Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
File: WxweBiQDm9HxqUbLUTyTOG-raxk.mft (raw, json)
Hash identifier: FegdSwMAXDOKhIj9bsmhIJESqnn3ovAnumpJkWOikjY=
Subject key identifier: 4B:73:E6:E5:72:7E:51:E5:F9:89:27:5F:ED:DB:EE:5C:3B:DF:A3:9C
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 019A0035678F239D4A55F5F4FDBA0C6958CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
Manifest number: 0CE4
Signing time: Mon 20 Oct 2025 06:01:30 +0000
Manifest this update: Mon 20 Oct 2025 06:01:30 +0000
Manifest next update: Tue 21 Oct 2025 06:01:30 +0000
Files and hashes: 1: J8g7cZ3te-XjH4vB99S63bY5jw8.roa (hash: kTqC/5LOxbM1zdbO1odgPNoINkirS3IzV43BF84XudQ=)
2: WxweBiQDm9HxqUbLUTyTOG-raxk.crl (hash: aM5QQhNBtGQnIOUbeg0Ut8ScJiuoEKwXP6Yef9rhOJs=)
3: n6GsozsAIUsV5q_nwqboXGBIS0o.roa (hash: SV+wqJcEFOa4P82VjIfU8axnoITYl7V615IXuKpHvcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:67:8f:23:9d:4a:55:f5:f4:fd:ba:0c:69:58:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Oct 20 06:01:30 2025 GMT
Not After : Oct 21 06:01:30 2025 GMT
Subject: CN=4b73e6e5727e51e5f989275feddbee5c3bdfa39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:97:97:ca:61:eb:96:09:46:71:6c:7f:3c:a8:
b2:a6:60:09:05:88:5f:e8:00:8d:f1:2b:44:d7:22:
b4:5d:69:f3:6a:85:e3:44:9d:78:78:cc:4b:8e:d1:
cb:45:17:c8:7e:a6:9f:45:4d:5c:10:5a:e8:6f:c6:
e0:e5:75:91:60:ce:b9:e3:4e:00:6d:76:6c:33:87:
61:16:0b:37:46:75:c7:03:39:d7:ec:99:b0:75:14:
44:4e:5e:43:7f:80:16:09:d3:6f:93:dc:8e:5d:93:
75:40:7b:e2:9a:d4:14:8c:da:cc:a3:cd:a0:d5:48:
fd:eb:6e:7f:68:9f:d4:6e:b6:15:cf:1b:e8:3c:43:
5d:5a:18:7c:00:12:ce:a0:e9:aa:e7:f9:f7:58:cf:
e9:74:a5:0b:83:4b:20:40:e4:fc:4c:b8:c7:fa:d0:
90:89:fc:ba:65:a6:4a:c4:e9:27:3b:aa:68:ab:07:
df:96:7f:f9:7e:d8:81:34:bb:a4:dd:d0:d1:a5:ba:
16:6d:09:d2:22:50:97:8f:43:4c:b8:8c:dd:a9:47:
e5:f8:3c:0f:fa:85:76:aa:17:39:71:c9:67:7d:6e:
e9:6c:18:54:92:20:6e:6e:65:e9:e0:93:ee:12:2f:
39:e2:88:bd:41:64:cc:96:1d:e7:99:22:e1:c3:3a:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:73:E6:E5:72:7E:51:E5:F9:89:27:5F:ED:DB:EE:5C:3B:DF:A3:9C
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:51:d1:34:8f:26:e3:93:77:e7:aa:47:7a:f9:c4:ad:af:21:
7b:07:f2:74:eb:ed:eb:ef:a7:6a:5d:37:b6:e1:22:90:07:42:
4c:0f:65:e1:9c:e8:2c:a4:55:32:d6:86:84:2f:ef:0b:ba:ce:
e0:81:c1:e2:64:ab:e0:07:9e:84:9f:98:d5:c9:ca:5c:a3:8f:
19:68:55:ae:33:38:2b:05:74:77:92:a6:77:87:39:bb:d1:a9:
ca:f1:d3:d7:b7:b7:99:6e:71:e4:0b:dc:e6:0b:13:fb:4a:4d:
77:ee:14:78:ae:4d:d9:7f:38:97:9c:5f:38:5c:22:4e:87:77:
d2:14:52:13:2a:53:d5:25:57:e7:da:57:1f:51:1c:bb:dc:80:
99:a0:a6:45:72:65:67:4e:fa:c3:2b:e6:8f:35:41:30:11:b1:
0b:9f:2b:f3:6d:93:ad:b8:46:ff:a5:42:ef:ad:27:b8:f1:c4:
7a:9e:f0:10:8b:c2:42:0b:b9:f8:2d:7e:d4:2c:45:49:ef:45:
2d:dc:85:b3:6a:de:21:1d:46:19:2b:68:e5:16:d5:14:64:94:
72:62:22:ef:39:e5:cb:a2:db:9c:ba:af:b8:89:ab:26:b2:8f:
94:a0:25:a0:0b:d3:56:cf:13:06:4c:33:ce:06:c2:31:38:68:
98:e8:d8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:57 2025 by rpki-client