Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
File: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft (raw, json)
Hash identifier: 5H2muMNJNFng29ty/ZvpfsBQihHs9o0Yqp426InoxY4=
Subject key identifier: D0:FC:71:F5:14:71:8E:3E:81:31:49:B8:4E:14:DB:56:37:BC:F1:8E
Authority key identifier: 5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
Certificate issuer: /CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Certificate serial: 0199FC8F27CF12B86041D56DAB166A6D9DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 13:01:04 +0000
Manifest this update: Sun 19 Oct 2025 13:01:04 +0000
Manifest next update: Mon 20 Oct 2025 13:01:04 +0000
Files and hashes: 1: Hf8Mb8qM5ZB0G161UkFqR0v7uDk.roa (hash: 86/LxqP4QHUXPHN7MeYEfv+SmJ6UpcunDO36GSPvIQQ=)
2: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl (hash: G79MDnrV0TW6FLpHm/FJ4mRdvadm/cbvTDNhASJQGbY=)
3: rdMKkMaHfdWNXSGH8FsWUlQ7D6Q.roa (hash: lGvKyGfhIjanaigrkcQySpZWBGRsLu6frqamWcC0ZCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:27:cf:12:b8:60:41:d5:6d:ab:16:6a:6d:9d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Validity
Not Before: Oct 19 13:01:04 2025 GMT
Not After : Oct 20 13:01:04 2025 GMT
Subject: CN=d0fc71f514718e3e813149b84e14db5637bcf18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e8:75:00:d0:27:a3:8f:08:3f:31:98:fb:a0:
02:d1:e1:d5:b0:7d:11:a4:09:33:2e:9f:7a:b8:13:
48:54:f7:4b:58:db:bc:ca:8f:d6:a0:31:43:0a:bc:
fa:8f:20:63:03:89:30:87:9e:db:33:78:3c:4d:c8:
e9:b5:db:73:03:ab:87:2a:a4:9a:a0:35:00:08:2d:
ce:98:9e:4a:b3:44:79:60:fb:98:cc:1c:b8:f9:70:
a2:82:67:53:6b:8f:89:0d:89:26:dc:de:3b:ae:e6:
5f:4d:88:80:0d:cb:8a:eb:0c:ac:8e:5c:0a:83:6a:
38:e0:87:5a:1e:02:8c:af:c9:d6:5f:92:b7:db:1b:
47:b9:66:9c:11:ae:d7:0c:e6:0a:08:9d:f9:db:c7:
f4:28:a4:45:db:7e:c1:55:bd:e1:d8:ae:b3:86:b0:
9f:d3:72:2f:b2:32:d1:0d:6c:97:20:e4:2a:4f:cd:
96:e7:6f:ca:dc:78:ed:56:76:97:2a:36:55:17:d0:
93:da:fa:9c:44:7a:9d:e3:6d:04:14:5c:ca:4f:d1:
49:06:ef:90:9e:35:73:1a:78:10:2d:40:b6:32:08:
3f:cb:0a:bd:55:59:cf:6b:b6:bf:a7:6c:20:7e:1d:
6f:de:48:9f:29:a4:4d:a9:cb:e9:32:46:14:14:a9:
b3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FC:71:F5:14:71:8E:3E:81:31:49:B8:4E:14:DB:56:37:BC:F1:8E
X509v3 Authority Key Identifier:
keyid:5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1b:38:62:31:59:5c:fa:f9:b6:cb:37:c3:40:cc:84:fc:e8:
12:74:62:05:4a:73:e4:e8:99:a1:a7:aa:39:b8:4f:be:7b:a3:
ad:16:72:a9:7f:e1:cc:ad:4f:6a:1b:9d:5d:2f:83:f3:37:37:
2c:05:8c:26:92:0e:b1:df:21:3c:e9:fb:4a:17:7c:42:a1:fd:
4e:23:4d:65:2b:9e:a1:72:f0:dc:6e:32:f9:99:9c:a0:4c:61:
f7:41:f0:06:54:2e:fa:6d:db:97:ee:b5:fd:4f:3b:bd:c7:d2:
15:30:bf:3d:5f:82:e7:68:ae:04:89:1f:05:25:67:99:9a:b4:
be:9a:1a:c4:0d:c4:07:48:33:97:45:72:64:f8:87:2c:78:eb:
b4:64:47:3e:60:6b:f1:38:f0:14:db:23:12:6e:60:80:9e:b4:
e1:c4:1e:b1:ca:ea:bf:e3:8a:08:61:b8:9d:88:02:70:da:d7:
3a:68:83:93:3b:b6:63:9a:9d:1d:98:ba:ed:33:da:6b:df:87:
ab:d8:f7:34:67:dc:83:40:5b:23:b2:37:09:2d:42:f4:ff:26:
0a:e3:19:f5:e5:d8:52:5a:f2:f9:a0:e7:7b:a3:61:0c:77:09:
ed:28:50:ed:b9:6a:66:4e:d3:f0:d9:6a:25:c9:d4:3a:b9:ff:
05:c3:e8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:15 2025 by rpki-client