Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
File: WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft (raw, json)
Hash identifier: hlgNScfph5rBoNZVIaizOIQV3opSeVyUaCtrPJNkblY=
Subject key identifier: 9A:D4:D3:92:38:96:09:DE:49:9E:E7:D4:70:96:7D:E0:0C:4D:7E:55
Authority key identifier: 58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
Certificate issuer: /CN=584d44ad55c262d84efd442dc8767b0413e1b162
Certificate serial: 0199FCC631605B2440D7BD660391FFA57ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
Manifest number: 0305
Signing time: Sun 19 Oct 2025 14:01:11 +0000
Manifest this update: Sun 19 Oct 2025 14:01:11 +0000
Manifest next update: Mon 20 Oct 2025 14:01:11 +0000
Files and hashes: 1: NlmDLH5wWMGr_vzUkJAwntWEnjQ.roa (hash: 1/yiZpsUjLuoNGo0Ku/rpHLpaDxTkI6zMzawihAJCgI=)
2: WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl (hash: KFKilWs2t7+zaDYqTKtAzt1ei4vBzmjGhMG/K1JBEZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:31:60:5b:24:40:d7:bd:66:03:91:ff:a5:7a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=584d44ad55c262d84efd442dc8767b0413e1b162
Validity
Not Before: Oct 19 14:01:11 2025 GMT
Not After : Oct 20 14:01:11 2025 GMT
Subject: CN=9ad4d392389609de499ee7d470967de00c4d7e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:41:45:d3:a9:e2:eb:17:cb:5e:73:91:b8:
bf:cb:d7:4e:05:d1:69:e4:7a:6c:2e:0a:06:b2:9b:
20:9c:25:a5:7f:80:b2:40:60:92:c7:3a:e3:27:cb:
1c:3d:e2:d9:a8:2d:ed:c7:03:8a:3d:da:00:10:56:
6c:0c:8a:01:23:1c:ef:34:be:8e:a8:45:29:e5:99:
c4:96:0f:69:2d:91:2c:34:cf:6b:c6:ab:6f:50:93:
af:de:c3:37:ed:2a:59:92:ec:81:4b:25:db:68:4d:
a4:19:ea:64:0d:80:12:3f:40:ee:91:ce:11:56:2c:
76:8e:35:70:39:15:fa:dc:30:bf:3c:43:aa:5c:82:
ac:98:69:9e:00:40:eb:ac:4d:fc:2a:05:bf:ca:18:
11:bd:c0:78:ac:bc:9c:a6:11:31:39:a2:d3:b6:4b:
2c:71:8c:e4:d5:d1:ac:68:8d:53:a4:77:4b:07:d1:
4a:09:42:c1:b2:d2:71:d5:62:79:37:a1:48:01:39:
96:ad:68:e1:8b:c5:b5:c6:61:a6:71:76:b9:43:ef:
ae:7a:be:b6:93:e6:37:cd:10:52:7e:7f:4f:3f:cf:
e4:11:79:15:08:2f:96:ea:b0:94:62:f1:2d:7e:68:
af:7a:9f:aa:a9:fa:a5:49:c5:c8:d4:85:b8:2c:66:
91:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D4:D3:92:38:96:09:DE:49:9E:E7:D4:70:96:7D:E0:0C:4D:7E:55
X509v3 Authority Key Identifier:
keyid:58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:26:97:f8:ca:8b:3e:90:32:74:15:00:18:d3:41:a6:75:b1:
3d:bf:dd:a8:fd:f7:a2:09:98:bf:4a:49:ff:09:bd:bb:e9:ea:
e9:12:84:d2:57:a1:81:3e:25:cb:54:fe:6f:15:73:b7:80:98:
e9:82:b3:d2:47:15:73:a4:df:a2:16:3e:46:fb:99:e0:0d:e8:
43:bf:b0:f4:7d:a4:b7:65:27:3c:13:29:78:c1:23:45:ee:fa:
a1:34:8d:7a:19:1d:9f:bf:f8:6e:1f:e1:f2:b5:c6:a5:be:4c:
96:fd:75:be:e9:20:d0:b0:cf:4a:d9:7c:84:ff:8d:be:25:8e:
1b:54:7a:76:9b:c4:c4:45:31:8b:e9:5f:94:21:89:42:03:7a:
01:c4:59:ec:20:67:c0:10:31:d1:a4:b6:2c:05:01:46:e0:37:
47:6e:1b:eb:b4:d1:f8:a3:55:90:8f:cb:2c:ea:41:e4:65:51:
ff:55:84:1d:9a:ca:fe:50:68:db:19:02:9b:28:9f:94:1c:ea:
8d:ad:90:07:9b:f2:6b:04:da:6c:49:bf:49:a0:93:8a:60:68:
89:d4:59:14:eb:6c:3a:b5:d2:e4:5a:9e:61:a1:8a:2c:13:3b:
25:98:eb:e6:b0:d0:66:bc:3c:9c:eb:0e:04:5d:da:a3:ab:1d:
3d:69:3d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:28 2025 by rpki-client