
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
File: WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json)
Hash identifier: 5OQY7tDpTY1UKy/0of0yXAfvHhD3vrK8j4vOwfRJTq8=
Subject key identifier: 94:42:70:E6:64:9F:8E:56:E6:87:9C:FB:5E:2D:18:42:8E:0C:E7:C3
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Certificate issuer: /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial: 0199FC5861116698A77E3B2F9F886C66DD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
Manifest number: 0B62
Signing time: Sun 19 Oct 2025 12:01:14 +0000
Manifest this update: Sun 19 Oct 2025 12:01:14 +0000
Manifest next update: Mon 20 Oct 2025 12:01:14 +0000
Files and hashes: 1: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: HFaLUIFxBhIhnq8/FekZjFSQm4TprrmF9eaQMbc89n8=)
2: ozGik-9_sBnUMoYXrZRViJEmIeY.roa (hash: 3AnFoieE3CjYtQiFDGskoD5Nyb6r911fFXwGIZ9/+iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:61:11:66:98:a7:7e:3b:2f:9f:88:6c:66:dd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Validity
Not Before: Oct 19 12:01:14 2025 GMT
Not After : Oct 20 12:01:14 2025 GMT
Subject: CN=944270e6649f8e56e6879cfb5e2d18428e0ce7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:70:98:a3:d8:4a:cd:b3:90:66:59:b6:4e:
cf:5e:c2:6f:82:6f:f6:a4:f1:75:d1:c1:00:a4:e9:
b0:8c:8e:83:86:28:e1:65:43:3a:a3:be:7e:88:ec:
62:1d:29:f6:49:d5:66:fe:85:6e:3d:d3:47:74:b2:
b9:d6:66:14:d6:6d:b1:96:2c:f0:43:38:15:0c:62:
56:6a:04:e3:9e:93:ea:52:f5:c7:d3:12:0d:66:87:
32:46:56:56:ec:74:89:fc:44:45:3b:5a:37:19:ad:
dd:c7:4c:70:0b:83:40:1e:fd:99:e9:3e:76:55:89:
ad:e6:5f:0d:0b:86:e9:21:67:3d:bf:85:a9:1a:dc:
5c:97:12:53:47:26:6b:d9:9c:6d:ef:74:08:2c:89:
e1:21:aa:be:50:c5:cc:c8:0d:41:42:54:c2:ed:cb:
43:db:d8:bf:a4:0e:9d:71:2e:e5:9c:6d:16:7b:be:
3f:bc:94:b5:af:bb:01:b5:ca:f7:60:1e:f8:6d:0a:
d2:19:5b:54:7f:7c:19:a1:e5:e3:84:8a:0d:5d:12:
cf:86:d9:e1:21:f9:16:67:12:2e:02:b2:c3:a7:76:
f8:c1:27:a4:69:81:6c:c4:76:7a:63:fd:e6:67:cf:
02:7c:11:ce:20:f8:f4:7c:29:fb:5d:0f:6f:33:4c:
2b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:42:70:E6:64:9F:8E:56:E6:87:9C:FB:5E:2D:18:42:8E:0C:E7:C3
X509v3 Authority Key Identifier:
keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7a:f0:db:c7:54:a4:fe:41:a5:4b:95:54:95:77:7f:5e:40:
77:8c:8f:38:9d:d0:65:fa:ed:10:34:1a:66:55:8d:ce:ec:e1:
83:1b:c3:b7:7f:ea:84:ad:a9:7f:c5:7f:b8:61:06:c3:7f:02:
bf:80:db:15:71:0e:0f:36:55:ca:5b:99:72:f3:3d:d0:37:f8:
b2:50:6a:97:67:37:41:fb:33:7a:8a:96:a8:b8:b0:42:d4:b7:
a1:de:57:32:d0:35:2c:33:41:25:76:f2:19:73:83:ff:5d:bc:
26:3e:9b:05:d6:1f:45:ad:50:83:6c:86:61:7d:e1:9b:a4:68:
15:b3:66:ee:49:79:51:6f:4d:73:06:ae:6e:af:2c:e2:ec:2d:
ad:41:9c:49:dd:fc:26:fe:50:cd:6d:19:54:06:cb:b0:63:79:
a6:bd:5d:4d:dc:f0:01:61:05:78:02:2a:01:36:6f:49:94:31:
8a:b1:76:1e:8f:4b:9e:ce:4c:07:0c:fc:1d:83:a0:77:a5:f0:
47:2c:11:d8:c4:63:68:17:94:48:18:9f:3b:fc:cb:07:fc:1c:
c9:57:be:29:d2:01:ed:c8:ab:66:71:bf:fa:83:eb:cd:b2:97:
ae:a4:ed:d1:46:b3:31:e8:f0:9d:7e:c4:2c:b3:60:b0:24:1e:
e7:db:86:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:13 2025 by rpki-client