
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
File: wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json)
Hash identifier: 0Usuqp1Va+w7HeeDzz+r2RX4sjzO0wJyxWY5NJUTY5w=
Subject key identifier: C1:B1:D5:31:5C:D8:19:19:6E:E2:C0:0B:E9:78:BA:1B:09:A4:7E:74
Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
Certificate issuer: /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Certificate serial: 0199FAD7B903AEB5C9868F734549B7D09863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
Manifest number: 0FB5
Signing time: Sun 19 Oct 2025 05:01:05 +0000
Manifest this update: Sun 19 Oct 2025 05:01:05 +0000
Manifest next update: Mon 20 Oct 2025 05:01:05 +0000
Files and hashes: 1: T_9TOa_stF5E9eIWRjxCGlAnn6k.roa (hash: 4V/y6Lec10YacV5wmtQBGvh+cufcrshrFw6PyKn/laI=)
2: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: 3wn03WZGrXJNzfAczPOi0KH35c2icE+i9A4TTSCiJqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:b9:03:ae:b5:c9:86:8f:73:45:49:b7:d0:98:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Validity
Not Before: Oct 19 05:01:05 2025 GMT
Not After : Oct 20 05:01:05 2025 GMT
Subject: CN=c1b1d5315cd819196ee2c00be978ba1b09a47e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a9:8d:ac:20:c6:4b:11:c0:ac:71:b8:0e:7f:
70:c9:31:bf:c4:92:c2:09:da:e5:d8:fc:7c:60:5b:
e1:1b:a0:95:b4:e3:cf:2b:36:b3:b1:51:53:b5:cf:
cc:02:1b:93:6c:8a:52:b1:9f:10:b3:10:88:d9:7d:
b2:82:e9:1a:62:b1:15:f5:19:19:ab:fc:d7:bc:f1:
53:69:c7:16:c0:e6:19:06:fa:ee:79:92:9a:d7:f3:
3b:66:7f:da:e8:e6:c3:61:b8:22:8b:fc:4d:b0:72:
8a:4a:ed:d3:84:a6:7a:a4:b5:10:7d:05:22:cd:e8:
90:e5:f4:64:25:3f:54:03:42:89:8f:db:61:d0:c4:
e8:9f:d5:0d:3c:2b:4a:27:1a:fc:6f:12:14:bb:51:
6c:11:d7:8a:bc:9d:bd:77:99:10:f2:69:b0:4e:70:
9c:5d:c0:45:3d:aa:fc:90:5e:97:13:3d:f5:dd:b9:
63:e1:90:b1:39:74:d9:2f:00:30:68:3c:f0:f0:7c:
1c:00:29:fd:b4:11:65:d0:fd:ba:3c:0f:0d:97:45:
be:26:43:c3:e2:41:ff:80:23:61:f3:c2:91:b1:b0:
a8:8c:cb:af:50:18:a6:20:7a:4c:20:f6:8a:a9:3f:
e9:34:40:36:9c:eb:d5:c1:f7:1a:6c:8a:6d:1a:b9:
da:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B1:D5:31:5C:D8:19:19:6E:E2:C0:0B:E9:78:BA:1B:09:A4:7E:74
X509v3 Authority Key Identifier:
keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:21:78:bf:da:6b:e3:94:36:84:31:f1:fb:ed:9e:32:a9:4e:
0f:b8:63:8e:a4:79:55:54:55:81:a1:56:76:bf:1a:8f:22:ab:
10:94:cb:09:8b:ea:38:de:51:3f:a0:c0:df:bc:d1:fb:f7:28:
04:c6:82:fe:1b:cb:df:62:aa:e0:c1:7e:43:d7:ec:85:08:60:
16:53:60:b0:99:4c:77:f9:cd:24:1e:af:28:41:8c:43:e1:1a:
0e:4f:17:1d:43:09:49:dd:ea:42:04:f0:09:9e:24:2a:1a:f1:
e6:60:9d:14:9c:84:63:e7:14:11:34:4e:4a:19:81:cc:3d:f3:
42:36:b4:e9:b2:c5:a1:31:89:f2:02:fc:d2:83:6c:b6:d7:12:
73:e1:ac:ed:ae:97:17:0e:0e:f7:5f:ce:94:1d:8c:7c:90:3b:
5d:80:19:dd:8c:c8:b5:34:36:a5:be:9a:4b:97:7b:b7:93:d3:
c8:a9:fc:39:c0:5d:80:e3:0e:83:10:1d:6b:1e:b9:44:9f:a7:
90:df:62:4b:8b:de:9c:5e:e7:5d:c9:f6:3c:d4:a4:23:b2:b6:
c8:65:9d:3a:bd:cd:b1:d0:98:f6:02:e4:8c:9e:cd:bb:96:87:
7d:29:38:e1:4e:2b:65:8c:88:03:f1:b3:6b:54:7e:fd:42:75:
ac:e0:dd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:16 2025 by rpki-client