Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
File: WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json)
Hash identifier: iblgkIk9elzP31D/pWgho0N5cpJkdj7FEU2pUlVzy2o=
Subject key identifier: 8A:72:6D:F6:A7:9D:A6:97:40:3B:4A:BC:31:7A:08:7B:20:B8:C9:5E
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Certificate issuer: /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial: 0199FBEC6D28EAFBE39F7473D23CD3A64C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
Manifest number: 0448
Signing time: Sun 19 Oct 2025 10:03:19 +0000
Manifest this update: Sun 19 Oct 2025 10:03:19 +0000
Manifest next update: Mon 20 Oct 2025 10:03:19 +0000
Files and hashes: 1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: PUAECc+pLvKNqdymeWqmnxVnGAc2hwRAse2jqKstRPk=)
2: e0MNfuXlfvKgRvC9CopzDlR6QJs.roa (hash: EP4IKQWQkDtxiqLTMMk/RcDKJIiLy3Rh0R6YqC1qh6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:6d:28:ea:fb:e3:9f:74:73:d2:3c:d3:a6:4c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Validity
Not Before: Oct 19 10:03:19 2025 GMT
Not After : Oct 20 10:03:19 2025 GMT
Subject: CN=8a726df6a79da697403b4abc317a087b20b8c95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:32:9f:cd:52:65:43:f3:b0:d3:c9:54:31:
c1:5c:cd:60:4f:20:92:16:27:93:28:bf:d2:b6:a5:
e0:8b:73:21:81:a3:ee:30:b2:8f:7e:93:9b:21:14:
fc:fc:e1:02:30:95:98:19:03:14:63:3e:96:55:a9:
cf:15:4c:31:bf:8b:c1:fe:39:66:ee:25:a8:fc:e0:
3e:64:e5:ae:9f:60:97:d7:bd:fa:96:f8:b5:8a:0d:
b7:50:b0:52:04:57:97:ef:ab:d4:23:98:89:5a:4d:
b7:8d:b6:6c:09:ec:7b:65:8c:db:88:08:db:45:ae:
32:4f:a9:bc:9b:8e:73:fd:21:e8:e3:dc:5a:21:d2:
84:7c:0a:db:6f:a8:9b:5d:5a:e5:f4:42:c9:f8:8b:
54:da:d5:e9:3f:ee:e4:70:ae:70:e3:a9:7b:bf:aa:
ce:e0:cc:cd:27:87:96:c2:8d:b1:e9:d1:9f:2c:90:
ee:ec:82:46:35:fa:70:f8:8b:bb:23:d4:69:5c:a8:
51:44:ac:aa:f8:cb:c6:50:bd:a7:bf:84:55:10:3a:
25:75:98:93:66:05:96:6b:d3:dd:0c:e2:e4:16:d6:
c8:4a:72:fc:e6:5c:32:ff:e9:58:8e:26:60:d2:16:
b1:6f:3f:c7:ae:68:ef:87:a8:10:e0:cb:dd:a3:d1:
9e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:72:6D:F6:A7:9D:A6:97:40:3B:4A:BC:31:7A:08:7B:20:B8:C9:5E
X509v3 Authority Key Identifier:
keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d7:f0:b7:e6:95:ca:83:c3:14:81:23:57:36:d6:00:d8:90:
b7:78:48:07:ef:a2:90:1b:4b:04:ca:2d:8f:a3:3f:74:5a:86:
77:db:0d:65:ac:98:d3:62:b8:4d:f7:65:37:db:73:37:cc:75:
23:c2:9e:e9:94:7b:49:69:1d:37:03:8b:5e:f3:5e:16:df:97:
82:65:62:89:11:c5:4c:27:5a:5a:8b:7f:19:23:e7:cf:63:c4:
07:d3:93:dc:8a:b9:14:84:1e:d3:11:ad:a4:e1:36:fb:43:71:
e1:cd:d2:c3:4b:ef:b8:5b:22:42:b7:f7:d7:3a:6d:5c:2c:e7:
0b:0d:ec:29:2e:0f:85:d1:00:98:92:da:8b:d4:df:4e:b7:77:
c0:82:f8:da:1a:b0:41:b8:ef:8a:e4:2d:58:93:1d:89:17:7e:
75:bf:29:27:f7:9d:76:d3:d9:0e:21:e8:25:b4:ad:0d:6d:fd:
32:60:a7:2f:cc:ce:f0:65:5c:bd:bb:c9:e0:a9:9a:03:8c:3d:
e3:02:e4:c4:f7:f3:49:4f:f8:bd:08:ad:72:01:10:6c:02:27:
0e:c6:94:61:05:f2:c0:d2:7a:8c:06:51:27:8a:21:79:31:fb:
26:51:bc:87:cf:6a:7d:40:5f:d7:1d:b6:d0:af:b1:d9:13:51:
ab:cf:7a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:46 2025 by rpki-client