Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
File: W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json)
Hash identifier: 3oSJzS8WMImZsd0MiJob2jgCfRItjRG52PPd8Ds95to=
Subject key identifier: 32:08:FA:21:0B:1D:3F:58:3D:33:31:45:44:7C:20:9F:9A:53:82:16
Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
Certificate issuer: /CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Certificate serial: 0199FC21A7CA5C8CF540594ED117EFC23471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
Manifest number: 15CC
Signing time: Sun 19 Oct 2025 11:01:27 +0000
Manifest this update: Sun 19 Oct 2025 11:01:27 +0000
Manifest next update: Mon 20 Oct 2025 11:01:27 +0000
Files and hashes: 1: QaaRy7ABeU9cSPshLT6zQgCy8vY.roa (hash: ClDKSK21Vz9twjL4L21G/7TWYD2/1/Ma/Dt0uF8yRp0=)
2: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: /Y1KvnxjFmRzhr1iC71Jr0kkBTWZh3Pb14OrOtLfHUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a7:ca:5c:8c:f5:40:59:4e:d1:17:ef:c2:34:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Validity
Not Before: Oct 19 11:01:27 2025 GMT
Not After : Oct 20 11:01:27 2025 GMT
Subject: CN=3208fa210b1d3f583d333145447c209f9a538216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:70:e3:68:b9:47:81:17:dc:86:96:c2:b3:
a5:48:c3:2a:f5:98:7f:b8:a9:a2:6d:d3:42:d6:13:
eb:96:32:fa:ee:81:ff:de:ac:ca:b6:fc:e9:1d:91:
1a:c7:2a:33:ae:53:2c:ff:9d:9c:5b:1e:6f:75:fa:
df:86:7b:3f:2f:1d:e6:64:58:44:36:a5:ee:a2:ca:
63:55:1a:48:45:39:3e:13:76:7e:1c:dd:e5:c1:a7:
c5:67:62:3e:92:9d:06:b1:e2:dd:bc:b3:46:28:17:
a3:57:c1:bd:a6:2d:8a:31:da:b7:74:4e:93:41:21:
ef:a9:27:72:e4:a8:9e:ff:ce:96:53:67:39:46:b5:
c3:85:2d:01:54:9a:02:15:22:5d:9a:9d:75:6d:88:
44:3f:db:62:50:2b:a2:45:b1:b9:6a:11:8e:ad:e6:
e2:93:8e:b0:16:b0:b7:36:c9:73:6e:8b:89:f6:f2:
5c:4e:3c:56:1e:69:7f:9d:a6:2c:ab:01:17:93:63:
c6:25:ab:3b:f4:80:6b:ce:21:7b:8d:e0:cf:65:41:
29:ed:46:d1:e7:34:5c:47:bf:f1:af:47:a1:f0:19:
8b:74:f6:b9:d3:38:77:b1:08:9f:94:c7:ec:52:fb:
80:35:92:2b:ef:c9:33:e9:87:1f:a5:f6:9f:b7:47:
ea:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:08:FA:21:0B:1D:3F:58:3D:33:31:45:44:7C:20:9F:9A:53:82:16
X509v3 Authority Key Identifier:
keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6d:3c:34:e2:4b:47:b8:d6:14:a6:03:94:46:ed:28:6b:2b:
f4:1c:b4:18:7f:7c:96:b9:f6:18:88:15:1e:da:17:a9:14:d1:
14:b1:c8:b3:8d:08:b8:5f:c0:1a:55:f2:20:8f:22:af:15:2a:
e7:7c:ac:17:40:bb:4a:1a:01:8e:ef:7c:a2:0d:1c:29:e4:03:
f7:96:c8:78:6d:0c:c8:a8:74:db:92:27:4c:5a:5a:3b:44:fb:
06:18:35:21:a6:55:f2:42:1d:4c:a6:97:81:62:93:35:0e:5a:
a7:0a:61:e7:8d:a3:e6:c3:20:9a:5d:06:59:0c:64:06:c7:25:
38:a7:4e:7e:e0:cc:00:9c:66:62:e3:d5:5c:00:a1:2d:2a:d5:
d9:6b:86:76:bc:c7:d8:87:02:f1:ea:eb:d7:0b:5d:ea:06:e8:
62:68:26:33:4c:bc:77:b5:5e:df:d3:fd:70:a7:46:58:5c:d9:
4d:ce:67:d3:b2:17:5f:65:7c:aa:94:30:0f:0e:37:4f:33:01:
e7:af:df:db:40:d0:16:c3:59:fa:3e:08:a3:09:da:c9:91:78:
72:28:e0:8c:9b:1b:76:21:11:c4:0d:04:cb:d3:07:85:fc:f8:
dd:49:c5:50:c1:bb:3a:1c:01:ba:04:ee:18:66:66:79:7b:e7:
00:d4:bf:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:08 2025 by rpki-client