Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
File: WzgltIs1me_6oLyBqN3bmPHYAsQ.mft (raw, json)
Hash identifier: g3GBUN8b+XenNSEh0K6XNZ/NhyCw1AVDBdFvyPLhCkI=
Subject key identifier: 5B:1A:39:3A:6A:38:FE:61:12:61:B3:E3:C5:0B:6A:D9:6E:8D:D2:2B
Authority key identifier: 5B:38:25:B4:8B:35:99:EF:FA:A0:BC:81:A8:DD:DB:98:F1:D8:02:C4
Certificate issuer: /CN=5b3825b48b3599effaa0bc81a8dddb98f1d802c4
Certificate serial: 0199FC58DA1A29BC184B856E0C38E3E80C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 12:01:45 +0000
Manifest this update: Sun 19 Oct 2025 12:01:45 +0000
Manifest next update: Mon 20 Oct 2025 12:01:45 +0000
Files and hashes: 1: WzgltIs1me_6oLyBqN3bmPHYAsQ.crl (hash: lKV9TT5N5fIcM739xjQvYO/s0PKkyI1IGeOf++fpF5I=)
2: iiZidHMAHkbcf8XyOTt3Z_vw0jE.roa (hash: xKnilsXqPSaJ4FjR+VlNoOzanS4pqyzg7Ofj3A9rVOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:da:1a:29:bc:18:4b:85:6e:0c:38:e3:e8:0c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3825b48b3599effaa0bc81a8dddb98f1d802c4
Validity
Not Before: Oct 19 12:01:45 2025 GMT
Not After : Oct 20 12:01:45 2025 GMT
Subject: CN=5b1a393a6a38fe611261b3e3c50b6ad96e8dd22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:74:0a:46:9c:16:52:cb:f6:a9:08:f0:c0:a2:
33:5d:4a:97:ce:f6:d9:c2:4b:1e:20:92:e2:c7:e3:
cb:c2:0b:da:c7:09:d8:68:3a:33:4e:f0:e7:10:12:
8a:28:51:f2:48:bd:8b:5d:8f:42:2a:ee:46:fc:3e:
b0:c8:42:4f:14:46:39:49:57:41:f0:ff:20:d7:6d:
d2:79:a2:e8:c6:02:b2:28:34:19:9c:ad:7e:1b:4c:
d5:65:8e:d4:54:8f:af:e2:ea:93:a0:e9:47:39:12:
c2:77:1d:58:b1:89:86:36:de:bc:5a:ce:c0:c2:c4:
d7:de:a1:d0:67:f0:83:3a:f8:27:1f:a3:71:da:03:
71:c8:59:b2:9a:32:8e:14:ff:6c:fd:0d:c6:eb:f7:
e7:f6:38:c3:ab:f2:a2:cb:18:97:aa:05:ff:31:a3:
a0:c7:f4:e1:f8:83:10:f9:6b:cf:e5:06:e2:0e:aa:
ec:c9:8e:e1:a7:af:3f:66:0f:c4:86:69:fd:14:9a:
84:7f:6f:e7:09:1e:1b:d1:69:ad:2d:3a:c4:9b:29:
05:a3:20:32:f5:62:0b:0e:5c:59:01:34:f2:e8:57:
e9:5d:42:78:f5:8c:4a:52:49:3b:92:0c:6e:ce:2b:
64:f5:05:72:27:b9:76:0a:43:12:32:9c:3e:51:4a:
75:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1A:39:3A:6A:38:FE:61:12:61:B3:E3:C5:0B:6A:D9:6E:8D:D2:2B
X509v3 Authority Key Identifier:
keyid:5B:38:25:B4:8B:35:99:EF:FA:A0:BC:81:A8:DD:DB:98:F1:D8:02:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:63:f4:d1:d4:3c:64:47:e3:51:3a:a4:0a:32:9b:52:59:96:
46:8d:0f:a5:7e:84:d1:5a:82:95:4e:9a:c8:eb:0b:8c:49:d8:
66:cc:6f:0f:be:e2:a6:1a:15:3e:fc:09:df:b7:20:a8:4a:57:
ec:a3:6f:37:69:7d:5c:84:d3:f6:42:16:17:bd:06:b2:6a:e5:
f0:4e:e5:83:94:24:f6:2b:0d:56:e3:c0:b9:aa:9f:20:b6:19:
ce:69:66:71:23:d7:6c:6c:84:61:98:8e:31:3f:bb:e0:62:e0:
1e:d8:29:eb:2c:e1:91:42:ee:78:5f:c0:50:67:11:e2:2d:c3:
d1:78:b2:99:d0:c3:3f:62:66:78:f0:26:dd:b4:32:4e:19:d5:
2d:46:44:24:94:90:e9:40:04:e3:73:17:0c:9c:c9:38:05:53:
dc:1d:0f:5b:84:93:3b:fb:44:eb:20:9c:87:ef:bb:33:e1:00:
d3:fd:83:51:05:53:49:27:f6:49:90:de:4a:64:02:ae:7b:a9:
6d:9a:de:bd:b4:f0:7a:29:ca:dc:25:cd:56:de:0e:d7:40:12:
d3:96:03:50:f6:6d:75:af:10:0e:05:7a:b3:f1:8f:f8:0f:58:
3a:2b:9c:21:81:7e:b3:68:e6:d1:0f:62:b6:4b:c4:1a:a8:39:
bf:22:3c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:09 2025 by rpki-client