Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: d9hLFxiHVamgz/T3g5rClQrFxMWfne8YYm5Xl2WSDq8=
Subject key identifier: B2:56:FD:44:0D:BA:C2:A7:CA:0B:DF:CF:35:85:2F:B0:CB:28:E9:1C
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 0199FD6B04660A48EF0549513C1C04454BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:12 +0000
Manifest this update: Sun 19 Oct 2025 17:01:12 +0000
Manifest next update: Mon 20 Oct 2025 17:01:12 +0000
Files and hashes: 1: EBp8FPomAjz-fJECFgdn5Kk0Sik.roa (hash: V1BbvemmFGDZNIpt/J1Q4nVP7R7H+EyQbSb8eICOYWQ=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: ydNORF9vYmDydFXgoc+Utl2BK+0vAYTiel9rvrDVKgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:04:66:0a:48:ef:05:49:51:3c:1c:04:45:4b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: Oct 19 17:01:12 2025 GMT
Not After : Oct 20 17:01:12 2025 GMT
Subject: CN=b256fd440dbac2a7ca0bdfcf35852fb0cb28e91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:79:1c:0f:16:f3:e7:12:aa:0e:e6:96:e4:
2d:de:92:0c:1b:53:d9:a5:30:f5:93:ea:e8:6b:aa:
5a:66:18:54:a8:93:c9:b5:a9:7f:90:cf:dc:e9:42:
46:01:69:6a:35:ef:80:7f:32:39:e1:88:45:4c:d8:
f6:ab:44:fe:5e:fb:d1:94:ff:f0:7a:d2:aa:ac:60:
a7:c0:e2:ba:8b:20:36:39:b4:12:2d:3b:81:10:37:
3f:5a:0f:9d:bb:54:c1:68:22:a2:3a:ec:24:cf:cc:
03:d5:26:56:a0:fe:15:84:44:ad:be:a2:a1:8a:3b:
12:36:d9:7b:9c:e7:25:fb:c4:22:13:11:70:b9:fd:
e5:6c:fe:3f:ff:6a:55:9f:be:70:83:6e:68:8a:6e:
ee:37:1c:25:27:47:81:f2:ac:1b:70:88:49:f2:9c:
f3:8f:cd:08:b4:f3:ca:9f:dc:fb:ba:7a:8a:7f:06:
27:70:3f:f5:ad:27:88:cb:0a:6c:20:85:66:db:d1:
8b:8d:59:45:0d:4f:42:0e:aa:13:fb:7f:4a:78:2f:
54:bb:94:9a:a9:16:d1:3b:46:b0:0c:2b:72:8a:bb:
81:75:73:68:cf:fd:b4:7c:d5:05:de:1b:84:e6:94:
1e:1e:0e:62:89:b4:9b:32:70:e9:4d:4f:96:a2:fd:
4d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:56:FD:44:0D:BA:C2:A7:CA:0B:DF:CF:35:85:2F:B0:CB:28:E9:1C
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:10:59:5b:44:ba:23:7d:69:bd:1f:12:ca:75:2f:40:bf:23:
6e:e8:16:db:f3:7f:55:c4:61:b5:85:a4:24:e7:12:46:81:d6:
a5:79:03:a2:c5:42:48:a0:28:77:f8:b5:24:5a:e3:72:e0:a4:
71:51:d4:3a:1e:94:2b:f9:c4:a4:11:02:b0:be:a5:e7:57:62:
fb:a1:43:c7:44:3e:d0:8b:4e:f1:35:38:1c:a0:0b:94:89:f2:
e6:6f:ad:39:6f:e0:f8:f3:74:b1:67:1f:79:fa:e0:b5:a6:d9:
94:3e:16:1a:68:ae:73:6c:ac:3e:aa:38:0f:1d:7f:f7:0e:59:
9b:47:6a:59:b3:39:70:75:d7:86:b4:ac:6f:81:4a:c9:fb:ec:
f7:fd:2b:48:82:eb:14:fb:eb:f8:69:0e:fe:bd:9b:7f:8b:b0:
ce:eb:89:92:93:5e:13:23:d8:71:e3:7a:10:e0:bd:db:d3:61:
3b:c6:71:a7:42:d4:98:02:eb:7f:50:06:e4:f4:97:c3:4a:e6:
6f:c3:a7:12:49:61:7a:44:8e:36:1c:87:f9:62:47:4e:26:ab:
57:70:0b:08:00:ad:39:28:bd:b3:1d:00:42:07:30:58:d5:da:
3a:a0:46:c0:48:80:7a:d7:95:e3:29:6b:a1:b1:b7:1c:39:fc:
f6:32:6c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:50 2025 by rpki-client