Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
File: Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft (raw, json)
Hash identifier: +f7aHufQKrnG2b5rlZDiSXZM7fxccPMZzQ6EzeueYwo=
Subject key identifier: D1:C1:07:1B:F3:14:13:0A:C1:AB:97:4D:59:C2:B4:DD:FF:E6:BB:1E
Authority key identifier: 5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
Certificate issuer: /CN=5a3b1dddab33e45506ad977040924720417d5688
Certificate serial: 0199FD347E47A1726AFE9BE530436F036EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
Manifest number: 0C2B
Signing time: Sun 19 Oct 2025 16:01:39 +0000
Manifest this update: Sun 19 Oct 2025 16:01:39 +0000
Manifest next update: Mon 20 Oct 2025 16:01:39 +0000
Files and hashes: 1: Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl (hash: p5hEfj/nlNuESo0Pcg5++uHngG+e4J7hQ7rqIkxX/98=)
2: y0QD6cVeHITeOOUrewdmduPjNyw.roa (hash: d578B+uX2xF03DWPlSDJU4G4ivlMPauq0XylCe7obdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:7e:47:a1:72:6a:fe:9b:e5:30:43:6f:03:6e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a3b1dddab33e45506ad977040924720417d5688
Validity
Not Before: Oct 19 16:01:39 2025 GMT
Not After : Oct 20 16:01:39 2025 GMT
Subject: CN=d1c1071bf314130ac1ab974d59c2b4ddffe6bb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2a:b4:48:ad:2e:7c:fa:24:22:5e:12:f9:88:
5d:e4:c1:8d:27:b8:18:27:a2:e0:bb:11:e7:ec:10:
d1:f5:b2:61:7f:79:d0:75:e4:55:87:b0:5d:a5:9d:
f7:7a:db:b6:a0:63:72:81:c3:ca:14:be:c3:fd:42:
88:55:d2:19:70:c8:e7:0c:c6:ab:de:28:09:74:fb:
4a:c6:80:d8:5b:5b:97:97:af:e7:ac:a0:67:17:16:
21:0b:53:98:7b:1d:20:49:60:92:10:7e:d3:de:5f:
ca:72:11:77:92:71:be:1e:4b:00:bc:11:93:db:ca:
80:3e:cc:2e:f4:12:79:6a:f7:ef:c7:b6:d4:51:1a:
6e:61:9f:3d:98:f5:5c:c7:e5:0b:be:a1:fc:57:c8:
da:6c:f9:8c:2f:82:02:25:6d:a4:5b:ce:2c:e7:5a:
5e:53:f9:48:ec:ba:c6:ae:94:56:f6:3f:3d:c8:46:
70:3d:06:f4:01:77:d4:ed:9c:b6:36:0a:09:09:f8:
7c:e5:53:52:b7:3a:80:50:18:c5:93:ba:31:fe:bc:
9a:b8:fd:cf:be:23:4f:f1:ba:23:63:5c:3a:19:ad:
83:06:9d:dd:85:95:67:27:cd:e3:34:5d:91:12:1b:
7b:23:a2:66:45:8f:a5:b7:6a:de:da:40:52:65:78:
d5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C1:07:1B:F3:14:13:0A:C1:AB:97:4D:59:C2:B4:DD:FF:E6:BB:1E
X509v3 Authority Key Identifier:
keyid:5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ce:78:22:38:c7:a1:3d:df:bc:4f:14:28:e2:d8:ce:77:c6:
72:03:1c:d7:27:3b:f9:d9:f6:b9:34:ac:04:15:71:8b:4b:ed:
72:a4:c9:0f:91:07:b3:ce:e1:ac:5a:01:b3:1a:8b:41:b3:3a:
7f:52:b0:2a:14:23:a0:28:9b:42:4b:73:cd:5b:9a:1e:cc:4d:
6f:b6:df:2e:4b:28:6f:00:91:9b:92:24:d1:01:4c:17:01:18:
f4:eb:81:5b:5b:7a:51:88:7b:e8:f7:b2:3e:c3:0b:8a:37:e0:
75:59:65:1b:1b:7a:07:f5:99:38:74:19:f2:28:3b:04:e0:6d:
6b:a6:32:44:8f:17:e8:68:d7:26:a5:7d:57:5d:b1:07:3b:94:
b5:20:f3:62:47:eb:6d:1c:eb:1c:15:37:45:0e:2d:db:bd:24:
92:95:7d:6c:72:58:74:1a:05:8b:e6:30:a1:de:b8:3e:86:a7:
9b:06:6b:00:de:e9:10:fb:58:fb:59:35:9d:71:88:04:16:70:
f5:ee:57:63:7e:90:e7:b6:5b:3b:36:50:8a:44:41:17:8c:3a:
46:28:5d:2a:a0:28:9c:07:ed:72:3e:56:01:32:d8:55:f8:2d:
79:b0:5d:fb:34:d9:32:47:3a:77:29:6e:4c:9a:a7:12:48:49:
0e:e2:f1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:54 2025 by rpki-client