Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
File: wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft (raw, json)
Hash identifier: EDHfIUcVFBbCDbsNg7KmcpFwRQJA6/dhYj2gI+Vi8jU=
Subject key identifier: D7:D8:5E:F2:88:27:78:BA:FF:63:D8:F4:0F:BE:5D:E2:45:FF:AA:08
Authority key identifier: C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
Certificate issuer: /CN=c1db67b85104e4db598fea15678699c92473bda0
Certificate serial: 0199FCFD6FCB63071FBE55417342DA0BDCE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
Manifest number: 0DB9
Signing time: Sun 19 Oct 2025 15:01:31 +0000
Manifest this update: Sun 19 Oct 2025 15:01:31 +0000
Manifest next update: Mon 20 Oct 2025 15:01:31 +0000
Files and hashes: 1: PJ3v6hx1GuVvKbnyJ-k0p1XrVzI.roa (hash: vSG0XnrDzzP8WtxkP9Iqj2yAInaVzagq/kUPYgF33Iw=)
2: cycF2JveybPX6grJ41wnOXvTGTE.roa (hash: aip8c8zGmCpS8zi0B5jF1UO7lc36UgLVySSkHDz+xxU=)
3: wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl (hash: Z9ozF/M1gFwEipPobzBHoIqqAvZcwXAp4NcJvP+5zKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:6f:cb:63:07:1f:be:55:41:73:42:da:0b:dc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1db67b85104e4db598fea15678699c92473bda0
Validity
Not Before: Oct 19 15:01:31 2025 GMT
Not After : Oct 20 15:01:31 2025 GMT
Subject: CN=d7d85ef2882778baff63d8f40fbe5de245ffaa08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:d0:47:fe:d5:31:5a:4f:e8:36:c6:d1:ce:
9f:82:3e:ef:cd:23:72:27:05:04:3b:f6:a5:fe:21:
66:ab:6c:24:58:4f:7c:f5:41:9f:62:96:8f:58:1b:
db:43:57:69:d1:4d:6f:cb:f0:75:dd:1e:ef:d1:68:
7c:db:84:a5:23:1f:e6:bb:be:f6:73:2d:c3:43:dc:
97:08:31:8d:2c:b6:35:76:ac:06:ae:8c:f9:a4:ef:
eb:58:65:24:d7:58:93:97:c6:f1:42:55:a9:c8:08:
74:c7:a6:e7:a5:6c:30:21:ab:92:d0:62:f5:62:38:
b2:4a:3f:08:de:3a:05:90:f5:fe:41:b7:c9:79:d0:
56:94:60:c3:a8:5f:99:64:c7:61:eb:3c:2f:3c:80:
f2:fd:23:52:ac:31:03:9d:c0:d7:45:66:4e:94:ed:
66:e7:66:08:1e:f4:13:5d:31:d8:82:fa:5d:59:2d:
de:cc:a3:6f:d0:8e:8d:f4:2c:db:0b:c6:6f:cb:84:
0d:d9:65:f6:2f:55:53:24:b0:1c:f5:89:1a:80:b8:
3e:a9:1a:01:42:ad:00:a3:04:73:ee:0c:0e:c5:d1:
ea:96:0b:f1:07:6e:2a:68:e8:a8:9b:ad:90:f6:76:
42:5a:64:27:f6:46:af:0c:8a:25:7f:03:93:85:59:
62:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D8:5E:F2:88:27:78:BA:FF:63:D8:F4:0F:BE:5D:E2:45:FF:AA:08
X509v3 Authority Key Identifier:
keyid:C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:86:94:fd:2e:0e:38:94:ff:71:38:ec:91:79:40:c5:62:31:
fd:f0:fd:f5:40:de:b0:09:0b:8e:48:48:be:84:37:b3:cd:b0:
07:2d:a0:22:d7:fa:d5:fa:b9:b7:b9:8b:e9:e8:1c:3d:50:c0:
62:de:4e:d1:1a:b9:ad:ac:cb:7a:2b:d0:42:09:2d:ef:5b:fd:
da:be:fa:66:10:24:c8:ff:89:df:60:80:21:52:4b:dc:78:74:
c9:aa:2b:bc:cc:a4:8c:8d:cb:d6:40:0d:f4:28:71:57:f8:58:
12:d0:97:2f:c7:b6:4f:42:06:b9:27:01:ab:15:a7:82:9e:0f:
a2:7e:ff:e8:d4:54:c6:01:59:a8:e3:f2:80:1d:92:d7:fd:17:
7f:2c:d8:44:4c:ae:c3:5d:a4:f1:1f:08:fe:e9:34:7a:d4:3e:
8c:48:c3:a9:28:ed:67:a1:78:7b:13:76:09:63:02:da:60:e3:
68:a6:18:7e:ef:69:ca:e4:18:ed:a7:7d:a3:31:fb:6b:b9:fc:
7d:3b:24:20:99:b4:86:9d:3a:1a:48:8b:43:2d:7f:e8:0a:95:
d0:3b:8c:a8:09:cf:13:64:ec:f5:a5:63:be:93:de:d8:a9:dc:
9f:81:ed:08:33:f9:da:3e:31:a3:ce:27:3d:ce:b3:e0:75:14:
cd:bd:27:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:41 2025 by rpki-client