Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
File: WCXq-3jz1WkmUXwqPNUzmqUTht4.mft (raw, json)
Hash identifier: GucuoRaJWIP5HTUj7UAlN66xP8gZfi0BNPha53V51dw=
Subject key identifier: 8C:C8:6C:F0:78:BA:45:C7:D1:6C:8F:FA:86:E1:BA:B4:22:09:C9:3E
Authority key identifier: 58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
Certificate issuer: /CN=5825eafb78f3d56926517c2a3cd5339aa51386de
Certificate serial: 0199FE477CF2363BFFC0D2BBA951C89630F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
Manifest number: 028A
Signing time: Sun 19 Oct 2025 21:02:01 +0000
Manifest this update: Sun 19 Oct 2025 21:02:01 +0000
Manifest next update: Mon 20 Oct 2025 21:02:01 +0000
Files and hashes: 1: WCXq-3jz1WkmUXwqPNUzmqUTht4.crl (hash: /4XwSimYUC0hx+KBGT2OMbhPXZJzma7xMYceOrXqu1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:7c:f2:36:3b:ff:c0:d2:bb:a9:51:c8:96:30:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5825eafb78f3d56926517c2a3cd5339aa51386de
Validity
Not Before: Oct 19 21:02:01 2025 GMT
Not After : Oct 20 21:02:01 2025 GMT
Subject: CN=8cc86cf078ba45c7d16c8ffa86e1bab42209c93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:d3:c7:85:a6:72:cd:4b:2e:e1:de:0a:08:
d9:ed:6a:e0:fb:41:9f:e3:1c:f3:9e:73:36:a7:64:
ce:03:04:c2:75:72:9d:a1:d8:93:c3:60:33:b1:95:
d8:16:69:08:e3:39:2c:63:bb:8e:98:3f:67:cb:26:
c9:43:6e:90:87:a6:2c:bd:77:7a:f4:12:34:e8:4b:
06:33:5b:5d:3a:1b:6b:37:1b:c9:f9:df:12:a9:fe:
13:64:36:e5:97:2b:a2:77:2b:7b:32:21:bd:4f:7b:
c6:d8:e2:69:5e:7f:57:c0:d4:f5:93:88:12:13:01:
43:db:30:f5:43:08:e0:fb:81:16:d0:32:c1:19:ee:
49:2f:3f:0f:cc:ca:1f:5a:92:9f:04:cd:f8:83:3d:
c7:3a:3e:fa:07:9a:f9:6e:e7:07:5e:4d:e8:2c:3c:
bf:4e:85:7a:7a:1c:98:28:af:75:a5:eb:96:ea:8b:
26:90:23:08:f9:9a:26:31:fe:50:65:ca:e2:c1:06:
12:24:6f:30:db:43:c7:d1:1c:ce:2d:bb:a7:38:4d:
13:c2:c0:40:d5:31:58:46:44:78:51:f5:da:83:79:
03:56:8b:1e:4c:ab:1b:69:8d:79:59:aa:18:ed:1f:
e8:1f:68:57:7b:9b:f1:c3:09:2e:a3:b5:fe:a1:37:
94:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C8:6C:F0:78:BA:45:C7:D1:6C:8F:FA:86:E1:BA:B4:22:09:C9:3E
X509v3 Authority Key Identifier:
keyid:58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:55:60:56:49:0e:97:50:f5:aa:66:53:aa:9d:bb:7e:75:74:
b3:f6:a4:0f:e4:e8:b4:6b:66:a6:ef:d7:a2:bf:8e:8c:9c:ec:
2b:a6:27:d6:82:00:38:de:7b:05:f8:ad:7a:72:95:a7:8b:fe:
f2:17:58:56:d5:c9:13:5e:bd:d0:3f:44:9c:80:59:88:f7:ad:
30:98:2c:e6:c7:e7:ce:05:16:2e:bf:a6:cb:c1:cf:25:f2:28:
b1:e4:e8:ab:24:d9:af:f5:f6:42:39:7b:0e:a9:7b:7d:56:89:
7b:61:e8:c2:a5:b3:1f:29:3b:43:41:51:f3:78:05:77:b2:35:
b3:e1:5e:90:b0:7a:87:06:9a:3e:13:e4:a9:30:e8:a0:72:48:
e7:0f:5e:b4:67:bf:02:e0:18:e3:5b:e3:8d:a9:10:38:7e:ef:
fa:f3:32:8b:3c:ae:12:91:1c:48:95:8e:17:f7:a5:c1:39:b3:
92:76:12:18:7f:ba:4a:e1:e5:0f:61:c1:23:7f:18:b4:cc:7b:
e8:5a:5d:04:80:d6:86:de:b7:44:1f:2a:34:ae:10:05:0b:86:
fb:14:f5:d7:47:2b:19:34:ef:39:49:32:5a:f2:cb:0e:a4:a6:
0d:55:75:f4:89:8f:de:25:bc:a4:ec:24:fb:d9:7b:0c:32:9e:
0f:7f:3d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:55 2025 by rpki-client