Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
File: WyxHDbJENILhlSOVOnjB7woWlHk.mft (raw, json)
Hash identifier: Fk5SuADMAc7D9H64tOfquQ2j7D+9WHOiGTsASOYOSPY=
Subject key identifier: B2:10:83:0E:6B:37:01:F2:31:19:35:1F:7F:F3:F7:C7:D1:CB:F6:7F
Authority key identifier: 5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
Certificate issuer: /CN=5b2c470db2443482e19523953a78c1ef0a169479
Certificate serial: 0199FBEBE8AD6B1E6A1718212E98EBC352BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
Manifest number: 0E81
Signing time: Sun 19 Oct 2025 10:02:45 +0000
Manifest this update: Sun 19 Oct 2025 10:02:45 +0000
Manifest next update: Mon 20 Oct 2025 10:02:45 +0000
Files and hashes: 1: 0AdevnLlsxFU0_MXijL2HLDuliU.roa (hash: Oq6mu5Hbl5chx/r3WVWbX/YQvEZQoJ2rWVh4OUcVSO0=)
2: WyxHDbJENILhlSOVOnjB7woWlHk.crl (hash: X3cKEuV1BP91GhUHZYEE72jVY1bCwW4Lke++KnPpJyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e8:ad:6b:1e:6a:17:18:21:2e:98:eb:c3:52:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2c470db2443482e19523953a78c1ef0a169479
Validity
Not Before: Oct 19 10:02:45 2025 GMT
Not After : Oct 20 10:02:45 2025 GMT
Subject: CN=b210830e6b3701f23119351f7ff3f7c7d1cbf67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fe:8b:e0:94:74:63:2e:f1:f4:56:1b:2f:66:
a9:64:0c:3d:3a:7c:83:b7:41:d3:30:b4:a0:f2:c7:
eb:5c:3b:65:3f:fb:9a:d4:86:cd:ee:f7:42:8e:39:
9c:a9:27:7c:6d:85:20:d8:90:d0:4c:e6:7d:9e:04:
5b:71:20:54:48:4c:40:bb:85:e3:fa:66:c4:1a:c9:
b8:3d:95:f0:a5:ff:75:88:30:d0:8b:77:df:b9:90:
87:2f:66:24:8a:a7:b8:d8:38:48:5b:53:7b:7d:fb:
99:a0:61:f9:c5:b3:cb:c5:ea:12:df:c5:a4:c8:c3:
63:f2:52:cf:51:c1:27:bf:1f:be:d7:68:16:b3:f2:
67:70:e9:2b:8f:a8:2b:8d:a8:5e:98:8c:6d:27:ad:
8d:af:5e:bf:cd:92:50:ca:f9:1d:ac:0c:16:2c:b5:
9e:3c:22:53:45:c7:1c:6d:45:f8:85:c4:3a:90:ae:
a4:5c:b2:bc:21:c4:73:85:78:33:38:a9:de:39:46:
a8:6b:2c:0c:14:d8:8a:6b:57:1b:62:13:25:a5:de:
14:62:b2:54:bf:a5:66:0a:60:03:63:02:03:cc:50:
85:77:c7:38:ef:74:7d:c2:0d:7b:45:53:8a:20:f1:
d8:4f:06:27:11:47:35:3d:17:9b:8e:af:9e:46:11:
8b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:10:83:0E:6B:37:01:F2:31:19:35:1F:7F:F3:F7:C7:D1:CB:F6:7F
X509v3 Authority Key Identifier:
keyid:5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:fb:ed:60:6e:a8:25:cd:97:5f:09:c1:b1:df:4f:bc:43:1f:
c9:eb:56:45:ce:72:00:4e:4e:68:2e:5f:3d:fd:0b:cb:b8:dc:
de:f1:27:c1:72:9f:98:b9:14:44:c7:f6:0b:c5:00:ef:fa:f3:
67:4d:b8:7b:7f:6c:80:99:34:c2:e5:c7:6a:b0:b4:8a:d4:3a:
71:e6:f0:b0:4e:6e:ee:2a:11:ab:ac:4d:40:ef:d7:d7:bf:f8:
94:13:82:2f:e2:9d:c1:c1:31:3a:a1:ad:6d:5a:8d:df:2a:97:
9a:ad:4a:2c:fc:05:a4:f3:63:c3:e1:13:a3:11:1f:79:df:85:
26:ac:93:14:33:a1:0e:c0:bb:32:78:53:86:34:59:53:2c:26:
bd:da:3e:ef:a8:81:50:e9:a7:b4:f3:e2:5b:64:26:06:78:48:
ad:c6:89:df:a3:87:cb:eb:52:8d:73:1f:90:9d:c3:99:c7:8e:
68:18:66:ad:55:24:94:06:f5:a4:d2:8f:e4:cf:e8:06:bb:8b:
9d:44:08:e3:85:a7:98:92:53:7d:f7:14:0f:04:0d:0b:aa:32:
66:e8:2f:de:33:eb:4e:d3:81:a5:1c:66:5d:fe:4a:a4:06:ae:
56:94:9b:c8:10:6a:c8:b3:f1:1f:78:a5:35:97:a2:63:f2:1c:
69:30:e0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:12 2025 by rpki-client