Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier: cxVghyj6kgDh8OLKJLXBLlLdn1ipp+SwpclL3q/ubvI=
Subject key identifier: A0:26:A3:BB:1E:3A:33:BF:77:9A:CB:57:A7:21:EE:BC:D6:D4:A1:A4
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial: 019A00355830071E359C8E70F59629943E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number: 0C3D
Signing time: Mon 20 Oct 2025 06:01:27 +0000
Manifest this update: Mon 20 Oct 2025 06:01:27 +0000
Manifest next update: Tue 21 Oct 2025 06:01:27 +0000
Files and hashes: 1: UA_CLesELhQ-K1ritg7wCW9o0fw.roa (hash: hqf0nplvHISKqpfSG16CNVc9bBoJPdoMfb/a7H1JSQw=)
2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: 26FG3yIBL68/oG4ZAto0oM8kIWiGsrJ5sxCOwY865eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:58:30:07:1e:35:9c:8e:70:f5:96:29:94:3e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Validity
Not Before: Oct 20 06:01:27 2025 GMT
Not After : Oct 21 06:01:27 2025 GMT
Subject: CN=a026a3bb1e3a33bf779acb57a721eebcd6d4a1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d5:c7:49:ae:b6:84:e4:d0:4b:e0:6b:c3:da:
26:d2:27:56:b0:b3:ed:33:e0:89:8c:c4:f0:8c:46:
dc:50:71:a1:13:b1:9a:0d:e4:c7:fa:df:9f:a3:7c:
6b:ed:e5:af:43:bf:ff:8f:cd:00:6a:fb:c6:2b:6b:
ce:8d:c1:0b:5b:32:90:fc:ec:15:c8:9e:0d:99:be:
60:2b:14:49:a4:0f:10:8e:7d:ff:de:40:9a:1e:d4:
b0:16:01:06:65:84:03:99:19:0e:62:dd:d6:c6:3c:
5c:3c:1b:34:55:4d:36:95:a3:25:91:79:98:0c:2c:
00:4f:c5:e6:7a:7e:a9:87:5c:04:0b:7c:93:ac:62:
d0:3a:0c:b4:44:f8:b7:ef:01:23:ea:02:1f:cd:0a:
c7:48:73:3f:f1:6e:8f:93:30:e8:3b:e3:30:a7:de:
58:e5:45:53:eb:71:10:70:74:14:e1:34:4d:f5:64:
f3:d7:58:3a:e6:12:fa:58:41:87:18:ea:06:43:43:
9a:bb:8e:67:87:6e:4d:a8:cc:7e:b8:60:8d:62:50:
2f:dc:5f:b2:cc:ec:62:39:1b:d2:89:3b:ad:fe:0f:
37:f1:dd:07:84:7c:fb:5d:85:87:9a:e5:76:95:94:
84:7f:5a:0c:1e:f5:fc:3a:a8:2c:31:4b:67:7a:48:
ab:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:26:A3:BB:1E:3A:33:BF:77:9A:CB:57:A7:21:EE:BC:D6:D4:A1:A4
X509v3 Authority Key Identifier:
keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:dc:12:fe:7c:76:04:10:f2:c9:72:85:94:06:20:fb:ff:b2:
16:ae:90:e9:64:f8:60:84:33:ec:eb:ee:8a:7d:a2:22:76:6a:
b2:3d:30:27:2a:a5:8d:d0:53:cd:91:19:3f:21:b8:c8:cb:b7:
04:a9:31:02:e3:f7:aa:03:fb:6a:1c:76:09:51:72:2c:6b:c4:
2a:ec:69:aa:fc:63:2e:38:4d:dc:90:bf:1a:d1:e7:7d:0f:90:
af:60:c4:2a:75:34:5b:2b:1b:69:18:d1:95:6b:14:d2:55:b9:
64:51:f1:3f:0e:a7:96:e7:12:79:de:8b:bb:ad:cf:9b:9d:cf:
f3:65:b6:84:c0:cd:6a:80:10:ab:a7:6c:ef:b5:76:b9:a1:b3:
9f:eb:0c:6b:29:79:cc:f9:91:6c:66:bb:38:6d:ef:f1:81:0b:
ae:98:f4:85:c0:7c:ae:e1:c1:ed:3b:8e:aa:b4:88:cf:1b:f7:
8d:7e:fc:cd:e4:5e:d7:b0:cd:2c:46:b5:0b:34:b4:3a:dd:37:
ac:bc:78:64:c6:bd:fb:90:35:a9:7c:cf:85:ba:7a:22:31:50:
eb:d1:e4:93:59:de:40:54:0e:36:47:d3:c1:a2:83:00:4c:e3:
2b:93:a3:09:b7:e3:97:a8:67:bf:df:0c:49:40:a2:0f:99:b3:
6e:da:5b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:24:31 2025 by rpki-client