Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
File: wADaNsWELOEw_QaJEuv8DGnnZgY.mft (raw, json)
Hash identifier: BoKfJamvyGOzGqFQLh6eLl+2L0gjfJxtuGuOBbrEAtM=
Subject key identifier: 60:41:B9:3D:BB:DA:C9:41:14:C5:3B:9D:1A:86:72:17:72:49:3A:07
Authority key identifier: C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
Certificate issuer: /CN=c000da36c5842ce130fd068912ebfc0c69e76606
Certificate serial: 0199FC8F7E64D39FDFEEC375ADDFAA824AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
Manifest number: 056D
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: YwPa7fIjOxU3w2nMuyLflIyituY.roa (hash: bzaGLCEsglB24IqcrTEilteAr5hqEsn8c1gGVkcmknA=)
2: wADaNsWELOEw_QaJEuv8DGnnZgY.crl (hash: kSwSwnnDWIKTVibI0tjS6/7nraoBAB+Bc4C6WrlcgMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7e:64:d3:9f:df:ee:c3:75:ad:df:aa:82:4a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c000da36c5842ce130fd068912ebfc0c69e76606
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=6041b93dbbdac94114c53b9d1a86721772493a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:07:3b:a5:06:aa:ed:92:be:a2:16:46:8c:
ad:7d:b8:2f:53:9c:f2:20:4d:44:d4:a9:d8:64:6f:
56:d8:27:c3:8b:75:56:8f:91:df:62:56:2b:80:d0:
c8:4e:36:08:5a:f2:2d:80:84:ad:eb:27:4f:e6:22:
02:b9:d2:0c:65:83:84:cb:d3:2c:e8:8c:c0:bf:81:
5b:72:66:47:ee:35:08:93:d8:02:d6:c8:06:d2:6e:
10:f1:b6:38:8f:bc:a7:ab:d1:fd:38:c3:63:8c:d1:
3e:96:77:e9:fc:02:a3:cd:69:20:e5:b9:89:23:de:
1f:d2:19:74:4b:be:5f:94:96:9b:cc:20:6e:74:29:
4e:a1:80:59:92:5c:7c:17:b8:87:ce:bf:f4:4a:19:
75:ee:84:97:8a:d8:d1:6d:d2:ce:05:04:6d:0e:ff:
23:be:19:43:e9:7b:c9:ca:f6:42:b5:0a:24:59:22:
3a:7c:f8:8c:63:f4:de:ed:de:b6:ff:6e:db:fb:84:
6f:82:d3:5f:c0:71:77:5f:23:96:7c:ee:c0:ce:a4:
55:5d:84:04:62:f0:4b:4e:45:42:d7:cc:12:c5:63:
7d:b1:dd:25:46:96:17:79:4d:a6:0d:45:a9:68:ba:
c2:fd:8a:0d:6f:b8:57:91:c5:53:af:32:74:b1:05:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:41:B9:3D:BB:DA:C9:41:14:C5:3B:9D:1A:86:72:17:72:49:3A:07
X509v3 Authority Key Identifier:
keyid:C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:90:99:0c:02:5f:12:6b:61:43:d5:8c:dc:e1:90:cd:bc:6b:
5a:50:f0:c4:a2:98:59:c3:b9:92:0f:e9:08:4b:24:16:4f:2f:
56:24:8a:47:71:9c:5a:47:21:50:cb:95:ed:b4:58:75:91:72:
d7:83:5b:67:b5:d8:a4:a0:ce:3d:31:60:0f:d7:2f:c1:69:ba:
de:66:6f:e0:ea:ff:4b:da:58:3a:03:fc:06:1b:66:6a:22:e1:
dd:f4:7f:1b:7e:82:9a:37:4a:a0:ef:32:12:71:1d:57:52:22:
3c:a1:2c:af:b9:e3:97:9d:65:37:e8:5a:db:c8:51:ec:f5:97:
e5:01:a0:9c:7e:a8:3e:e7:82:0a:8d:a2:ab:a2:0f:68:94:44:
0a:c2:c4:db:39:70:ab:63:eb:02:48:d0:43:8c:c5:5f:af:3c:
d9:1d:a9:f3:1d:58:0a:59:41:d2:fc:0c:ca:43:9e:61:56:d2:
5d:b6:ff:9d:32:b7:99:f6:a4:b9:31:d1:cf:b1:2d:a0:43:19:
1e:40:b6:8d:14:18:c5:f9:2e:ce:7c:63:f7:58:b7:3a:a8:aa:
a1:57:23:1b:40:01:86:ee:28:43:71:b8:5a:74:19:0c:2e:7c:
0d:79:32:6a:9a:3b:66:3f:6f:a4:4f:13:96:c7:61:b1:0f:11:
17:af:12:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:17 2025 by rpki-client