Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
File: WP-hTfKonLZwljbysLVwq8z4uEs.mft (raw, json)
Hash identifier: DSlVKeRY3pcSo0iWkH6EgLgb+rYwYVJRYs38sZgEADA=
Subject key identifier: 07:45:B3:D4:E6:B7:53:5B:1E:52:54:17:EE:9D:03:99:85:62:DD:CD
Authority key identifier: 58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B
Certificate issuer: /CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
Certificate serial: 0199FD32F43B06339D4248BEF2326B3345CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
Manifest number: 0CDF
Signing time: Sun 19 Oct 2025 15:59:58 +0000
Manifest this update: Sun 19 Oct 2025 15:59:58 +0000
Manifest next update: Mon 20 Oct 2025 15:59:58 +0000
Files and hashes: 1: WP-hTfKonLZwljbysLVwq8z4uEs.crl (hash: SdZE92PX2uEi/9+uabJro9cBVgS5xg5fRBJFZNFdtrQ=)
2: veLJ4L5EYT10h17WiouBEd9ghYg.roa (hash: SL3KXjVWHmfowaZ8673tndrXHNHka8vX7pXlSqc5uVs=)
3: yWqbv8m78zRPBYHcRQrpHDhQyj8.roa (hash: SfVZhow6dDvaY/ddg+fEVIx1y/Hb6m65rBhEpqp4rjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:32:f4:3b:06:33:9d:42:48:be:f2:32:6b:33:45:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
Validity
Not Before: Oct 19 15:59:58 2025 GMT
Not After : Oct 20 15:59:58 2025 GMT
Subject: CN=0745b3d4e6b7535b1e525417ee9d03998562ddcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:be:0f:71:83:e0:9f:a6:56:4f:45:f3:9e:
50:42:10:74:6d:d6:a3:0b:45:ad:c0:4c:85:f7:c6:
7b:a6:76:54:37:f6:1f:a8:02:0e:fd:b4:a1:ac:cb:
33:ec:e4:ff:7d:5f:c7:cd:52:18:7c:76:bb:8b:8d:
cf:a1:4c:f7:68:5c:49:1b:f2:56:2f:8d:00:19:b9:
81:7c:4a:cb:4f:d7:dc:3c:ff:d9:50:69:16:9c:72:
ff:06:8a:34:ad:ab:77:4d:ca:43:04:d2:97:4a:8d:
99:c8:05:05:eb:83:d3:6c:95:7c:8b:ec:21:a8:29:
6f:a3:5b:b7:c3:29:99:ca:73:d5:a5:05:d8:7d:a9:
fc:03:ce:f0:d5:fc:f7:31:6f:77:af:04:9b:3e:ad:
2d:e3:57:34:ff:3d:8e:96:a3:a2:bd:a7:27:54:1d:
e8:cb:97:e7:5a:91:d2:e0:6b:41:95:52:62:4a:3b:
93:98:bf:2b:6f:5f:20:91:e9:19:56:86:5d:19:6e:
63:40:21:73:92:91:bc:e9:aa:85:1a:d2:4b:bf:51:
e2:9f:37:25:4d:09:cb:6a:cf:0f:75:30:75:83:56:
28:77:3f:f5:c0:3d:5a:01:2a:d5:d6:3b:75:a0:5d:
91:f5:7a:f0:c8:39:60:08:3d:e0:48:4b:70:ec:1f:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:45:B3:D4:E6:B7:53:5B:1E:52:54:17:EE:9D:03:99:85:62:DD:CD
X509v3 Authority Key Identifier:
keyid:58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8d:bb:13:52:ad:67:25:69:78:35:3a:12:62:e1:42:1c:81:
ed:1e:f6:4f:cb:f4:34:2a:78:76:bc:89:50:ff:19:ca:03:c3:
2a:d9:aa:db:49:18:fe:36:2d:1f:d4:69:04:94:40:ed:85:6f:
6c:0a:a0:7c:84:99:43:fd:b8:6f:e8:9d:bc:53:ce:f8:7e:67:
06:4b:16:c3:63:3b:91:42:1f:dd:7b:c8:45:04:86:5e:50:9b:
ed:05:ef:38:1c:8e:2a:9e:3f:6b:0d:fe:87:e3:78:72:94:2b:
31:15:69:e5:08:69:76:ea:77:da:92:6b:f5:ac:17:b0:48:e9:
da:55:35:76:70:77:06:08:03:13:43:b7:cc:ca:ae:88:77:59:
90:a3:b6:6c:4b:45:c2:a5:ef:2a:a5:e4:a7:4d:21:7c:32:bf:
ff:62:35:7d:a5:dc:32:be:d3:53:8b:1c:91:e5:34:3d:c6:a4:
9f:e8:d2:13:e8:e5:10:6a:7f:26:6f:71:9a:d9:2d:74:14:aa:
2e:72:47:c4:78:96:9c:68:34:a5:3b:5c:94:bc:f3:4f:07:f1:
0b:1d:ab:6e:b6:6c:5a:5f:09:20:f6:0b:e2:85:2a:96:1b:05:
41:21:54:fe:87:fa:14:3b:12:40:fb:84:fe:e3:81:ac:f7:46:
d9:3f:af:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:39 2025 by rpki-client