Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
File: WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json)
Hash identifier: eDTRFEUtlwx+/JmnWiAE07YSGKGnlUWuSSQZDeSBApk=
Subject key identifier: 8C:FD:09:D3:CF:42:41:9E:C1:01:E0:A2:CC:07:63:A6:57:FB:97:E8
Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Certificate serial: 0199FFC849EFB78BC719679260EC71E35AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 04:02:20 +0000
Manifest this update: Mon 20 Oct 2025 04:02:20 +0000
Manifest next update: Tue 21 Oct 2025 04:02:20 +0000
Files and hashes: 1: MNitg_keBs4dR0_QJsKKFy2jt9w.roa (hash: sEGk1tMGmp6moB/qNZm65GUjuchkzx/EiGw40gyU6pI=)
2: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: Bec9RzwUQ1U4tkA4trvvN9shiItL22OkEC5c4jXbM+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:49:ef:b7:8b:c7:19:67:92:60:ec:71:e3:5a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Validity
Not Before: Oct 20 04:02:20 2025 GMT
Not After : Oct 21 04:02:20 2025 GMT
Subject: CN=8cfd09d3cf42419ec101e0a2cc0763a657fb97e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e7:fa:21:e2:14:82:ab:13:c7:02:63:6c:93:
78:e6:a6:01:73:97:f3:80:c7:1a:56:17:d0:80:11:
3b:72:df:3a:dd:80:3d:7e:72:a2:79:4c:4a:64:70:
d1:c9:34:44:4b:e9:be:08:82:68:64:bd:97:8c:26:
ad:f2:6a:bf:90:51:10:00:20:1e:0f:c0:ca:83:85:
24:85:ce:d7:aa:27:d6:89:78:1d:ce:3d:2a:ac:10:
5a:87:91:d8:1f:2c:70:31:d2:73:3b:6f:4e:54:01:
3f:49:22:96:fe:95:aa:8d:b5:44:77:1c:f4:0f:80:
54:db:65:8e:c1:ca:ed:09:ef:54:0e:f3:1b:7f:81:
82:2a:7f:e6:e6:6f:62:34:dd:2c:98:a3:4b:60:7b:
45:39:cc:c6:6e:e2:f3:39:cb:14:f2:a0:e4:00:79:
d8:76:2c:94:62:d8:46:21:47:9c:ad:1a:39:6f:7d:
39:93:10:cc:c3:25:0e:4b:ab:4b:0c:9f:07:b6:76:
28:60:09:43:30:9e:61:8b:91:3b:37:6b:d0:4d:85:
2d:67:7c:3a:95:f6:47:72:80:f8:36:13:ec:e8:88:
ab:ee:6d:87:3b:92:a2:da:f3:36:d0:c4:a2:06:bc:
21:04:76:be:c6:38:00:20:bc:0f:ff:23:1e:e5:a6:
2f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FD:09:D3:CF:42:41:9E:C1:01:E0:A2:CC:07:63:A6:57:FB:97:E8
X509v3 Authority Key Identifier:
keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:25:f8:85:80:40:cd:b4:d6:bd:57:d2:bd:d4:65:ef:76:67:
d3:dc:23:de:e8:34:e6:3c:fb:26:40:52:7c:37:44:78:af:1b:
62:74:9e:e6:53:a2:91:7f:70:aa:5d:9b:4e:e6:5a:73:63:9c:
e1:30:b8:6c:86:f3:63:97:e8:68:f8:3f:01:05:42:b1:7a:40:
9d:b1:88:45:ae:56:86:26:4a:c0:11:b8:8f:13:ce:30:c1:7c:
18:6b:e2:99:0f:77:43:bd:2b:83:b5:db:9a:d3:a2:30:e4:07:
5e:27:19:87:02:f8:81:0c:de:74:07:92:30:54:c2:09:54:49:
0f:06:56:a1:a6:89:ff:6a:06:9a:35:7c:c9:11:cd:38:7e:f0:
b3:2a:3d:92:cd:69:9f:f7:a2:78:d0:82:4a:fa:eb:95:20:cc:
da:f6:c4:02:c3:2b:c9:3c:90:cc:1a:32:59:54:54:07:68:b8:
a6:94:e1:34:2e:c4:cf:9e:14:84:41:63:ef:3e:17:7e:d9:4e:
4c:fd:57:9d:e0:c1:64:9c:7f:e1:ba:b7:0f:76:94:cb:f2:47:
93:c0:02:6e:12:01:fb:54:a9:81:30:89:08:e5:aa:f4:c6:2f:
5b:72:90:84:1b:d5:43:89:25:7d:7e:f1:43:26:ed:56:3a:5f:
0d:f9:8a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:18:40 2025 by rpki-client