b:7b:bc:34:7f:e4:86:a2:6a:
35:ac:b3:66:c1:85:3f:40:4e:dd:56:cc:34:9f:2b:6e:14:3a:
a8:75:d6:fc:15:6d:9f:2a:51:c5:7a:66:45:c8:fe:9a:c8:1a:
9b:0c:0f:9f:e7:9c:4e:99:a6:80:c7:8a:99:68:22:74:b3:92:
55:d0:a2:ea:49:ee:36:52:8e:87:2c:f3:0a:05:78:e1:c8:47:
05:3b:f6:cf:3f:6f:01:ba:7c:9f:52:65:9e:a4:d6:39:1a:d2:
5d:36:b5:6e:c8:8e:40:ba:ae:1b:f7:56:60:1b:ce:a3:15:1e:
72:fc:aa:38:7d:d7:6c:23:69:0d:6e:7d:ca:a0:7a:80:45:14:
39:25:5b:f9:ea:09:c2:32:be:91:64:a0:c7:fb:72:fa:27:3e:
19:29:c1:f2:9c:ec:6d:f4:d7:a8:11:44:d6:2e:fd:f9:f7:a5:
4d:17:30:f4:27:9a:a4:1f:0c:73:47:e3:60:bc:32:23:92:19:
3e:2b:18:02:d7:4e:f6:a3:8a:3b:dd:57:0d:83:b9:07:de:c7:
bf:d0:b4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:23:04 2025 by rpki-client