Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
File: wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft (raw, json)
Hash identifier: QYU+1gUTyxRTQphM0k7LAnW1PPcnQwgchheOgybwHVM=
Subject key identifier: A4:4B:AF:40:9E:10:10:11:22:DB:43:49:F7:9F:33:61:80:34:28:14
Authority key identifier: C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
Certificate issuer: /CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Certificate serial: 0199FD34983CFC66B4F7F4E66AB0E6AEDB8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
Manifest number: 14EF
Signing time: Sun 19 Oct 2025 16:01:46 +0000
Manifest this update: Sun 19 Oct 2025 16:01:46 +0000
Manifest next update: Mon 20 Oct 2025 16:01:46 +0000
Files and hashes: 1: 3vk_cNMUWC-JUrbyIXBN2gny1YM.roa (hash: 5UI1dk/WNT1Jzxh8ssSrm2cZ8VMJvaL80lHMAJV1sdM=)
2: hm311e8NJq4CeLUwG2WwDwuRkEo.roa (hash: q59x20MyNrLs1Zhrc2YWC53c5eh99JxfPMp5OIsclNU=)
3: wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl (hash: fXEDIFqLHkB+mruV+fUWuujey5jWzAiypgOCEGb0oVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:98:3c:fc:66:b4:f7:f4:e6:6a:b0:e6:ae:db:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Validity
Not Before: Oct 19 16:01:46 2025 GMT
Not After : Oct 20 16:01:46 2025 GMT
Subject: CN=a44baf409e10101122db4349f79f336180342814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:ce:8b:4d:ee:65:15:91:0b:fd:7d:33:00:
ae:51:8b:10:a4:c4:36:d4:d1:dd:77:44:ef:a5:4d:
b8:cc:06:5d:8b:7d:bc:52:85:c3:07:b6:20:04:0c:
7b:9f:90:77:11:9d:2f:47:44:ff:6d:ea:de:85:ed:
3f:11:a3:3b:d6:3e:34:64:d6:45:96:ec:dd:72:cc:
ce:43:5f:08:5d:6d:b9:1d:3d:cd:3b:5b:6d:bc:c3:
e3:19:25:df:d6:ff:ff:b3:a0:2d:c3:48:d1:99:71:
2a:29:7e:9a:53:f7:6b:86:66:e1:fe:ec:84:02:34:
dd:05:7a:fb:4c:69:c1:16:0b:de:04:d1:28:40:0a:
fe:1e:c7:70:eb:c6:97:df:f6:a9:ce:ec:29:25:53:
55:25:00:0b:31:eb:24:ef:98:3d:ad:59:e5:17:57:
83:75:46:e7:ab:4a:82:ef:b1:dc:22:7d:6a:49:19:
3b:02:98:08:8a:ef:94:c3:1b:bc:71:07:c2:91:d5:
b4:22:b3:38:95:67:9f:ed:24:d9:08:fa:13:0e:a7:
c3:4a:02:ff:ed:d5:83:e1:62:6a:6e:1e:71:c4:9d:
77:b1:75:f6:86:ec:3d:7a:9e:05:16:8a:d5:02:f9:
f3:43:43:ba:44:4b:75:a8:7d:02:3e:21:c7:d1:15:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4B:AF:40:9E:10:10:11:22:DB:43:49:F7:9F:33:61:80:34:28:14
X509v3 Authority Key Identifier:
keyid:C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:80:cf:5a:e2:7d:c8:fb:f3:fb:f4:5a:e5:1d:31:6e:7d:24:
c5:17:e4:fe:69:80:6e:66:7f:db:f2:e4:37:a6:1f:a2:4a:df:
a6:a4:03:87:37:f4:61:ef:5b:1f:bc:4f:0f:d4:6e:0c:66:60:
28:ca:cf:72:83:5c:ee:c0:b8:b1:cb:c5:b1:9b:d7:a5:b8:e1:
89:53:90:f1:6c:5b:ac:8b:17:16:46:c5:ce:af:28:cc:fd:e4:
88:e8:84:0c:57:e0:13:8c:95:fd:eb:9a:85:e7:4b:cc:da:80:
0c:51:c5:b5:84:15:dc:e0:6f:e2:b2:6c:e3:60:f8:e9:9d:55:
b6:e0:39:fc:5f:d0:70:6b:2b:9a:18:ed:23:41:bd:be:20:92:
6b:24:0f:4e:ca:5d:a2:e2:3f:c0:da:c6:b2:f5:a2:80:b8:97:
08:f7:d8:d2:cd:e3:79:4d:e4:dc:e7:5e:0f:f2:aa:50:81:d4:
b1:54:f8:c0:fe:9a:a2:3f:77:7e:59:99:84:08:0a:44:d5:10:
00:df:85:a9:4f:72:02:70:64:a0:fe:30:d6:65:ed:db:fe:4a:
f4:7e:17:b2:97:d3:11:3b:a7:98:67:94:f4:71:f0:99:34:f5:
59:dc:5e:2a:cf:30:b2:2d:ff:e8:dd:57:40:88:dd:77:1a:59:
3b:0f:0d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:57 2025 by rpki-client