Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
File: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft (raw, json)
Hash identifier: BOVz/4j+XFdK+w9l+PQHCbpEO/lqIFTeEdsY9J/AcKQ=
Subject key identifier: 85:82:A7:F6:CB:F7:1F:CE:14:DB:5F:3C:93:8B:F4:B7:B1:59:C4:9F
Authority key identifier: 5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
Certificate issuer: /CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Certificate serial: 0199FDD913DF0C4C303B916BD15FD8F57A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
Manifest number: 1677
Signing time: Sun 19 Oct 2025 19:01:26 +0000
Manifest this update: Sun 19 Oct 2025 19:01:26 +0000
Manifest next update: Mon 20 Oct 2025 19:01:26 +0000
Files and hashes: 1: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl (hash: z5vGMZTRC7ZnHFhgsq+43ebxXu5NJ+ypbdSlodm5ejc=)
2: Y5NkjhxNGx4ss5GCzKl7-rIduCM.roa (hash: /DJ0Dj5nLfrACSNcG6NOE2ReJp4ef+Ajvh1vnuYm/CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:13:df:0c:4c:30:3b:91:6b:d1:5f:d8:f5:7a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Validity
Not Before: Oct 19 19:01:26 2025 GMT
Not After : Oct 20 19:01:26 2025 GMT
Subject: CN=8582a7f6cbf71fce14db5f3c938bf4b7b159c49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:31:d3:19:c2:af:57:14:b9:a0:0c:51:82:
7c:4f:20:22:0d:2b:96:01:39:26:58:a6:b3:35:7a:
04:d8:93:69:d0:55:64:ce:ef:28:b1:a8:4b:50:e5:
8c:84:a1:4a:f1:4f:7c:69:4c:a7:54:fc:1e:7b:4f:
81:ca:f0:56:20:00:c5:ef:76:3c:de:36:8f:f3:32:
14:23:c8:77:06:7c:ff:89:4a:1b:76:df:a9:d6:f0:
2a:4d:72:a4:2a:61:6b:71:74:7b:ca:7d:9d:99:a3:
e8:1a:af:4e:5b:95:ed:61:46:ce:53:fb:7f:3e:53:
25:bf:4b:67:1c:8c:9f:6c:1e:b8:ae:44:41:7e:28:
a0:26:f3:dd:8c:da:06:62:ac:78:4d:13:3b:fb:c3:
ef:eb:57:0b:80:ac:5f:12:e9:ea:8a:2f:1e:81:37:
bf:4b:14:19:64:3a:90:6d:49:4c:ee:7e:12:d2:4a:
6c:6e:0b:0e:f1:da:87:1f:d8:e8:09:f7:d9:eb:15:
f7:ba:2f:01:8e:9b:bf:fa:c6:9d:46:13:ed:58:24:
ed:8f:cc:1c:ac:45:85:64:71:2c:78:cc:4d:8b:11:
4b:2d:f4:ba:c2:d2:0c:7d:3a:8f:4e:b2:2c:f0:f5:
68:9e:47:bc:5a:f3:7b:84:75:e8:0e:d5:b6:3d:82:
d0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:82:A7:F6:CB:F7:1F:CE:14:DB:5F:3C:93:8B:F4:B7:B1:59:C4:9F
X509v3 Authority Key Identifier:
keyid:5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9a:51:b2:6e:b3:6f:26:98:f4:0c:d3:a9:5f:07:c7:a8:e2:
53:ef:dc:e7:07:49:7d:05:f6:40:16:28:9d:49:32:93:4b:8a:
96:dc:81:f1:e6:6c:da:3d:54:7e:2e:74:93:1f:9c:84:0e:75:
b6:f9:66:e0:a9:89:3d:b2:f7:af:9d:b7:29:c4:df:f1:b5:ef:
9a:5a:34:92:32:0c:b8:66:49:6c:1d:8e:a1:6b:81:6c:da:ba:
17:ab:0f:e7:6d:1f:9b:74:cb:9d:98:03:a0:4c:56:0b:dd:20:
e1:44:5f:6a:c0:01:12:22:bd:c1:a9:4b:5e:8c:38:de:a8:a0:
cb:26:87:e4:3a:67:e0:60:c3:5a:59:a0:c3:e5:02:5c:f7:ae:
70:32:4b:b3:cd:f4:9a:05:e3:7c:37:af:56:48:de:f6:d1:64:
b1:fd:ff:3e:73:8c:84:68:14:b1:9f:dd:7a:b9:35:b0:76:19:
01:e0:8b:24:d4:90:e1:f2:70:a4:75:7f:90:17:6e:e5:0e:a8:
1e:cf:de:c7:02:ca:e3:99:8a:39:36:9d:96:55:80:74:3c:bc:
dc:13:3a:99:d8:71:3d:ad:57:9b:c1:37:29:b4:ac:9d:99:b8:
cd:e9:b8:7c:f3:32:c2:c2:70:fd:37:52:b6:7d:8a:27:44:e8:
c0:5f:a6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:15 2025 by rpki-client