Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft
File: WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft (raw, json)
Hash identifier: VVyonu+bb+Xvep4nM3wTfw9zfbZ0v09CP2LuxCOpT58=
Subject key identifier: 05:24:46:BF:B3:10:75:80:5B:2D:FD:E8:FA:FD:54:01:30:34:D8:CF
Authority key identifier: 59:39:2F:91:F4:3A:67:F5:0A:A7:9A:01:16:EA:A4:DE:9B:D7:35:1E
Certificate issuer: /CN=59392f91f43a67f50aa79a0116eaa4de9bd7351e
Certificate serial: 0199FBEB14473FF49EB4EA1BBDA1BBA652FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft
Manifest number: 023F
Signing time: Sun 19 Oct 2025 10:01:51 +0000
Manifest this update: Sun 19 Oct 2025 10:01:51 +0000
Manifest next update: Mon 20 Oct 2025 10:01:51 +0000
Files and hashes: 1: O2Pnp2xiRD6R4iT3wVRhdJLNeu0.roa (hash: Yn5cJiKHr0OGQWImfyXWk4ihqiwMLF8Xm0w3Bpt+rdg=)
2: WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl (hash: OMsZw5Z9W0Alt2N4LdIHYaltvjh/lzBxO55yVYplJ2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:14:47:3f:f4:9e:b4:ea:1b:bd:a1:bb:a6:52:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59392f91f43a67f50aa79a0116eaa4de9bd7351e
Validity
Not Before: Oct 19 10:01:51 2025 GMT
Not After : Oct 20 10:01:51 2025 GMT
Subject: CN=052446bfb31075805b2dfde8fafd54013034d8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:06:c8:29:96:a3:67:b8:b4:49:2a:00:83:
5e:44:ce:57:5b:0a:da:6e:3f:60:f9:f1:6e:77:d6:
57:18:9e:87:26:94:1b:b0:87:68:a4:c8:76:a3:af:
d4:19:b6:8d:d4:33:10:04:0b:8f:00:5d:23:5c:c6:
b6:17:20:e0:2e:63:ba:eb:9e:4f:ee:ea:d6:f2:41:
d8:c2:2d:c4:06:85:98:19:e3:43:94:5b:60:ef:ad:
52:c3:c0:87:e4:10:d9:bb:00:fc:3a:b3:89:2b:d8:
78:28:65:d9:06:20:f6:e8:0f:6c:63:01:8b:6b:2b:
ae:36:5b:d0:8b:58:23:8b:5f:34:31:db:7d:98:b6:
93:9a:03:3c:19:78:d5:0c:e5:f9:97:e3:a6:00:54:
6f:f3:8d:51:f3:2a:06:f9:e6:91:e6:d8:d9:9a:7c:
7d:68:0d:19:49:a0:75:c3:06:b8:40:ea:f5:2d:2a:
10:3e:3f:d3:c7:74:4b:da:53:cf:60:00:8d:60:63:
e2:1e:41:00:59:d1:78:30:44:9e:73:14:64:25:ca:
a6:c7:4a:bb:72:f6:2e:aa:b7:2a:84:74:21:fa:22:
4b:90:f8:7e:9f:ba:e3:e5:c0:96:d3:5e:b1:b7:e6:
63:bb:08:8a:57:82:3d:12:90:68:4a:f6:6a:2d:90:
c9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:24:46:BF:B3:10:75:80:5B:2D:FD:E8:FA:FD:54:01:30:34:D8:CF
X509v3 Authority Key Identifier:
keyid:59:39:2F:91:F4:3A:67:F5:0A:A7:9A:01:16:EA:A4:DE:9B:D7:35:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3a:14:49:af:e5:ed:28:da:2a:61:5e:66:ff:c7:10:61:c4:
77:50:6e:f4:e1:43:8a:6c:cb:fb:d7:6c:51:57:44:a0:9a:e2:
a4:11:19:c8:ee:bd:5c:8e:72:97:44:3b:88:d7:21:a9:e3:d9:
f1:71:85:9c:02:1f:03:65:c6:33:7b:88:2e:eb:d4:52:b5:90:
75:1d:34:29:49:17:a8:c3:0f:d3:0d:b9:9e:87:7e:01:10:eb:
56:bd:cc:98:7c:6a:66:ff:e7:42:c1:31:25:9e:5b:06:c0:e7:
f7:c2:99:eb:97:10:d3:44:be:82:c6:60:35:81:36:19:de:5b:
e3:40:cf:42:cd:40:59:60:6d:6e:1c:2f:90:2f:e7:31:22:7e:
d0:a6:c8:99:5f:95:60:4a:45:7b:c1:16:91:89:81:36:cf:fe:
d6:cf:0e:b9:59:ac:e1:87:89:91:b4:7b:1b:e3:db:da:67:8f:
40:82:d5:09:d1:3a:01:9d:20:b4:e5:76:24:fe:0b:10:98:4f:
23:bf:1b:e8:06:28:ee:28:d8:be:64:89:67:42:8b:39:ec:a9:
71:9a:69:af:d2:11:ed:6f:af:66:ba:f9:04:5e:94:d8:12:f4:
9e:cf:b2:ae:85:fb:43:59:17:36:7d:7f:8a:4b:9a:fe:01:79:
35:78:4d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:48 2025 by rpki-client