Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
File: wLjiV5ep3EPC5GOUsMixsQirQ7k.mft (raw, json)
Hash identifier: 0A+uyd7RygCtqZmkVzXi8sApNn1DSRiIwfEYDMkanQY=
Subject key identifier: 89:E9:0B:CD:C4:8B:B8:59:86:EE:11:31:8B:9D:96:C5:CF:42:0E:ED
Authority key identifier: C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9
Certificate issuer: /CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
Certificate serial: 0199FFC8C4622C09A5E0BDDB251C47E000F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
Manifest number: 0574
Signing time: Mon 20 Oct 2025 04:02:51 +0000
Manifest this update: Mon 20 Oct 2025 04:02:51 +0000
Manifest next update: Tue 21 Oct 2025 04:02:51 +0000
Files and hashes: 1: 3oLf6nYLu-Xr7qpLQICeS2w7Tus.roa (hash: XtsupCW4EVcqvMqJHKb5yPLyEGcRcTQPpgXjTIHJ3Z4=)
2: wLjiV5ep3EPC5GOUsMixsQirQ7k.crl (hash: G1RS+Ov9eFjViQlkxKP/zQ2vyapoxabddkOr2vfkeQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:c4:62:2c:09:a5:e0:bd:db:25:1c:47:e0:00:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
Validity
Not Before: Oct 20 04:02:51 2025 GMT
Not After : Oct 21 04:02:51 2025 GMT
Subject: CN=89e90bcdc48bb85986ee11318b9d96c5cf420eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:f8:f1:29:4a:b9:fc:98:80:cc:09:7a:32:
e7:09:b0:43:4d:0d:44:36:e7:60:8b:9f:d5:c5:95:
d7:8c:8c:57:8c:fe:64:09:45:70:cc:7d:bb:25:f2:
90:ab:8d:b8:b5:8c:ba:55:2e:c5:5f:bf:5a:95:86:
cb:4e:8c:21:de:80:c7:51:ea:7e:b4:67:ae:cc:b0:
b8:3f:0a:73:75:83:db:7c:f8:ca:b2:fb:6f:30:08:
88:6f:23:50:de:be:dc:eb:54:46:8c:0e:79:02:3d:
d6:33:7f:47:d9:5e:20:68:99:7a:f0:a4:b5:74:5a:
1d:40:d7:d8:79:50:b2:90:1e:02:cb:ba:80:c2:a3:
ea:13:ec:94:81:f4:b4:71:0d:9b:85:06:60:d6:08:
60:3a:b5:8a:37:7d:27:22:39:d4:74:5c:80:90:ba:
27:02:26:80:51:f6:37:56:72:b8:56:45:c2:eb:09:
76:92:ef:15:92:af:6a:da:e3:16:f1:e0:0a:6f:e1:
5f:0c:5f:df:34:3e:59:5c:25:57:55:4c:c3:d1:d7:
01:fe:dd:5f:fb:4d:25:19:d1:95:3d:39:b4:e4:f1:
71:c0:ca:84:e3:a5:b3:4b:59:19:2b:5e:d4:f7:12:
ea:fe:57:0d:ee:25:06:ce:55:a0:25:f9:6d:59:f5:
5e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E9:0B:CD:C4:8B:B8:59:86:EE:11:31:8B:9D:96:C5:CF:42:0E:ED
X509v3 Authority Key Identifier:
keyid:C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:4b:f3:3c:46:29:3f:85:22:b7:a2:b7:f1:05:6d:66:dd:0a:
5c:5f:99:cf:f8:fb:98:03:57:14:8c:bd:a8:a0:e7:e9:e6:44:
a9:2d:b1:76:b7:c0:37:16:60:c3:ed:e1:af:87:cb:89:d7:37:
6a:44:a5:7c:8c:27:98:53:e7:8f:30:0a:13:ab:de:fa:28:38:
2a:80:d3:39:78:d7:66:29:fa:b0:85:70:99:70:e9:db:d8:3d:
a9:f0:8a:27:c7:59:ff:b6:dc:8a:e2:0b:c8:d0:89:50:ae:de:
18:34:69:5b:4f:5c:b1:e8:1e:a8:29:79:b2:bb:ee:b1:36:dd:
66:4f:2c:03:06:be:3d:36:f9:97:c4:fd:46:95:ba:73:f8:97:
2c:ef:e0:1e:79:25:5e:a6:9d:90:45:bf:18:64:4a:22:16:a8:
ef:d2:ca:03:57:78:09:c9:b9:d0:52:a8:e0:88:66:05:1f:ab:
f8:64:d1:e3:ec:f8:51:28:d5:90:fb:64:60:e9:c1:89:09:2e:
97:68:c2:6d:dc:4f:b8:0f:ba:d3:7d:7f:19:5d:53:ff:08:90:
b4:e3:09:47:e6:40:65:81:eb:71:fc:2c:51:18:22:d0:89:a3:
74:1b:55:a9:9b:ca:f4:21:68:b9:be:b1:0f:e4:da:1b:db:ad:
70:75:82:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:47:33 2025 by rpki-client