Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
File: WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft (raw, json)
Hash identifier: Z/jVLk2hQaieF2j+8hkfWFjp5KTHsTRrpHjIKDauD4w=
Subject key identifier: 66:F1:BA:4A:77:09:4A:15:27:9D:CB:77:A1:51:34:94:C3:81:43:3F
Authority key identifier: 59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
Certificate issuer: /CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Certificate serial: 0199FC8F7FF83AF11F98CFC351AB7E9C3069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
Manifest number: 0604
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: 0se6oPOZ9FSI_6qzearxcjxlYSY.roa (hash: g6cZT2b3ImLhGYVmMKzVx9c34caYKC+s1u35aPIl42k=)
2: WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl (hash: IxtOqel4HJ+wfM2Cg6psJYmu8+kK/UFY7E8PENhl/yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7f:f8:3a:f1:1f:98:cf:c3:51:ab:7e:9c:30:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=66f1ba4a77094a15279dcb77a1513494c381433f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:8e:31:b4:b1:04:8b:00:59:6d:c9:50:d6:
86:32:a0:55:b7:ad:81:38:92:08:da:7b:fe:79:6d:
6b:60:28:37:47:e1:17:cf:6f:46:a9:74:71:59:aa:
99:61:f8:31:12:36:cd:4a:1b:c7:a3:9f:2c:6d:85:
9b:be:29:8f:82:81:11:ed:93:cb:37:2e:32:63:69:
7c:0d:c4:79:69:89:4f:0b:65:f7:0b:8e:fe:28:15:
aa:40:f5:df:8f:ca:d5:bb:22:9c:f4:90:7a:9f:d9:
36:52:7a:4f:7e:2b:ba:ab:a7:74:11:83:8f:be:2a:
c0:a5:37:ec:5e:66:bc:d7:30:d9:e4:15:51:ba:1e:
b5:cb:6c:00:1e:de:2f:90:81:aa:2b:38:24:23:95:
5f:32:af:79:09:76:6a:fc:66:69:2c:87:a6:b8:ae:
71:d9:c6:a3:af:a3:3c:97:86:d6:4b:01:c7:a8:0e:
aa:30:7f:61:e0:3f:7d:36:00:7a:7a:64:5a:3d:62:
52:86:f2:00:90:9c:48:e8:a0:17:6b:88:0c:e7:2f:
bc:d2:86:fe:aa:6c:0c:97:c6:58:6a:c1:51:c0:82:
54:fd:30:e3:52:07:7f:ac:05:02:0c:59:92:04:cf:
af:dc:c3:11:8e:80:27:33:f2:56:ab:2e:42:02:dd:
91:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F1:BA:4A:77:09:4A:15:27:9D:CB:77:A1:51:34:94:C3:81:43:3F
X509v3 Authority Key Identifier:
keyid:59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:93:5d:9a:1f:fe:7f:07:48:ff:47:86:57:ed:04:0e:10:17:
08:85:ca:cb:a2:de:84:cd:3d:1c:7d:6a:96:73:bc:20:01:a2:
6f:24:f4:87:83:a8:fb:f3:09:ec:fa:40:8f:ef:74:a4:ae:d2:
b9:11:25:ab:ec:47:c4:fe:b4:95:cf:c7:a8:05:6f:b0:ad:8c:
bc:6b:0d:30:50:6c:7c:21:a7:1b:2d:49:6e:f5:6b:5f:f5:64:
6c:0e:b8:ce:2c:0f:a2:a2:d8:c8:73:a4:88:d8:9a:56:2f:fc:
86:20:8f:05:12:15:b2:81:d0:7e:99:ff:65:3e:4b:b9:98:bc:
1a:db:a1:3e:04:6d:3e:ae:88:aa:c4:dd:c5:b1:ef:50:3f:b1:
e4:09:b7:3c:e0:ed:69:82:5f:20:22:ad:7d:26:d0:fc:bd:5e:
3d:c7:22:70:7c:7d:8f:cc:65:8a:ef:06:72:87:b4:49:19:89:
d1:78:c5:3a:cf:c6:10:e8:67:c2:0e:c9:61:22:b1:6d:70:7c:
25:7b:ca:f0:88:18:b1:28:3e:be:06:67:ae:6e:11:64:d7:08:
02:57:0f:a0:ca:2f:80:28:55:9b:7f:8b:ac:07:4b:8d:b8:ce:
f0:d7:41:ab:11:62:94:9e:46:b4:67:50:f2:7a:7e:e6:da:89:
bd:46:60:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:45 2025 by rpki-client