Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft
File: WtikTa0xXyHqmS_G4QSCxB7N_PU.mft (raw, json)
Hash identifier: as1GaJ9gjWc8LCwELYrcyzW+944WPkUVmoC1UGVMJ2g=
Subject key identifier: 4A:7F:D4:71:1B:77:89:9A:98:42:22:32:80:77:F2:AA:CF:55:70:55
Authority key identifier: 5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5
Certificate issuer: /CN=5ad8a44dad315f21ea992fc6e10482c41ecdfcf5
Certificate serial: 0199FBEAE8C09C60E78888275E7621A5CFA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft
Manifest number: 0BDF
Signing time: Sun 19 Oct 2025 10:01:40 +0000
Manifest this update: Sun 19 Oct 2025 10:01:40 +0000
Manifest next update: Mon 20 Oct 2025 10:01:40 +0000
Files and hashes: 1: WtikTa0xXyHqmS_G4QSCxB7N_PU.crl (hash: +qwTl1BpeSf4UWlLLOCLYJ/Byq67nUKXns51wCppvZs=)
2: msxG7fVlnDAYePROmUZc_iRkDYE.roa (hash: HIW6BTQ/XoS8mnCW6YgbllIH/uwqHf+PyB7dx5BzoNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e8:c0:9c:60:e7:88:88:27:5e:76:21:a5:cf:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad8a44dad315f21ea992fc6e10482c41ecdfcf5
Validity
Not Before: Oct 19 10:01:40 2025 GMT
Not After : Oct 20 10:01:40 2025 GMT
Subject: CN=4a7fd4711b77899a984222328077f2aacf557055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b7:8a:a1:a0:7d:aa:92:ce:22:ff:f7:56:9e:
4c:e3:d7:44:4b:80:a6:98:8d:ac:0a:c9:3b:8e:33:
31:85:a1:a9:6e:5b:fb:9c:6f:15:28:1a:f0:2e:dd:
50:ec:1b:1d:3e:5d:bc:3b:73:7c:17:d9:bc:c5:6e:
ee:19:22:4d:a1:2f:0b:80:f0:a0:6e:c3:6d:54:9a:
9b:d5:58:ef:3a:33:25:88:b4:f9:4a:21:aa:1b:fa:
68:aa:a2:03:dc:67:2b:43:2f:e5:5c:2c:70:55:0c:
41:15:df:0c:d5:63:7f:ac:18:92:52:4d:6a:a8:d5:
df:0b:b4:d7:55:50:0e:41:5e:f0:d7:8b:67:49:b8:
ec:62:ba:a5:1c:62:7a:b7:15:5e:2b:13:e6:72:a3:
92:b9:3e:32:41:72:44:38:59:74:50:62:b9:eb:87:
ad:0a:15:93:4d:28:e4:bc:96:a3:87:92:c7:75:f1:
4d:9e:67:a9:1b:83:bb:c4:9b:d6:32:de:bc:f8:a2:
5d:03:86:62:76:8b:40:cc:f1:d0:7a:89:d9:df:1e:
ce:22:39:17:9a:20:07:41:68:cc:63:f7:a7:ce:9c:
3a:b8:21:2c:9a:98:3e:23:c8:18:c0:75:f5:da:c9:
c9:67:0f:e9:eb:2e:c8:e9:ea:8b:e1:29:ed:12:71:
4f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7F:D4:71:1B:77:89:9A:98:42:22:32:80:77:F2:AA:CF:55:70:55
X509v3 Authority Key Identifier:
keyid:5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:df:33:3e:3a:5d:5e:87:81:50:85:02:99:01:8c:f3:c0:5f:
c2:e1:6b:7e:33:b5:da:1e:3c:a4:09:e6:72:c8:2a:c5:1b:bc:
4c:9c:88:3f:8f:fd:a5:a6:cf:d7:fe:60:0f:d4:2c:02:f7:97:
a5:97:43:a5:72:c4:79:a0:1c:81:e0:95:99:dd:2e:68:14:1e:
33:54:74:3d:5d:24:67:0d:26:62:2a:a7:28:34:b7:b4:cc:2c:
8b:1b:16:fc:02:10:16:46:66:88:38:ee:39:39:4f:e3:ce:b8:
79:f0:97:d2:2d:fc:35:4d:55:4d:9a:bc:9f:e1:dc:48:42:f3:
f2:6d:05:07:ce:d3:2d:fc:99:bb:99:11:d6:fb:6d:00:f2:38:
dc:1b:38:50:af:53:02:33:62:55:47:83:db:35:13:f4:a8:33:
26:12:76:d7:6b:39:15:ef:54:d6:a5:f8:54:05:0a:13:e6:03:
1d:cd:f0:22:ec:98:8e:48:8b:ba:62:55:d0:46:63:80:a6:bd:
ea:4d:08:fd:d0:d2:c1:a8:ec:79:1c:dd:e2:62:49:1d:28:44:
26:e2:6d:a6:2f:41:fd:84:46:87:a2:d2:25:eb:d1:0b:74:50:
cc:c3:3b:b0:b5:95:94:8d:92:46:46:16:a5:96:9d:c5:c8:68:
63:2c:00:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:09 2025 by rpki-client