Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
File: WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft (raw, json)
Hash identifier: HA5RClaaVGTBvLcgFwztJd9uA+ZW+g9GusWrx27YtGU=
Subject key identifier: 03:95:22:E3:79:5B:D6:29:D7:E4:A1:3B:A2:88:F7:7A:8E:E2:D8:C6
Authority key identifier: 5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04
Certificate issuer: /CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
Certificate serial: 0199FE46F058D02D03C5854A1B9F86CE46AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
Manifest number: 037B
Signing time: Sun 19 Oct 2025 21:01:25 +0000
Manifest this update: Sun 19 Oct 2025 21:01:25 +0000
Manifest next update: Mon 20 Oct 2025 21:01:25 +0000
Files and hashes: 1: WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl (hash: fots8Q7OqUyAJZjTl/zUvpwlvo7P7xdpiSQe3HIHHu0=)
2: uKvJupUJsNWoo5ivCG67FugGN0w.roa (hash: GwajJ7n21P+w7t9dfCC8gYHu25fAVce6h/mSVAkHqyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:f0:58:d0:2d:03:c5:85:4a:1b:9f:86:ce:46:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
Validity
Not Before: Oct 19 21:01:25 2025 GMT
Not After : Oct 20 21:01:25 2025 GMT
Subject: CN=039522e3795bd629d7e4a13ba288f77a8ee2d8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:52:62:91:51:ce:9d:3e:6b:a6:5f:a1:db:91:
ad:d7:59:a5:3a:fe:26:f7:ca:4a:5f:91:5f:62:1a:
42:7b:f2:d3:2e:cd:60:09:c2:73:ad:bf:b5:b6:f5:
b1:2b:04:c6:14:57:4f:f4:23:66:90:bc:1a:d6:11:
42:90:fd:ef:db:b2:5f:42:ed:43:fa:b6:50:18:d0:
f6:4b:42:40:f4:16:1f:64:02:44:28:cb:ef:36:1c:
e9:21:22:5b:00:a9:c0:2b:e3:40:7e:51:09:40:1f:
ae:1c:24:a7:24:ce:65:91:67:cd:5a:eb:63:c8:ad:
19:ef:59:4e:6d:1b:b8:31:cd:96:48:9e:aa:68:38:
03:53:a1:2f:de:4c:bb:4d:0c:c9:35:e4:6d:b4:94:
69:d1:af:c6:77:e6:67:90:e9:7f:3a:f0:bb:6d:00:
ce:8c:fa:fd:1e:61:18:a0:bf:a1:05:26:dc:13:6e:
3e:50:62:28:2f:1c:e0:97:20:4e:e1:e8:42:68:f6:
9a:8c:60:76:10:52:40:33:4d:08:7d:11:ff:4b:8b:
58:aa:a8:78:7a:22:84:f5:37:b4:d9:af:5a:bd:2e:
76:64:8c:1e:52:8d:90:04:9a:00:26:a2:ae:4a:e4:
cb:70:c8:8b:ab:b2:f8:49:80:08:d7:98:90:a6:1d:
5b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:95:22:E3:79:5B:D6:29:D7:E4:A1:3B:A2:88:F7:7A:8E:E2:D8:C6
X509v3 Authority Key Identifier:
keyid:5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:36:d7:06:42:85:b5:96:c2:d9:63:7b:1f:6c:88:04:17:61:
92:f1:ec:a3:9f:d3:ca:bb:d4:eb:76:16:8a:4e:06:25:a1:ba:
81:a7:63:c8:20:5f:3f:05:ea:1a:a9:55:fa:67:0e:6d:f1:1c:
88:72:03:d8:5c:ed:b2:76:55:73:5c:4c:7a:1f:78:69:83:4a:
5e:9d:98:8c:fc:91:c9:9d:0b:9f:13:2c:d4:08:5f:67:59:ca:
a1:2e:fe:12:13:c1:9e:81:25:16:99:9e:1c:cc:3c:6f:84:2b:
d1:9b:a5:50:dd:85:5b:ea:ad:98:d7:53:5f:2f:de:69:fe:f1:
a8:9c:1c:bc:09:29:e8:c4:0a:b2:ef:85:2b:0b:e5:91:c1:b1:
b6:f9:a7:91:3c:b3:78:21:d5:6a:97:0e:9b:dd:b0:78:ff:66:
be:64:58:87:1c:a3:31:5a:42:70:04:ad:1f:c9:b0:79:5e:82:
3d:fb:1c:09:9a:15:e7:dd:51:c1:72:74:b6:a1:ce:3f:d4:5c:
57:69:38:eb:d6:4d:aa:38:a1:e0:3c:38:a7:5e:5c:e7:17:82:
1f:b5:6a:97:7f:b8:49:01:56:56:df:f7:7a:fc:59:c5:14:eb:
7f:25:76:50:a4:26:ab:de:a4:d5:b5:e0:5d:51:aa:ce:ac:10:
88:a8:fe:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:24:32 2025 by rpki-client