Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
File: WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft (raw, json)
Hash identifier: R+NDsz28pkwp2LCkvVeDTsO93jMg2IGokf7u26XYI8Y=
Subject key identifier: 50:20:1A:82:23:27:AE:2E:DF:F0:84:23:E6:FA:B1:13:E7:9C:E0:3F
Authority key identifier: 5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
Certificate issuer: /CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Certificate serial: 0199FC5901D6BC1C091BFA0D4E4D7DA5C3B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
Manifest number: 0F02
Signing time: Sun 19 Oct 2025 12:01:55 +0000
Manifest this update: Sun 19 Oct 2025 12:01:55 +0000
Manifest next update: Mon 20 Oct 2025 12:01:55 +0000
Files and hashes: 1: CyjhjoDiSo7WFimizlr7VkadJR8.roa (hash: cM6TG/2qfvLGo5XP6sM8MTNGlbdx/5vkQ91bz6yRUQw=)
2: WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl (hash: I686pzdLxlyxsFrQholLSpmcx0HH9oG9GMkcbcqUpKA=)
3: hWPfJRigBwQrXXI_iYiIoMMdvMI.roa (hash: wsY9wU/Uh/qwSah/fwLqo3Fci0fOUVaJuSLnsVDw8zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:01:d6:bc:1c:09:1b:fa:0d:4e:4d:7d:a5:c3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Validity
Not Before: Oct 19 12:01:55 2025 GMT
Not After : Oct 20 12:01:55 2025 GMT
Subject: CN=50201a822327ae2edff08423e6fab113e79ce03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:ff:3b:28:3a:94:0b:3a:be:be:62:97:f9:
47:16:0a:db:d3:be:50:be:2d:89:7d:ff:2c:c6:28:
3f:bc:e5:f9:82:7f:da:49:c9:2f:d5:5f:85:15:e7:
9d:bb:bb:1e:5e:19:ec:95:2a:3a:e5:85:13:17:c2:
90:67:b9:fe:26:6a:f9:fe:81:ce:53:05:de:0f:35:
c1:d1:1c:8a:d3:96:39:00:a7:b1:fd:43:e5:43:ba:
7e:b3:03:7b:53:cf:87:08:c0:85:9c:9e:d7:df:cc:
1b:df:89:fd:81:6b:39:62:3b:f8:8b:b2:5f:65:ae:
01:ac:54:87:c8:bd:48:ca:1d:44:6a:5d:46:c0:92:
02:88:be:0b:3f:01:71:dc:19:2e:6b:cd:de:31:54:
63:ad:5b:08:4c:eb:1b:ad:9a:f3:72:dd:96:df:7a:
a6:ee:ac:40:98:e5:d1:df:ab:a5:b9:11:ee:a5:c8:
6f:f6:40:8a:b6:73:30:67:2b:23:ca:2a:82:fc:57:
e2:76:3e:86:4f:09:51:f5:60:77:63:9a:db:71:99:
8c:a3:aa:b9:48:00:cc:67:7d:32:8d:2d:59:06:ae:
cf:96:d4:59:11:27:4c:90:00:a0:ff:e4:ff:aa:6d:
0a:24:80:41:e4:a7:4d:d0:e0:21:3a:e7:f5:a7:dc:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:20:1A:82:23:27:AE:2E:DF:F0:84:23:E6:FA:B1:13:E7:9C:E0:3F
X509v3 Authority Key Identifier:
keyid:5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:cd:af:51:10:44:91:7f:7e:8e:0c:90:d0:1a:86:ac:9b:c7:
c2:26:9f:12:41:6b:2f:64:62:23:b7:05:8b:fb:75:d3:15:e7:
98:73:0f:8b:10:c3:1e:62:dd:98:6b:3b:ef:2a:e0:7e:68:f8:
e5:48:f8:2e:eb:1b:fa:0a:be:24:dd:b1:9d:8b:ab:d5:24:8e:
27:43:b4:e6:a7:79:d2:2b:01:b6:da:96:4f:a7:f6:fe:a9:44:
6d:21:85:7b:78:35:40:17:7c:73:c2:45:c4:31:ed:51:2c:85:
bf:d0:f7:42:69:19:58:cd:2f:86:82:f4:91:e8:48:02:0b:75:
5a:1a:48:a2:c7:a9:02:22:c9:05:14:e1:c4:7e:4a:ff:97:1e:
ca:79:97:32:58:04:45:e5:14:84:f4:c2:38:fc:26:af:de:d4:
cf:6c:55:ae:9d:3f:a3:e1:f6:c9:8c:7c:e0:2a:af:00:5e:8a:
18:d0:85:4a:b4:81:28:cf:71:8c:31:16:c4:52:0c:f6:1a:bb:
e6:de:ce:0c:32:39:b0:78:46:bf:53:14:ec:39:a6:c0:3d:69:
11:f3:89:04:33:31:4e:fb:91:f4:5e:96:d2:31:a4:c7:cb:d3:
df:23:40:66:bd:ce:e2:2d:15:61:82:2f:f4:e6:be:f6:62:9f:
a7:e3:fc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:54 2025 by rpki-client