Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
File: WiHxhbSzhmdV26ABC88QuUqKpmw.mft (raw, json)
Hash identifier: lAHz2Zjq3W/DIrzjWDXjrYSoIaK+2HK2BlffgxErubs=
Subject key identifier: DC:ED:02:27:55:DB:89:AA:D4:19:A8:E1:F0:70:5A:2A:E6:65:95:02
Authority key identifier: 5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C
Certificate issuer: /CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
Certificate serial: 0199FC58B93D02A2BABCB939D7C5E6E6E188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
Manifest number: 1685
Signing time: Sun 19 Oct 2025 12:01:36 +0000
Manifest this update: Sun 19 Oct 2025 12:01:36 +0000
Manifest next update: Mon 20 Oct 2025 12:01:36 +0000
Files and hashes: 1: MT9vPInoaysz5wep7peoXlzT3YM.roa (hash: 3Nc11g2iFkPxsowhqR+tamDkBXdlZBe0DtJ8wPuCW4E=)
2: WiHxhbSzhmdV26ABC88QuUqKpmw.crl (hash: gSVmzHI3dZlHpJls2PVwlemwQfia6H3J06cwS2qlc48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b9:3d:02:a2:ba:bc:b9:39:d7:c5:e6:e6:e1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
Validity
Not Before: Oct 19 12:01:36 2025 GMT
Not After : Oct 20 12:01:36 2025 GMT
Subject: CN=dced022755db89aad419a8e1f0705a2ae6659502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e2:22:38:46:fa:fa:93:22:cc:55:1b:dc:42:
2a:85:67:e2:1c:58:2c:7a:ec:64:d3:88:34:3e:60:
1c:4e:26:36:c7:2e:9c:e6:e8:b5:4f:1c:10:dc:5a:
44:c6:2a:60:32:37:b0:75:88:b4:38:22:30:a1:2d:
85:ac:67:b2:79:a1:b2:ba:e1:df:1b:df:fa:62:10:
0b:9b:ea:26:6f:b9:fc:8e:9e:b6:16:66:ff:01:57:
58:21:cf:82:7e:38:d7:f9:f6:8d:6e:f8:05:5a:02:
be:a1:b2:bb:55:36:fb:12:13:7e:f9:46:c7:42:e3:
cc:4e:d4:c9:d2:94:52:8c:c7:14:56:40:38:c4:cc:
60:ce:d1:b5:3a:e5:07:1f:b5:62:67:af:96:83:5c:
ad:6b:de:17:97:cb:59:e6:5c:39:1c:64:34:6e:77:
c4:66:37:32:52:20:76:ca:5d:17:1b:e4:74:5c:01:
5f:2c:6a:8f:ea:50:36:63:35:c4:61:2a:d6:03:7b:
6a:ae:80:5b:7c:76:be:0f:6b:d7:99:df:e6:9d:f2:
18:a4:65:46:be:f0:fb:fb:d7:77:89:7c:a9:c0:b5:
3d:44:df:81:d5:50:d1:2f:27:12:f7:78:be:a5:08:
ef:7a:99:95:e8:9b:eb:fa:13:0c:db:20:64:a0:33:
1e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:ED:02:27:55:DB:89:AA:D4:19:A8:E1:F0:70:5A:2A:E6:65:95:02
X509v3 Authority Key Identifier:
keyid:5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b2:9c:07:e6:e2:5d:65:90:e8:7a:e8:87:59:62:95:e9:b9:
df:75:68:e5:f3:d8:0c:d7:b0:be:69:bb:2b:47:b7:8a:d0:63:
20:1b:d2:1a:03:a4:5f:09:eb:73:40:4f:8a:26:a1:59:09:f9:
8b:ec:57:df:0f:cd:38:d4:ab:0a:39:04:48:0a:30:ea:33:1d:
a4:3d:43:c7:ee:f1:ef:57:cf:2e:0b:49:de:19:dc:50:2c:4b:
e5:e5:18:b1:fb:cf:ac:53:06:d3:f8:09:ea:84:c3:bf:9d:f6:
e2:7e:4e:3c:ea:30:38:14:9c:0f:8f:b7:19:ca:d6:91:08:fe:
60:57:aa:c9:61:1f:db:70:89:e5:28:66:c2:40:d3:6b:ac:a0:
15:5d:da:85:24:79:62:5f:6b:98:34:02:22:a7:a9:b3:ed:21:
1c:09:d5:da:bf:b9:73:2f:be:36:9b:c8:d4:63:cd:a5:d5:f7:
48:e3:a5:5c:d5:77:be:2e:79:f5:03:32:24:69:2a:7d:9e:5f:
b8:1f:b8:a2:b9:b3:40:71:52:b6:2b:50:76:8e:40:d7:6b:46:
a6:26:03:2d:0b:ad:93:69:b6:e4:72:47:49:7b:a0:63:bb:55:
38:90:92:0e:a5:37:76:04:26:f1:10:6e:29:59:cb:7b:26:99:
be:af:ce:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:44 2025 by rpki-client