Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
File: WZypahnO8ifMM7NFhZaqRV0rePg.mft (raw, json)
Hash identifier: rwn58aQnOwm5sWTQXtAHI6M7JRGgoHsl6NhA5r0jRmg=
Subject key identifier: 58:F8:EE:8C:70:35:DF:5B:F0:83:2A:BD:7C:2E:E7:83:48:8A:22:62
Authority key identifier: 59:9C:A9:6A:19:CE:F2:27:CC:33:B3:45:85:96:AA:45:5D:2B:78:F8
Certificate issuer: /CN=599ca96a19cef227cc33b3458596aa455d2b78f8
Certificate serial: 0199FE100A3B346582FAF3EB63197A03A4A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
Manifest number: 0641
Signing time: Sun 19 Oct 2025 20:01:27 +0000
Manifest this update: Sun 19 Oct 2025 20:01:27 +0000
Manifest next update: Mon 20 Oct 2025 20:01:27 +0000
Files and hashes: 1: WZypahnO8ifMM7NFhZaqRV0rePg.crl (hash: vA2ZIqOFQmcnv+sb0jeqQAYJNm+ZcXjWrOQaiFvG4DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:0a:3b:34:65:82:fa:f3:eb:63:19:7a:03:a4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599ca96a19cef227cc33b3458596aa455d2b78f8
Validity
Not Before: Oct 19 20:01:27 2025 GMT
Not After : Oct 20 20:01:27 2025 GMT
Subject: CN=58f8ee8c7035df5bf0832abd7c2ee783488a2262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:d0:de:d7:00:f7:05:24:28:ea:5f:06:b9:
5e:8f:a5:63:d4:05:bc:bf:15:7f:35:70:dc:f6:76:
e1:58:80:14:82:cc:a1:fa:ec:e1:f4:83:fc:f9:f3:
e3:cb:91:cf:fc:dc:02:cc:15:a2:68:e2:0d:a1:11:
62:f2:6b:b1:76:fd:94:e0:fe:35:fa:19:b8:9c:0d:
28:cf:10:d3:52:8e:7e:71:47:af:2d:e8:60:50:af:
b8:61:17:43:7e:5b:9c:73:9e:2f:c0:f3:c1:03:38:
58:4d:8b:5d:5d:1a:33:85:cd:f4:33:15:2c:1e:9b:
3c:5f:95:d5:49:51:92:bf:01:7f:ce:04:15:ef:55:
4a:62:f4:de:0d:7d:97:98:d2:cb:02:82:99:57:63:
ef:fb:35:da:4a:5d:d9:65:ec:5e:7b:d0:2b:18:2f:
a6:bb:39:ef:12:31:13:6b:c1:f7:ca:88:6c:f3:29:
79:8f:cf:68:fd:cf:98:c7:8b:2f:ab:d9:03:82:25:
e0:44:1e:88:29:37:03:d2:73:a6:c4:3f:c9:a5:f7:
a2:7c:af:db:1f:b3:64:76:a9:5c:33:f2:00:5c:7d:
42:2b:00:0f:91:45:26:a6:14:4e:26:ca:83:22:3d:
30:71:17:04:fd:b7:bb:47:91:f8:bf:be:76:95:80:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F8:EE:8C:70:35:DF:5B:F0:83:2A:BD:7C:2E:E7:83:48:8A:22:62
X509v3 Authority Key Identifier:
keyid:59:9C:A9:6A:19:CE:F2:27:CC:33:B3:45:85:96:AA:45:5D:2B:78:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0a:70:a0:d8:8f:6a:db:3b:e9:8f:92:46:c5:3f:d3:50:83:
50:75:42:9e:5d:16:53:6a:75:d3:fb:23:db:be:42:7a:7d:98:
24:80:2b:25:ba:47:5e:b7:0b:11:0f:f1:e8:a4:da:d2:c3:0e:
e4:1d:fb:69:56:99:23:7f:44:0f:ea:0f:74:07:b1:f8:5a:91:
68:de:ed:0a:e5:d5:10:dc:52:42:d6:a6:c0:42:42:bd:ac:1e:
0b:39:4d:63:b6:e6:7f:90:cc:f9:f6:a6:44:48:62:e5:92:b7:
f6:27:1f:e9:c4:e3:bf:13:6b:57:d5:14:f7:fe:30:a0:6a:04:
ae:e7:3f:4e:cb:84:f1:d5:b2:d4:3c:50:57:a6:04:ac:0b:85:
6c:3a:35:01:5f:67:f7:0b:49:58:dc:0f:7f:81:0f:df:9b:9f:
db:e7:31:01:22:62:8e:0f:f0:2c:fd:2d:ef:5f:40:22:0a:36:
f3:28:be:81:28:b2:db:93:80:34:e0:18:df:ae:64:94:6b:b7:
f9:cc:4f:2c:fb:0f:97:2b:95:44:b2:7f:83:72:62:95:16:44:
44:d3:e1:0c:c2:e2:35:08:c0:90:0f:20:77:24:51:98:00:a3:
63:bc:fc:d1:e1:06:ff:e5:4e:9e:d8:9c:f7:49:dd:a9:e5:0c:
00:8a:5d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:51 2025 by rpki-client