Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
File: WSDWcGSaSkqcsuZnchcHQa33xRo.mft (raw, json)
Hash identifier: f3oq1WEWMJfogoXjAxQxk2kHA8dJcbFR8Q7cRVcxLfk=
Subject key identifier: 68:A8:75:DC:3A:C5:0C:2C:26:9F:F1:7E:0A:98:0E:7F:CE:E9:C6:4C
Authority key identifier: 59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
Certificate issuer: /CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Certificate serial: 0199FDD92F3A0C022BF5DBC4429557138818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
Manifest number: 0DC3
Signing time: Sun 19 Oct 2025 19:01:32 +0000
Manifest this update: Sun 19 Oct 2025 19:01:32 +0000
Manifest next update: Mon 20 Oct 2025 19:01:32 +0000
Files and hashes: 1: PrK_NQRYp13y-DfvxtWGnq4X0dE.roa (hash: ZI/puUUas0tVvfAZ0vd46exqVsLLctxI+01KKUrwu2o=)
2: WSDWcGSaSkqcsuZnchcHQa33xRo.crl (hash: Wn+ytkd7QS8gfVADMvSnH7WGY3hT90GG6oBGxbAeRkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:2f:3a:0c:02:2b:f5:db:c4:42:95:57:13:88:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Validity
Not Before: Oct 19 19:01:32 2025 GMT
Not After : Oct 20 19:01:32 2025 GMT
Subject: CN=68a875dc3ac50c2c269ff17e0a980e7fcee9c64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b7:a6:85:21:f6:bf:e0:86:b9:67:be:71:28:
5d:14:af:47:db:88:90:7c:3e:38:fc:b5:2a:ef:0e:
ca:34:4c:c9:fd:45:79:8b:d8:41:81:35:6f:08:c6:
8c:c7:be:af:71:3d:70:e6:90:04:b5:2c:b7:56:fe:
83:47:f5:4f:ce:87:6d:dc:93:db:59:97:81:1f:e7:
91:00:6a:4f:c6:fa:8c:54:78:c3:ae:09:d9:99:fb:
65:7e:80:f5:ae:43:e8:f0:7e:b9:29:57:10:c8:f7:
49:fb:5b:46:c3:48:d1:32:88:63:07:e5:b4:60:d3:
ed:8a:67:72:2d:e5:86:ec:b3:06:3a:b9:19:2d:b0:
a9:fb:9b:e6:9a:45:a5:e4:a5:2b:01:26:a2:84:66:
c4:50:ec:bf:c7:eb:c7:cd:20:81:d4:8e:99:19:d0:
5d:9e:0d:c0:3f:67:73:4b:2b:30:d4:96:d4:c1:66:
0b:13:4c:20:05:94:d3:d2:10:9e:38:0e:67:df:7a:
3e:44:26:4f:be:94:d6:c0:ec:38:df:2e:cc:aa:1a:
f6:1b:6c:2b:f8:7c:e1:db:e9:92:ec:40:de:a5:76:
4e:72:6b:e0:39:14:c7:5c:fb:be:86:9b:70:6b:bd:
5f:47:36:84:4b:38:cd:c6:94:6b:31:a0:fd:e2:dc:
1f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A8:75:DC:3A:C5:0C:2C:26:9F:F1:7E:0A:98:0E:7F:CE:E9:C6:4C
X509v3 Authority Key Identifier:
keyid:59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c6:39:2e:28:76:88:be:ee:07:d6:df:88:32:3b:b9:55:8c:
b8:c8:14:3a:1b:51:db:14:b0:3e:d2:42:cf:b6:f9:ba:be:8f:
55:d5:91:14:7b:97:c7:2d:12:36:5b:14:69:2f:42:08:63:9f:
1a:e6:5e:80:39:ca:12:79:c5:65:64:68:af:94:3a:bc:08:14:
87:24:61:c7:8f:45:00:56:aa:63:76:4b:f2:a9:d3:f1:b3:8f:
00:7e:3c:e7:20:f4:96:0a:17:72:be:11:88:21:11:d4:2e:d3:
fd:2c:81:04:48:3e:07:72:6c:77:a1:93:a6:32:0a:18:81:03:
82:62:2d:94:f7:77:fa:09:0c:ce:a6:e6:10:dd:fb:32:8c:f4:
32:bf:aa:1c:7b:dc:ac:37:73:0b:98:84:b5:c1:f7:92:50:57:
48:ff:66:06:7d:aa:0c:e8:1c:5c:63:80:d9:15:1e:44:c6:c4:
9c:b8:3e:bb:db:89:cb:bd:f9:4b:62:dd:72:c1:f1:16:36:54:
d4:6d:15:49:f9:fa:f6:fd:1f:50:f1:45:15:b5:ab:76:1e:69:
62:2d:cb:a8:ef:d8:89:70:b1:d6:12:be:10:2a:22:c2:13:ca:
ef:68:9f:f0:7a:69:a9:ff:9f:65:b5:e2:0d:6b:b4:92:cc:77:
2e:c5:ae:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:26 2025 by rpki-client