Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
File: WKhqbHH7c0xwW15m50rBxWu5YF4.mft (raw, json)
Hash identifier: NwBVaPZ0X9j4Qwvkdd40ZsamtObOxGSwfyst67Unpm0=
Subject key identifier: 19:36:C9:FD:03:3E:33:F6:7C:55:03:09:67:B2:37:73:0F:D3:D3:CC
Authority key identifier: 58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
Certificate issuer: /CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Certificate serial: 0199FBEC2BBA23A452CF75FAD8A7FC570A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
Manifest number: 0CFD
Signing time: Sun 19 Oct 2025 10:03:02 +0000
Manifest this update: Sun 19 Oct 2025 10:03:02 +0000
Manifest next update: Mon 20 Oct 2025 10:03:02 +0000
Files and hashes: 1: WKhqbHH7c0xwW15m50rBxWu5YF4.crl (hash: fkLTWzH1u8AUCedA9I0ZmF+3TbTTXxVVh3leaV4Gpjk=)
2: eTD5X7eUVxPbE-bCRH9QGxLRZDs.roa (hash: IG853MFkGaq1sWpTd3DWggMITF7We7r2IbsZKj9lAZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:2b:ba:23:a4:52:cf:75:fa:d8:a7:fc:57:0a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Validity
Not Before: Oct 19 10:03:02 2025 GMT
Not After : Oct 20 10:03:02 2025 GMT
Subject: CN=1936c9fd033e33f67c55030967b237730fd3d3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:ab:b7:85:16:c0:61:70:1b:8c:e3:e7:4c:
58:b1:7c:0c:69:b4:19:ff:01:4a:e0:27:eb:e0:2d:
73:80:3a:ec:b0:a0:f2:22:10:42:a0:99:d5:9e:6c:
cf:44:6d:67:ba:a5:c0:c4:cb:c8:0f:00:ff:e5:07:
ae:f7:6e:65:b9:62:1c:00:1b:3c:d6:3e:ba:ca:cb:
47:94:83:8d:fe:e5:cd:4e:f4:3d:d8:ab:02:fa:ae:
bf:17:40:aa:5e:dc:fb:8b:0f:fe:c4:a1:b1:91:c9:
79:79:02:f8:93:c5:5a:77:c4:84:cb:3b:9d:f5:7e:
57:75:54:b3:cf:8d:c2:46:95:c7:88:0f:f5:2c:16:
66:13:22:f2:85:fc:ff:d1:c4:3a:db:44:61:1f:bc:
58:20:f2:2d:99:0d:70:e4:8a:52:a1:ae:2d:fc:1d:
5d:75:0e:f2:30:7c:ae:89:e6:fb:fd:ea:bb:e5:d5:
ff:e9:23:85:ce:f3:8a:01:32:dc:8a:43:e8:aa:54:
52:4b:2e:c3:ee:53:a4:b0:b8:df:51:90:0a:6d:26:
63:84:7e:81:20:10:41:0f:0a:29:2b:89:35:4c:df:
2a:ed:d1:88:29:2e:79:04:57:e9:83:cb:b7:0e:1c:
94:b5:f1:1a:7d:9f:04:e0:0d:73:a3:0e:b8:8d:53:
9e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:36:C9:FD:03:3E:33:F6:7C:55:03:09:67:B2:37:73:0F:D3:D3:CC
X509v3 Authority Key Identifier:
keyid:58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:63:71:4c:7d:e4:1e:58:22:a4:8f:c3:b2:09:7f:43:65:c8:
a2:28:ed:2b:05:4a:8b:d1:d5:a6:bb:a8:72:fa:0e:73:dd:dc:
f4:4e:50:a9:5f:2f:fb:ff:9d:aa:12:16:af:ac:a6:fb:28:77:
18:eb:eb:4b:ac:9c:cc:29:b0:7d:43:3e:fd:cb:ea:e5:4e:ba:
45:1c:1f:90:4d:8b:27:eb:1a:60:22:4d:6f:a0:e2:89:85:88:
4a:32:77:f3:fb:8d:94:84:f6:7e:7f:e3:39:23:b3:ce:4e:19:
d7:d1:ec:21:b4:a1:a3:05:92:85:da:15:d9:fb:8a:4f:34:73:
65:5e:b0:df:42:c2:e5:59:ac:b2:8f:03:70:49:1b:b6:d2:c1:
b4:d9:7e:11:19:da:44:b3:33:40:94:7b:d5:86:3f:08:0d:10:
3d:26:11:ee:62:42:e7:70:2b:df:9b:e4:da:3e:fb:e9:a7:56:
67:d6:e8:1c:2b:c9:60:8b:a0:e5:bf:62:54:b0:f1:69:b0:c8:
a8:1c:56:bd:07:f9:d6:24:8b:a7:38:68:de:32:4c:5d:5f:8f:
29:29:77:48:8a:86:3a:94:01:10:0f:95:ea:01:21:df:15:33:
68:07:0c:db:ad:37:60:8f:77:76:91:cd:b0:6a:a9:bf:5d:e8:
1f:8d:df:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:53 2025 by rpki-client