Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File: wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier: lTduk6drCsIyfbVeJ3vHVrNqLL63UN13e5tpSfdLNoM=
Subject key identifier: 91:53:75:01:FF:1D:BF:7E:CA:09:32:E8:10:0B:DC:A4:8B:12:5C:11
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer: /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial: 0199FCC631FB8611A0D071111B8AA382D8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number: 0500
Signing time: Sun 19 Oct 2025 14:01:11 +0000
Manifest this update: Sun 19 Oct 2025 14:01:11 +0000
Manifest next update: Mon 20 Oct 2025 14:01:11 +0000
Files and hashes: 1: jQ35y5JqdtG9WdmH02jLEjnZC4E.roa (hash: FipHH6QD7PJQoRtOLX5VjgWSjY2BOLQCjuClzQsUWi8=)
2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: Y4js2yU0X3uZt5h+atHWqhPhBNbtBG5zifK23FN9wAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:31:fb:86:11:a0:d0:71:11:1b:8a:a3:82:d8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Validity
Not Before: Oct 19 14:01:11 2025 GMT
Not After : Oct 20 14:01:11 2025 GMT
Subject: CN=91537501ff1dbf7eca0932e8100bdca48b125c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:85:d1:fc:41:4a:8b:dd:a1:59:84:9a:5d:4f:
e8:a6:5b:fa:38:e7:d3:1d:f7:8d:00:57:48:82:c9:
d7:4a:6a:36:00:ad:d4:e7:4e:f4:f4:1e:47:ca:01:
aa:53:21:8a:9e:8a:5e:98:d6:8e:5e:c9:68:b8:fe:
64:b2:66:36:3a:60:43:bb:84:51:82:30:09:60:a9:
92:16:1d:55:d5:f8:b6:ba:95:5f:f0:7a:a1:2a:d8:
cd:0b:67:c8:04:d8:f3:62:d4:4f:74:b1:e2:b2:5a:
2d:6f:c3:46:76:b4:13:30:d8:32:d2:7c:0c:6c:7d:
f2:74:19:95:a0:15:b1:a6:6b:15:fc:10:7b:9b:ea:
f6:01:f3:52:23:8e:2a:ea:80:a1:7b:8a:70:5a:b0:
ba:1c:22:b0:22:ce:1a:da:f1:93:e6:a9:f8:58:51:
62:77:a5:e7:c3:6e:d1:a0:c0:e7:ff:a2:3e:8f:ab:
60:b3:2a:a0:f8:41:5c:65:84:e6:11:ea:6d:4c:00:
f1:ff:75:31:3c:88:14:31:8f:71:30:92:66:c6:ab:
d1:4e:43:b2:aa:5e:f0:b3:47:8f:ad:5a:7f:7e:5b:
6b:c5:e9:7a:08:bf:92:e9:c5:b0:52:2b:38:f6:62:
0d:ba:25:8f:e2:3f:29:ba:87:cb:fb:e9:7d:14:26:
90:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:53:75:01:FF:1D:BF:7E:CA:09:32:E8:10:0B:DC:A4:8B:12:5C:11
X509v3 Authority Key Identifier:
keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:50:25:8c:24:9d:af:38:cc:b4:51:a8:d7:fa:0c:da:46:a7:
ef:bd:23:6b:9f:c6:4b:af:eb:2e:ad:4d:78:61:99:95:90:61:
63:a7:08:db:19:f9:d2:74:7a:ce:68:68:56:08:98:68:8c:92:
ff:f7:4c:c7:be:b3:15:e8:1e:0b:7b:8e:21:65:84:98:ae:41:
1d:7d:b3:9d:f7:81:09:42:2c:20:41:43:bf:ea:61:17:e4:64:
87:e2:a1:6f:cd:27:3b:d0:b8:9d:b9:e2:06:64:e7:22:6c:ed:
6c:45:a6:14:54:49:33:5d:74:cc:05:9d:0b:a7:21:b2:04:f7:
df:4b:26:ea:dd:cb:3a:d4:79:6c:8e:9e:89:8f:5f:56:c6:1b:
69:2c:bb:77:92:e0:f6:dc:c5:b4:cb:ce:88:b7:6b:86:5e:c9:
24:54:4e:63:ef:53:77:2d:00:ee:e3:0d:08:dc:3f:d6:af:76:
09:49:0f:20:db:18:9f:14:ea:af:ae:8b:e7:f9:ad:d5:ba:28:
e6:3d:33:9f:a3:ad:9b:17:60:8f:ba:8e:38:8e:62:91:7f:62:
54:c8:6c:61:8f:d4:6e:b8:70:aa:a1:9a:46:96:2d:45:04:e5:
1c:15:17:05:c4:0d:c4:d4:e0:2e:ca:1c:70:ce:38:c6:d9:5b:
63:54:73:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:17 2025 by rpki-client