Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
File: WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft (raw, json)
Hash identifier: w6nO4xjoOwkMPrLq/dgGUSR5NTqZkO+k8SFBL7bdkfU=
Subject key identifier: 5B:27:B8:AC:A9:DC:42:E5:DA:43:CA:25:83:26:A5:DE:F5:15:41:90
Authority key identifier: 5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
Certificate issuer: /CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Certificate serial: 0199FC8F96108E65D31938C5DC7E0BECCD43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
Manifest number: 0B5A
Signing time: Sun 19 Oct 2025 13:01:32 +0000
Manifest this update: Sun 19 Oct 2025 13:01:32 +0000
Manifest next update: Mon 20 Oct 2025 13:01:32 +0000
Files and hashes: 1: WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl (hash: lppGFFLBFpR11XqCZ4jWINWxtv6us/5O2FWQZ9c/o8M=)
2: euH012EDGUcPvCsGZK3_XSPmReQ.roa (hash: 4a2YJ6UV9i6dy+y4QlBQdoAoRR/Frnfv0MzkbXJqY/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:96:10:8e:65:d3:19:38:c5:dc:7e:0b:ec:cd:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Validity
Not Before: Oct 19 13:01:32 2025 GMT
Not After : Oct 20 13:01:32 2025 GMT
Subject: CN=5b27b8aca9dc42e5da43ca258326a5def5154190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fd:43:e8:6a:e9:ef:c0:5a:39:f1:00:54:e7:
6b:91:dd:a5:73:a0:c2:74:f7:21:a4:24:5d:f3:e1:
0c:e2:a6:e8:56:1d:8f:2c:24:b0:28:1e:3d:ee:bd:
f0:e2:9c:a4:07:da:19:17:57:e5:f3:6a:3e:8d:15:
b5:23:0f:23:aa:b1:71:53:dd:9b:ba:87:e9:cb:1d:
9a:92:44:cc:72:70:d7:3f:b4:b4:e6:9f:ef:e8:ec:
22:53:1c:04:d1:77:1a:e6:ee:2e:06:df:e3:7e:47:
0a:e7:e6:34:b7:ae:24:68:34:fb:c3:ee:65:53:ca:
76:16:b8:65:a6:51:55:a8:fe:71:2c:75:dc:eb:30:
55:ec:85:53:54:06:4e:f5:df:62:34:56:31:24:fb:
96:41:ca:b2:11:32:10:28:e6:74:d4:41:52:17:a4:
b4:7d:e3:3f:33:11:89:e6:21:8c:b1:00:c7:fb:76:
c7:f1:36:06:eb:2c:45:af:d3:44:75:a1:82:85:d5:
dd:e2:b1:08:8c:a5:1e:47:87:6d:ed:d3:a5:12:9c:
d4:8f:61:2b:00:1a:f2:d7:9e:6b:e3:d7:ec:6a:02:
46:bd:51:c5:b5:ed:b9:05:da:5d:76:e4:c3:df:af:
a7:01:ea:07:e9:bc:9d:5c:a9:db:b0:d1:d3:90:c6:
f2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:27:B8:AC:A9:DC:42:E5:DA:43:CA:25:83:26:A5:DE:F5:15:41:90
X509v3 Authority Key Identifier:
keyid:5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:da:e6:91:88:f9:48:6c:8a:97:b4:b7:ef:fe:04:63:40:cb:
c1:32:39:ee:74:0d:0c:8c:86:e7:63:5a:4c:59:3d:d4:e2:d5:
9b:5e:5a:98:d4:01:26:80:a9:e5:1c:63:fc:cb:36:ea:82:31:
55:fd:4f:d9:5b:be:e9:b5:7e:5a:fe:b7:51:67:bb:5b:8e:8d:
94:d5:8f:8d:fd:5f:83:5b:3a:d8:70:5e:e7:c5:91:ce:af:09:
07:58:5a:60:6a:e0:c6:42:e0:51:f7:79:b8:a2:76:dc:8a:01:
be:9a:fa:c7:82:cb:a9:46:57:d6:9c:a4:98:8d:71:42:d4:63:
af:ec:63:30:cb:02:b5:1b:f2:78:59:1f:1d:74:e9:dd:1f:97:
6f:d9:c9:67:15:7b:e3:7a:ef:0e:93:2e:d5:65:af:3e:3f:b0:
3c:5a:34:59:af:c8:81:fc:dd:47:46:eb:3a:a6:5c:d5:3f:b0:
c7:b8:b1:31:ff:31:0a:0e:8e:03:4a:a1:bb:99:a7:f8:3e:b6:
66:e3:8a:55:15:48:29:5e:8d:9a:5f:fa:c8:ab:3d:b1:94:20:
d0:18:50:75:75:7a:39:97:b1:64:56:6f:7c:be:cf:c8:90:10:
85:76:8a:1d:92:70:40:97:23:d2:da:d2:76:12:65:4b:68:e0:
aa:16:dc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:20 2025 by rpki-client