Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
File: WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft (raw, json)
Hash identifier: upeVnAeeAxwoJTHmtsepzYaGYjj+uf2QyTKvafdJYEM=
Subject key identifier: 0B:C8:F2:43:E1:37:C4:18:3E:4E:A6:FE:C2:24:4D:10:10:DE:EB:EA
Authority key identifier: 59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74
Certificate issuer: /CN=596a5fee9345fcd48010348877b7853afccc6474
Certificate serial: 0199FC21813B6F04D0B38D40EE0E3CEEA48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
Manifest number: 058D
Signing time: Sun 19 Oct 2025 11:01:18 +0000
Manifest this update: Sun 19 Oct 2025 11:01:18 +0000
Manifest next update: Mon 20 Oct 2025 11:01:18 +0000
Files and hashes: 1: WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl (hash: uH9NogLmZ521E/y0dxWhWWX/dVuoTB7FUE5JVZK4d78=)
2: _dX4f78r8ar055s65dZPENw-y4Y.roa (hash: YAHCWNUUSCjGUaMNs/qPZDcoPmc5Fkj8HR1jTR9dAy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:81:3b:6f:04:d0:b3:8d:40:ee:0e:3c:ee:a4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=596a5fee9345fcd48010348877b7853afccc6474
Validity
Not Before: Oct 19 11:01:18 2025 GMT
Not After : Oct 20 11:01:18 2025 GMT
Subject: CN=0bc8f243e137c4183e4ea6fec2244d1010deebea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f8:87:e0:2c:84:8a:2a:9a:60:5f:25:0e:e3:
87:11:63:01:20:5b:56:cd:29:fe:33:40:b4:f1:aa:
59:4b:70:65:9b:65:71:ff:e0:a1:21:b0:5a:43:a3:
31:a3:0b:d2:5c:bb:74:f7:9f:0d:86:be:52:82:c2:
15:fb:e2:72:f8:44:ab:a4:91:86:59:de:9a:d0:ee:
c2:c2:e9:b1:23:b6:5b:88:0f:fa:3b:d9:33:94:19:
3f:56:93:3b:c3:27:83:a1:b1:e1:87:c1:d4:e5:9d:
26:68:ce:a0:5e:3a:40:4b:7a:ab:3c:06:13:9f:f6:
43:df:d2:89:53:e3:07:10:5a:4a:22:66:d4:05:35:
2f:95:d1:af:d7:0e:c5:57:26:4b:59:3d:bd:f6:84:
8b:19:00:2d:73:00:93:5f:a0:03:13:cd:33:ed:92:
fc:56:11:26:6b:60:9c:ab:8f:05:ca:cf:d6:88:31:
ac:99:71:81:34:bb:f2:b7:3e:4a:1a:08:04:d0:fc:
f3:a3:28:53:ae:bf:87:01:3c:37:1e:b0:97:27:56:
36:3f:19:5d:b9:b1:75:08:01:2a:13:df:ec:7f:79:
2e:10:15:da:17:2e:df:e9:18:4d:15:a8:2e:e9:78:
f3:61:5d:c7:30:b4:91:04:15:e0:3b:27:89:70:22:
42:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C8:F2:43:E1:37:C4:18:3E:4E:A6:FE:C2:24:4D:10:10:DE:EB:EA
X509v3 Authority Key Identifier:
keyid:59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0c:69:57:e8:f4:fa:50:a0:93:bb:5e:09:f3:2b:17:34:15:
f3:e3:8c:85:85:42:b6:e4:d9:69:ea:df:3c:3a:3d:12:3d:fe:
29:3c:c3:bd:9a:a4:ca:ec:47:ce:8a:cd:73:1f:5d:ed:c4:3f:
ed:37:41:9b:ec:73:24:18:ad:c6:90:1e:6a:e6:3e:8b:c5:75:
22:cd:c8:ae:db:a0:62:13:02:02:e7:11:df:41:d4:88:29:58:
86:de:ee:50:a9:63:f5:ff:ba:6f:cc:8b:5d:d0:8d:01:11:43:
41:01:b7:d7:3e:fe:8c:71:45:4e:3c:f2:e8:fc:1a:d7:3a:b1:
12:44:ee:25:48:ab:38:6d:f6:70:3c:2f:7f:eb:01:fa:84:12:
81:f6:ad:4a:8a:47:f5:55:b3:6e:53:bc:7c:e8:70:b6:ed:b9:
fe:a2:e2:4e:84:c1:a1:20:85:a4:8d:da:8d:24:cf:52:36:4e:
fc:b6:a5:48:00:43:bf:24:01:2f:4f:79:e4:cd:e6:ce:ec:5f:
aa:f0:d0:06:36:18:8e:9b:de:3e:10:b7:b0:7a:82:ff:9f:79:
8a:1c:86:1d:b4:fc:ea:50:00:fc:ee:aa:39:fb:2a:ab:7f:75:
4f:e8:97:40:6b:eb:7c:f8:1f:9f:d1:80:01:8b:aa:d2:e7:02:
3a:d0:58:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:06 2025 by rpki-client