Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
File: WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft (raw, json)
Hash identifier: 46tulrakOrJpBOFB95j3Nz7+IKEW26t7yTC+UHlOfm0=
Subject key identifier: 4F:80:F0:CF:C1:54:5C:57:45:34:81:E5:5C:47:EE:53:64:DC:6A:56
Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Certificate issuer: /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Certificate serial: 0199FCFD5B1053E577D8846B86FFBD1D13E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
Manifest number: 0A8E
Signing time: Sun 19 Oct 2025 15:01:26 +0000
Manifest this update: Sun 19 Oct 2025 15:01:26 +0000
Manifest next update: Mon 20 Oct 2025 15:01:26 +0000
Files and hashes: 1: WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl (hash: 59aT6NJAIxzi/ZAMp2I4vreiRWPCPffVaymyPjxta1w=)
2: gS4jeqALacaf51dl93Py-I7kfls.roa (hash: OBdPPMpWE3pFYQDOuw6u5rVnnXeeNEwg98LVQA2Wi/s=)
3: gfhu0UMjPTGrZruaeirhOo04QTw.roa (hash: HYAZtY2G7JxVkFUj22KQMYwy01JLPX5+ssTDK0gFTRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:5b:10:53:e5:77:d8:84:6b:86:ff:bd:1d:13:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Validity
Not Before: Oct 19 15:01:26 2025 GMT
Not After : Oct 20 15:01:26 2025 GMT
Subject: CN=4f80f0cfc1545c57453481e55c47ee5364dc6a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b5:d6:6f:be:ee:f7:0f:a8:e5:1f:9a:12:fd:
ad:e0:c1:69:e6:82:8d:d6:d1:32:cc:42:fc:76:27:
47:3f:ec:ec:ed:5b:06:1c:54:9b:4f:fa:51:92:de:
72:82:bb:24:d3:0a:38:62:7d:e1:2c:b0:24:50:a8:
c5:cb:b2:bd:e5:f4:f4:7b:5a:15:ca:94:e3:b7:ae:
e7:d9:e1:ac:27:6c:cb:05:cc:64:bd:37:c7:37:ea:
4a:19:c7:f5:9d:6b:45:59:be:7f:e7:71:38:db:d2:
fb:c7:d8:3d:a4:da:83:41:b3:d8:99:85:dc:37:19:
30:b7:76:5e:65:9d:db:72:ee:42:54:09:8a:55:bc:
7c:95:d3:37:ac:41:3d:3d:b1:bd:2e:72:75:99:59:
bf:a1:94:c9:77:2b:74:6c:b0:15:01:27:82:c8:0c:
08:97:34:f2:16:e2:d6:30:9e:b6:7b:d5:4a:e2:56:
75:52:fa:1d:6a:7d:73:f1:af:71:e6:56:3a:bb:64:
d0:fe:22:8e:e4:8c:41:72:89:81:a6:4a:a2:65:ec:
1e:85:37:60:48:a4:7b:6a:8a:de:5c:3d:80:47:65:
da:64:7f:df:0f:ed:76:86:0a:6b:89:9a:cf:cd:a6:
33:4a:3a:7f:7e:83:ad:fd:84:31:4b:fd:5b:1b:fb:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:80:F0:CF:C1:54:5C:57:45:34:81:E5:5C:47:EE:53:64:DC:6A:56
X509v3 Authority Key Identifier:
keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9c:01:d0:4a:5c:d3:e8:5c:34:6c:cb:66:b5:97:c5:23:d3:
cd:bd:ba:52:45:35:0b:c7:28:6e:55:13:a2:d7:d7:58:2d:48:
16:5a:d1:dd:50:7d:c1:5b:cc:f3:af:ce:92:8f:8c:09:7f:27:
cd:1b:49:93:95:64:ed:69:bf:08:13:d0:d5:c6:21:fe:5b:13:
5b:7a:17:aa:28:4e:de:15:d4:a4:80:5c:1e:16:27:dd:21:94:
fe:8f:96:e8:03:f5:db:b0:1c:61:75:15:f9:0c:fa:42:fc:a5:
ed:7a:dd:0f:52:f7:e7:9f:ce:b4:e5:93:66:9e:23:d6:46:af:
02:11:6f:f8:2a:1e:90:00:15:d5:5b:71:db:50:4b:48:a0:f3:
05:f3:f4:db:dd:78:99:3f:55:d2:4c:53:41:f9:65:66:ed:0a:
51:ef:4c:2d:cc:7a:e1:23:52:ed:5d:b2:bc:df:34:b9:63:69:
a0:55:e0:d4:eb:05:08:1e:da:6f:4c:ca:ca:64:0e:b4:71:2e:
eb:0b:21:92:f0:a7:df:73:b8:e4:8e:ba:32:b0:3e:7c:ba:34:
d9:2a:3e:1e:fb:fe:56:09:a1:84:6d:b7:0d:f2:fb:41:94:ec:
3b:09:22:d3:41:e9:b3:5a:b6:72:f4:8a:a0:df:fd:35:26:7d:
06:f1:57:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:29 2025 by rpki-client