Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
File: WKJsK8UDp8aBKNKuGrTNN965kyU.mft (raw, json)
Hash identifier: TzLrjiDC1i1oP2qDIpw7A6znT+u5wJ8Bd1KuEmdXmTc=
Subject key identifier: 82:5E:FC:A0:01:E0:B9:02:D7:C7:11:E2:73:0D:EC:CC:88:7E:00:95
Authority key identifier: 58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
Certificate issuer: /CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Certificate serial: 0199FB0F2D0142A8BD459D8955349660D7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
Manifest number: 0E01
Signing time: Sun 19 Oct 2025 06:01:39 +0000
Manifest this update: Sun 19 Oct 2025 06:01:39 +0000
Manifest next update: Mon 20 Oct 2025 06:01:39 +0000
Files and hashes: 1: WKJsK8UDp8aBKNKuGrTNN965kyU.crl (hash: E/yuhjfyaVhs48ID8algPfWvdaNaA/PDLdOZLgacRcY=)
2: hNIAp98aMKo8_sMHQg1HRKY3DlY.roa (hash: rldqTVSbz4XdzrBIUsjcfeUfYNq78azu2krskuL3dgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:2d:01:42:a8:bd:45:9d:89:55:34:96:60:d7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Validity
Not Before: Oct 19 06:01:39 2025 GMT
Not After : Oct 20 06:01:39 2025 GMT
Subject: CN=825efca001e0b902d7c711e2730deccc887e0095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:32:e1:86:b7:8d:2f:58:a5:d6:58:60:5d:
33:e8:12:1f:a7:4c:bf:07:b8:51:ae:a4:69:d3:f0:
9a:5d:35:d8:c2:9d:83:93:0c:37:f8:d0:ee:f2:0a:
d9:70:06:92:77:9a:35:64:be:2c:ab:d9:4c:67:29:
d4:26:42:d9:e7:15:60:ff:d7:87:c5:99:f6:57:1c:
cc:a3:0f:bb:62:12:3e:75:36:db:a1:7b:fe:5d:5b:
5d:c7:80:99:fa:4b:0b:29:5d:00:9a:7c:5c:4a:e4:
44:3d:0d:cc:ab:5b:07:68:f8:db:33:ac:0d:d7:f7:
43:23:07:ec:45:a4:46:ea:b5:f6:3f:cc:de:7b:85:
5b:f5:1b:95:4c:11:ed:f8:d8:b0:0e:b3:ef:d0:10:
6d:d9:9e:84:04:c4:7b:84:4f:ec:3d:0d:80:04:3d:
31:09:0e:fd:ba:17:15:ed:86:57:c9:f0:a7:a8:ea:
4f:d0:99:6f:c9:61:c9:42:b5:82:39:81:c4:66:a8:
c0:9e:db:d6:ae:36:1e:26:65:35:41:f4:7f:bc:e5:
10:5f:c5:95:68:7f:32:a4:64:3d:df:6a:d8:e2:0a:
ea:5b:e5:12:d3:68:b4:68:bb:38:9f:3b:d4:6b:b0:
10:3c:88:f9:94:ac:2a:cc:df:24:14:eb:5e:05:cd:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5E:FC:A0:01:E0:B9:02:D7:C7:11:E2:73:0D:EC:CC:88:7E:00:95
X509v3 Authority Key Identifier:
keyid:58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ea:0e:db:5d:d5:c1:1d:ac:2f:db:88:55:06:19:db:2b:5f:
51:7b:df:6b:5e:3a:79:8c:8a:c3:2f:aa:98:a7:c0:6d:b2:cf:
df:ab:c9:83:b9:c5:e5:25:49:f0:8c:30:5a:7e:4a:88:93:26:
0f:e3:2c:96:88:13:9b:86:eb:ed:4f:7b:37:74:96:5c:00:7a:
49:20:8d:6e:29:25:e1:92:39:16:3f:8b:91:89:2c:b9:3f:36:
26:5a:ea:46:14:a3:3d:4b:3b:9d:8b:ba:0c:1c:4c:58:0c:4e:
c0:b1:e8:1c:1f:81:31:e7:c8:60:a8:df:8c:80:7c:ef:7e:c8:
3e:fb:73:68:85:8c:a3:22:e8:a2:a8:62:1d:25:75:2a:ea:f2:
07:42:58:58:f3:31:39:2a:d9:a8:7b:0f:bd:f2:89:b6:08:dd:
d3:d6:97:38:8c:30:7d:6e:9d:38:35:16:c8:cf:40:4e:fa:b1:
d2:5a:73:4f:a4:b3:28:c9:75:33:4b:61:5c:c6:07:0d:9b:41:
4d:13:b0:d7:a8:a2:ea:76:38:5a:73:ab:5c:8e:d8:1b:b8:ce:
c6:6f:78:a4:68:6c:5b:0f:0f:a2:9d:c0:39:1a:32:39:ee:a0:
45:64:e9:95:41:6c:60:5b:ca:13:b7:ac:a5:24:6a:03:09:7a:
f4:40:ce:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:15 2025 by rpki-client