Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
File: WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json)
Hash identifier: wh/yvvw4eM+/joSx9TvynBQrvSrvdJPNMbiwZMxdRDs=
Subject key identifier: 65:F0:6E:23:34:18:77:50:12:DA:77:B6:ED:CB:9E:79:C8:B0:1C:F3
Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
Certificate issuer: /CN=591338a61f6a0f548420a9392037f4811749508a
Certificate serial: 019A00357358F624E002433ACCC56E92173B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
Manifest number: 0447
Signing time: Mon 20 Oct 2025 06:01:34 +0000
Manifest this update: Mon 20 Oct 2025 06:01:34 +0000
Manifest next update: Tue 21 Oct 2025 06:01:34 +0000
Files and hashes: 1: QvzIuDIPsfNvbsiu-OpMImndcj4.roa (hash: Zd0Oz2LJKbUfeoowQWU8WhWLnHtXOXflOCBLaOBPWyw=)
2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: qUL9wsJW8kuJexwPTt2ZSgeDeq4m4r/nHmn7y/EvObQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:73:58:f6:24:e0:02:43:3a:cc:c5:6e:92:17:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591338a61f6a0f548420a9392037f4811749508a
Validity
Not Before: Oct 20 06:01:34 2025 GMT
Not After : Oct 21 06:01:34 2025 GMT
Subject: CN=65f06e233418775012da77b6edcb9e79c8b01cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:75:4f:1d:54:05:9c:ae:e5:30:1a:08:d4:0d:
28:e2:ea:21:4c:ad:e6:c0:6d:02:fa:ce:a1:17:f9:
a2:92:a1:c0:94:a1:1a:84:ba:73:21:7e:9e:9a:9e:
6f:43:35:b5:b4:00:c2:af:27:3e:fe:da:82:ad:e4:
c0:69:6e:4f:c0:71:54:fe:f0:8e:a4:18:e1:5e:2a:
4d:4c:9b:64:0c:4a:58:47:a1:ab:44:6c:e7:33:e2:
8b:de:96:a4:3c:96:9e:56:3e:be:53:85:cb:07:c5:
8c:d6:89:9d:8f:51:39:b3:69:f6:2a:dd:d7:9b:20:
fb:e1:b1:05:b8:ad:6d:f1:d5:46:4d:b9:58:c1:bc:
46:60:5a:b2:b3:7b:2c:b1:f2:33:2f:60:f0:d5:bc:
8c:b2:21:09:c4:43:3b:20:05:21:50:78:95:a5:dc:
e4:fa:67:17:ea:a2:9d:e7:87:7b:a6:52:87:02:40:
e8:6b:41:a9:42:33:af:6e:51:08:fa:9f:86:d3:07:
69:70:72:58:49:28:a2:3a:d0:5d:8e:f5:3b:7f:e6:
a8:a6:0c:cd:b3:9e:f2:6b:2c:a3:2f:cb:60:c7:ad:
50:fb:fd:77:85:95:b6:3a:0a:eb:35:62:a5:3c:9e:
1d:29:fa:74:46:c0:ec:dd:b8:f6:7d:d6:c2:7f:57:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F0:6E:23:34:18:77:50:12:DA:77:B6:ED:CB:9E:79:C8:B0:1C:F3
X509v3 Authority Key Identifier:
keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:42:27:ee:b6:95:3c:ef:26:b5:98:1c:69:36:c4:d6:e0:60:
b2:87:44:d2:de:c0:06:8d:be:d7:36:42:39:a5:e0:57:f6:82:
0b:1f:78:1a:49:e5:27:ba:16:e9:9b:44:b4:25:0d:03:c5:98:
a6:12:f9:e5:31:e9:73:6c:90:b8:09:37:7c:64:e4:46:c1:c3:
0c:9b:50:b7:53:84:eb:1f:a1:0c:9e:03:8e:96:bf:5b:1e:4d:
40:79:10:e9:af:bb:9a:9e:11:09:ff:e7:bc:e4:fc:7d:61:eb:
33:3e:43:8f:56:46:0e:b1:6c:14:32:4e:f0:d3:9b:7b:93:d9:
e8:a5:f2:dc:c7:83:4d:15:25:63:e2:2b:9f:ab:e3:40:d4:71:
11:e3:bb:5b:3b:ee:2b:37:7b:3a:4b:7a:76:80:89:15:e2:ad:
53:e2:27:d1:10:a3:2e:86:ac:90:32:b2:9e:4b:bd:32:1a:0c:
c3:00:57:25:e5:fb:1e:3f:92:0d:3a:f9:3d:08:bc:f8:ed:cd:
5f:1f:bb:cc:e7:7d:f6:6d:9b:dd:d0:1c:64:3c:97:8a:2e:65:
27:cd:41:5f:08:ca:77:97:d3:d5:b4:89:e8:14:a2:d8:21:2d:
d5:42:97:31:71:60:5c:83:a8:a7:f1:aa:1c:4e:bd:67:7f:8b:
43:33:ef:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:00:56 2025 by rpki-client