Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
File: WYW9QaWaLUUeYnCDXaFDmf9iuro.mft (raw, json)
Hash identifier: 9Bjrx9JMqRBFzPtqi79VlPngEYy3Sr/WgNQgRlbCxVo=
Subject key identifier: 11:E5:81:0E:68:55:F6:27:1A:30:8D:45:6C:63:3D:8B:B0:C8:F9:21
Authority key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
Certificate issuer: /CN=5985bd41a59a2d451e6270835da14399ff62baba
Certificate serial: 0199FBEB1995F2F1697FD33A41468A24E7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
Manifest number: 021D
Signing time: Sun 19 Oct 2025 10:01:52 +0000
Manifest this update: Sun 19 Oct 2025 10:01:52 +0000
Manifest next update: Mon 20 Oct 2025 10:01:52 +0000
Files and hashes: 1: TgNurcV4axU3uqSkw39wE7TkQvk.roa (hash: B80X6acZEx7hnHCt/dDJOZhPF/97mIDxIpJ3EyHK/4c=)
2: WYW9QaWaLUUeYnCDXaFDmf9iuro.crl (hash: 7hS7N2YJLe0wkd2W4adM/QbYVfO2jEPtetw9JoopWIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:19:95:f2:f1:69:7f:d3:3a:41:46:8a:24:e7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5985bd41a59a2d451e6270835da14399ff62baba
Validity
Not Before: Oct 19 10:01:52 2025 GMT
Not After : Oct 20 10:01:52 2025 GMT
Subject: CN=11e5810e6855f6271a308d456c633d8bb0c8f921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:54:fd:ed:cc:ac:95:0a:21:d2:8e:4d:0b:
05:5d:a8:c9:3d:6c:f9:88:9c:1d:bd:8f:ad:29:6a:
a2:1f:57:8e:3f:ba:21:8f:85:66:55:39:40:8a:42:
98:83:ca:94:ef:d9:42:5c:7a:69:61:d4:4e:2d:d1:
1c:af:d5:98:3f:52:6c:8d:0a:4b:03:13:1f:1e:7c:
a0:69:f8:5c:e9:27:f3:c1:45:e3:61:3d:55:bf:78:
28:0d:a0:41:f6:ca:3e:7f:8f:fd:5a:8f:be:23:78:
37:6f:2e:48:e3:f7:e8:1e:de:5b:83:ee:20:d5:68:
5d:9a:b8:cb:bf:61:57:1a:62:cc:8c:a8:f9:c9:4f:
cf:e4:97:35:be:09:30:ad:87:df:24:e4:6a:1a:21:
6d:df:00:74:42:b4:2e:16:be:d5:c4:c4:c0:bb:52:
3b:7d:9d:a8:78:97:ee:dd:7f:0e:e8:2c:d2:81:02:
15:c6:25:11:1e:17:77:4c:b8:09:1a:3b:14:58:5f:
11:27:4c:7e:b3:79:b2:47:d8:b9:db:8b:58:a0:99:
9e:c4:b9:c8:4f:83:5e:40:3b:46:ef:de:20:d5:03:
0a:e6:12:07:94:81:05:0d:8e:cd:9c:9a:6a:2f:ff:
e1:06:42:97:a9:e9:dd:c7:40:8b:f8:bc:2c:53:74:
4b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E5:81:0E:68:55:F6:27:1A:30:8D:45:6C:63:3D:8B:B0:C8:F9:21
X509v3 Authority Key Identifier:
keyid:59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:01:7d:0d:93:31:31:64:a9:7a:49:3c:37:ec:fe:e6:83:2e:
ba:0a:61:5b:a8:00:0d:d0:1c:6d:ad:2a:69:57:9f:d8:88:91:
4e:dd:ec:b3:4b:4f:2d:be:a5:5f:f6:78:ac:c0:9d:90:86:44:
5f:cc:44:b7:eb:88:7d:52:94:e9:b3:65:4f:f3:7b:87:36:95:
65:c5:6c:db:c2:a7:eb:06:10:18:e2:4a:c4:28:5e:04:e5:dd:
10:68:2c:53:20:ac:24:d2:3b:5d:90:c7:0f:d6:2d:0c:54:db:
fe:92:54:c4:65:e2:26:f7:56:2f:37:65:9b:af:39:b4:e4:4f:
09:ac:4a:b3:d9:4f:ca:2e:54:92:51:ac:06:2a:20:b4:26:3a:
33:1a:e2:be:ef:02:eb:31:fe:90:d9:e5:ef:af:31:d6:bf:b4:
fe:ca:bb:6d:e9:86:c0:d4:6d:4f:6e:55:e2:67:cc:b5:5e:6e:
74:58:ed:09:95:78:a3:15:3a:64:df:ae:9e:c6:b5:d9:74:0c:
ba:1c:ef:99:a8:02:e3:09:76:18:7a:6b:db:04:41:dd:92:7e:
07:95:51:84:d5:64:00:8e:ea:99:83:b8:36:32:04:ed:4b:b5:
b8:de:cc:dd:d7:19:7d:f2:a6:0e:a7:cb:d4:72:03:f0:8f:d1:
41:2e:34:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:10 2025 by rpki-client