Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft
File: Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft (raw, json)
Hash identifier: MxR1lyW4tdlhXZC1jGjXrmz8lhJPEx1vXL5yCv6Qu2Q=
Subject key identifier: 8B:01:7F:9D:6F:B7:2A:FB:C7:EF:C2:AA:2F:27:73:14:29:70:4E:5E
Authority key identifier: 5A:8D:85:B2:E1:EC:1F:21:DC:AC:5D:58:79:E6:9C:B3:42:FD:14:79
Certificate issuer: /CN=5a8d85b2e1ec1f21dcac5d5879e69cb342fd1479
Certificate serial: 0199FC8F6CEAD22B1560481F4FDE4E381A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft
Manifest number: 028A
Signing time: Sun 19 Oct 2025 13:01:21 +0000
Manifest this update: Sun 19 Oct 2025 13:01:21 +0000
Manifest next update: Mon 20 Oct 2025 13:01:21 +0000
Files and hashes: 1: LMxG4l0eF9eJnp89vxztiAbfpWQ.roa (hash: pvqnV3wqhGmX8KDOv1jOvLMFpSWPvUzeNMWmPHFAIwc=)
2: Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl (hash: Pfx+K8uX/VRw8FRzHrrVed1XlUrqy0IBaS8t9bY30b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6c:ea:d2:2b:15:60:48:1f:4f:de:4e:38:1a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8d85b2e1ec1f21dcac5d5879e69cb342fd1479
Validity
Not Before: Oct 19 13:01:21 2025 GMT
Not After : Oct 20 13:01:21 2025 GMT
Subject: CN=8b017f9d6fb72afbc7efc2aa2f27731429704e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:0c:b2:8d:be:32:53:be:b5:0a:79:95:a6:
0b:76:0e:80:e8:cc:30:05:df:b3:86:ef:15:98:7a:
0f:b8:f4:b8:cd:13:77:6f:95:27:d1:c4:31:8e:fc:
c9:fb:26:5a:23:45:b5:27:85:e1:2a:63:0f:e2:f9:
5d:37:75:f6:24:d4:2d:8d:a3:1c:ca:ea:be:01:d8:
70:31:26:db:a0:93:61:85:3b:26:eb:8d:03:68:4b:
24:4f:51:a4:b4:31:fe:e8:01:2e:7b:af:dd:ef:20:
4d:04:73:7b:43:32:e5:36:3a:68:35:bd:66:fb:eb:
be:da:3b:86:09:64:8b:1d:82:4c:7b:87:a8:b1:8c:
62:1f:b0:9e:18:c1:bd:5f:e5:23:f6:16:86:6d:3a:
10:a9:84:16:94:08:49:eb:60:c6:a6:1a:80:44:18:
68:29:e6:d4:6b:b4:a4:fa:ca:03:f6:e3:3b:b6:70:
7d:d2:23:e9:1c:f5:67:33:24:9c:22:4b:11:7c:f7:
77:97:df:4d:7b:e1:c7:16:44:21:50:e7:46:a9:3f:
3c:20:16:39:83:36:ce:c5:6c:f8:de:19:89:db:d2:
8a:de:0c:34:f5:94:79:b9:86:33:66:9b:94:d4:50:
59:88:3c:c6:d8:9f:ee:f2:ad:81:0f:da:e8:4a:22:
f6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:01:7F:9D:6F:B7:2A:FB:C7:EF:C2:AA:2F:27:73:14:29:70:4E:5E
X509v3 Authority Key Identifier:
keyid:5A:8D:85:B2:E1:EC:1F:21:DC:AC:5D:58:79:E6:9C:B3:42:FD:14:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:01:f7:ad:06:91:7a:21:fc:15:66:fa:29:37:07:66:8d:0b:
e8:89:a1:e7:9e:d8:1e:17:bf:e9:21:39:26:95:0e:98:1f:f0:
a0:dd:79:fb:40:eb:b8:f8:04:63:0f:e9:d9:d0:fa:08:12:60:
37:bb:a8:46:7b:c0:d6:da:3c:c1:a9:eb:6d:22:1d:47:c1:79:
a1:be:af:6e:ab:27:6a:d6:da:45:d9:0c:64:05:31:49:c0:14:
41:9c:9f:2a:d9:78:52:b5:c1:64:81:a7:3c:86:45:00:ae:7c:
ab:8b:6e:be:e4:4a:17:dc:d1:ec:d3:ea:84:5b:fe:77:b2:f3:
43:23:eb:27:8e:38:49:68:03:8f:43:81:43:b6:0b:08:9a:14:
66:60:51:9d:b8:6e:cc:95:b8:b5:1d:02:c2:24:53:c9:28:a0:
6c:a3:17:8c:a3:11:91:3c:e7:15:37:6a:64:56:b9:3f:a8:81:
af:3f:ce:ff:94:0c:c3:de:71:36:ef:48:53:b1:bf:f4:6b:de:
87:cb:7e:1b:bb:b3:b6:b4:cb:a1:8d:b9:70:4e:6c:ed:c7:26:
41:1a:e5:40:02:6a:5c:39:70:48:3d:4a:8e:e8:eb:a4:7e:1a:
a7:74:39:de:27:0b:89:18:0d:bf:d7:eb:ad:a2:5f:1b:e9:e9:
b4:17:57:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:17 2025 by rpki-client