Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
File: WpVcpFhGjFd2uNmTbf6bCyZocxw.mft (raw, json)
Hash identifier: hywpWWF3U6sTsDFf+9diOuGD9Pm1yWjFJ3Efzlf7X+I=
Subject key identifier: 58:78:89:BB:CD:1C:0D:35:BF:2E:2A:C2:A1:4A:C9:88:27:50:A7:0B
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial: 0199FB7CD1D7FE74D3052A384C51DC6E34C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
Manifest number: 114C
Signing time: Sun 19 Oct 2025 08:01:25 +0000
Manifest this update: Sun 19 Oct 2025 08:01:25 +0000
Manifest next update: Mon 20 Oct 2025 08:01:25 +0000
Files and hashes: 1: WpVcpFhGjFd2uNmTbf6bCyZocxw.crl (hash: nTD3RybW+dZA+CTiCJSCvKXmB91QlQ+mVUJ/MLQoVTk=)
2: pYvKtWHjQL1axAyemHXasjizsXI.roa (hash: +saRg/F7RlIOLGe+6CACF+gl/0HmxqxN1SsKDNk6n+M=)
3: qBYlovJkfJHkvUcB5hy59ysLvBI.roa (hash: rhUQ7eemuasO/N/vCeryMqfVlnZzFbMH9k0Lde5p9sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d1:d7:fe:74:d3:05:2a:38:4c:51:dc:6e:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Validity
Not Before: Oct 19 08:01:25 2025 GMT
Not After : Oct 20 08:01:25 2025 GMT
Subject: CN=587889bbcd1c0d35bf2e2ac2a14ac9882750a70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:3e:59:84:0d:06:ec:d3:d8:60:1b:c9:40:
ff:fd:1c:27:a9:36:5c:00:07:e9:3b:b9:bf:92:41:
fe:07:76:fd:ad:33:14:7c:d8:b6:be:a7:0d:da:59:
a5:e3:03:54:10:32:d9:f7:c4:37:d3:9e:f8:90:31:
f9:fb:df:80:8d:58:9b:2f:60:96:98:26:0d:d1:96:
8c:30:81:da:5a:06:ef:36:45:ae:09:43:26:24:c6:
93:c5:03:a6:1a:2d:1f:70:db:3d:e8:72:2a:57:10:
4a:ab:bf:58:06:60:70:6c:34:41:71:41:9f:fb:81:
91:1e:6c:87:f1:65:bb:5d:45:d2:06:d8:dd:f7:cf:
60:da:87:ff:68:f9:71:fe:7b:60:c3:72:11:84:91:
e1:d1:6a:8a:8f:c0:43:4c:ff:3b:ea:ef:fe:d2:fb:
5b:cf:52:de:85:dc:55:89:ab:e1:1a:a4:7b:e8:c1:
17:72:df:ce:af:02:f9:1a:4a:90:94:a8:07:a9:f5:
c1:d9:bc:72:3a:88:bf:a8:52:14:e3:d0:e0:a8:c5:
94:76:10:75:b0:cb:41:79:ad:37:6d:b9:40:94:1e:
36:7a:17:6a:93:c9:98:1b:25:72:f8:7a:be:8c:a0:
71:8e:1d:9c:cd:12:7b:99:47:36:85:df:65:83:41:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:78:89:BB:CD:1C:0D:35:BF:2E:2A:C2:A1:4A:C9:88:27:50:A7:0B
X509v3 Authority Key Identifier:
keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6d:5b:d6:3b:bd:0b:3d:a9:e3:a0:9c:81:9b:74:51:5a:7c:
4d:ee:d9:eb:99:80:a7:55:63:a9:0b:d9:88:e0:85:39:9a:1d:
f4:f7:5e:2a:60:3d:e1:6c:8a:28:73:a2:e5:70:6f:ec:76:91:
19:31:ed:01:26:bc:1d:be:21:7d:18:9e:dc:f4:db:56:20:4e:
0a:ec:84:9c:36:0e:a5:1c:f8:a8:ca:bd:5e:9f:e7:52:41:68:
7c:85:30:d0:44:ad:b1:cb:6d:da:ab:94:e6:7a:33:01:dd:2d:
21:97:30:bd:ad:53:31:46:bf:46:22:c4:68:82:66:c9:e1:89:
f4:9c:26:c7:57:e2:2b:79:ea:ed:7c:49:04:f3:7a:a6:a9:9a:
a7:93:f4:d0:15:11:0d:6e:39:63:a8:45:56:80:31:76:8e:87:
53:e3:8a:f4:bd:ad:12:0d:f8:85:a8:3e:99:b1:8d:96:02:92:
87:19:46:63:69:32:c8:73:2e:02:78:a6:c3:f0:3a:4c:af:28:
bb:78:43:ed:93:b9:fa:fd:0e:77:72:5c:50:e5:71:f2:fc:9c:
f8:e3:12:20:9a:56:97:3b:39:e6:4c:4b:7e:81:24:3c:98:a4:
2d:26:a4:cb:1e:28:5a:7a:a5:6c:6c:64:2f:64:db:d1:5e:fb:
95:89:e2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:56 2025 by rpki-client