Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
File: WGesaYXMCz_qIWlFyS6y6TIYlAM.mft (raw, json)
Hash identifier: 9s0Fo6fQL9NQXpi20jIzUsSOl2Fqb+eqpqUDUHmcx+c=
Subject key identifier: 44:EE:AF:81:91:75:60:FC:BA:70:3E:88:8D:88:66:D1:DB:6C:32:06
Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
Certificate issuer: /CN=5867ac6985cc0b3fea216945c92eb2e932189403
Certificate serial: 0199FC8F7C92AAD11137B3276892829E2539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
Manifest number: 08C1
Signing time: Sun 19 Oct 2025 13:01:25 +0000
Manifest this update: Sun 19 Oct 2025 13:01:25 +0000
Manifest next update: Mon 20 Oct 2025 13:01:25 +0000
Files and hashes: 1: WGesaYXMCz_qIWlFyS6y6TIYlAM.crl (hash: TvnBukeMBJRAaSkZYP3d9MxaCjMqGvyiaYQffRmX+3U=)
2: bnhhztuxFibvur8FNpe0Q4uP7wo.roa (hash: KQsITvPg/PJVER0mAbZoTouNCOSRyBSHFqtg7Z3silI=)
3: hPuuxvG6wf_iyGajLZm0PrPRNTE.roa (hash: SqhFWrnGhewNDVxVRZLbY/mjVnrnZ6zHK448/hSwl8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7c:92:aa:d1:11:37:b3:27:68:92:82:9e:25:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403
Validity
Not Before: Oct 19 13:01:25 2025 GMT
Not After : Oct 20 13:01:25 2025 GMT
Subject: CN=44eeaf81917560fcba703e888d8866d1db6c3206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:82:72:62:7f:7f:da:2a:68:db:58:6e:d6:
6f:6c:c5:9c:f9:bc:e7:f4:61:63:43:0d:13:99:10:
55:42:af:e2:60:16:ae:fc:64:74:a4:0c:50:2e:45:
56:f4:e5:02:78:21:bc:d8:ec:d6:53:4d:7d:36:ea:
d4:4f:45:46:3a:10:94:84:d7:a5:77:4f:bf:e9:ea:
be:31:a7:ec:df:e0:22:ca:ce:39:4b:7d:a3:00:4c:
97:59:ac:64:1e:36:de:80:b8:e8:7f:40:18:25:aa:
a1:d4:f4:d2:e2:f6:65:cf:43:ac:8b:38:9c:91:80:
f8:ae:f2:ce:1b:5b:5c:62:38:47:92:f5:8e:3e:a1:
f4:74:cc:f6:b6:24:23:6a:e8:52:c9:cf:8e:44:d9:
ff:fc:7b:4f:3c:c7:3d:99:d5:14:aa:9b:32:cd:ee:
5e:83:20:72:f0:7e:42:1a:14:bb:33:af:bb:a3:0c:
f4:45:df:a6:92:82:58:67:90:18:f1:a4:97:fb:96:
a3:13:60:1b:17:f0:38:b2:c3:b9:51:9b:dc:23:ea:
a6:f1:90:8b:d4:02:e7:e3:0a:f7:e3:13:ce:95:e2:
ae:a5:58:1f:78:f4:53:1f:aa:97:ae:6b:03:45:c5:
a0:8a:87:26:51:07:96:ee:55:36:b3:0e:c4:a7:93:
bf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EE:AF:81:91:75:60:FC:BA:70:3E:88:8D:88:66:D1:DB:6C:32:06
X509v3 Authority Key Identifier:
keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bf:1e:71:84:5d:30:d5:ee:7f:13:44:17:75:1e:61:e8:03:
ac:e9:83:81:70:b6:47:c0:2f:ce:cf:44:9d:df:a6:d3:56:5d:
d8:14:91:5b:50:ca:bb:20:a8:28:73:ba:37:ee:a5:62:60:a5:
82:0b:3e:a1:18:a5:7b:ca:4d:d4:b3:4b:23:59:67:fd:3c:d9:
04:c7:01:fa:59:d0:a6:2a:71:73:82:7e:99:c8:de:e9:4c:ac:
d7:81:d4:43:6b:1e:36:dd:46:84:21:f1:e4:bb:ed:8d:07:16:
73:55:b4:25:0e:b9:b4:08:f1:05:c2:b8:17:ec:a1:fe:10:c5:
71:6e:72:d9:91:e4:54:e3:68:c3:8f:ab:3b:d6:36:3a:fc:61:
34:7c:84:77:99:09:14:65:0d:00:59:6f:b7:fd:ad:d8:62:84:
57:14:e8:fc:54:e7:a7:1f:cb:af:d1:94:eb:7b:f8:c8:86:3f:
21:d5:60:89:c5:1d:b6:dd:83:d5:c9:f7:0d:df:0a:db:a9:02:
05:02:52:e5:48:da:90:8c:4e:c6:29:61:97:d7:19:ec:c6:1b:
7c:75:18:5f:1a:b8:2c:a0:ae:aa:d2:26:9b:56:52:bb:e0:04:
e8:8a:10:b1:d7:0f:a0:49:61:d1:7d:a2:e0:73:1a:94:e2:09:
40:7e:3d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:33 2025 by rpki-client