Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
File: WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft (raw, json)
Hash identifier: HaG9jViwZqkwh3A/wyAjZPHRuyar3ZgBh1uriKF2dk0=
Subject key identifier: 8E:F0:64:F3:A8:2A:1A:9D:A0:DF:22:EB:1F:E9:68:81:02:87:EC:C9
Authority key identifier: 58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
Certificate issuer: /CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Certificate serial: 0199FBEC68B0D09909C667C9656CCEE85032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
Manifest number: 0D69
Signing time: Sun 19 Oct 2025 10:03:18 +0000
Manifest this update: Sun 19 Oct 2025 10:03:18 +0000
Manifest next update: Mon 20 Oct 2025 10:03:18 +0000
Files and hashes: 1: WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl (hash: 40mgmBCUY0s4l/SggmVL0C9mHOLVKTLAU8ELDHNmoPg=)
2: yIEPYCgadoB6X07AnuVv3-Sl8cU.roa (hash: muswJ5Tpw03mqWebPMphb2rOsPv5OQmKFZxcXdUMf8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:68:b0:d0:99:09:c6:67:c9:65:6c:ce:e8:50:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Validity
Not Before: Oct 19 10:03:18 2025 GMT
Not After : Oct 20 10:03:18 2025 GMT
Subject: CN=8ef064f3a82a1a9da0df22eb1fe968810287ecc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a5:5a:f8:96:77:7d:31:65:35:d6:96:fc:76:
0d:d6:d8:61:58:22:84:68:1f:40:a5:1a:6d:e2:cd:
97:06:3d:a8:06:76:c3:b1:ec:ba:a1:49:14:a7:01:
b4:91:50:7a:9d:30:ab:5d:89:a1:d8:c7:42:4b:0a:
d5:cf:47:78:10:2e:4d:f1:68:b4:b4:8e:e8:49:b0:
b3:35:2a:af:17:cd:79:ab:ff:43:56:1c:3c:d5:2d:
93:49:56:6c:0e:d4:d4:79:83:c7:f6:02:c1:ce:be:
10:ed:c1:38:3b:a2:14:8b:c4:e2:d5:ff:da:00:05:
0e:14:2c:84:f5:26:6c:e6:c0:7e:30:70:51:73:41:
87:6f:86:3e:92:8a:5e:7f:5d:50:9d:b0:5f:8b:9a:
d0:40:a6:c1:85:98:47:38:0f:03:39:8f:d8:6b:a9:
8d:73:b8:9c:0b:91:93:96:13:9f:77:b5:7c:c2:06:
37:02:e9:b3:23:83:7f:ab:25:9b:59:b0:d3:75:fb:
2d:d4:26:72:f5:c7:2e:6d:92:4c:82:55:b1:64:4b:
78:27:c8:b5:c8:61:66:7c:c8:15:6f:d2:12:4b:40:
da:8e:72:bd:fd:5c:c8:b2:c9:ff:5c:f3:2e:4f:f5:
9a:59:b3:38:68:2d:b4:05:56:5c:aa:89:b6:61:71:
24:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F0:64:F3:A8:2A:1A:9D:A0:DF:22:EB:1F:E9:68:81:02:87:EC:C9
X509v3 Authority Key Identifier:
keyid:58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:23:78:1e:47:27:19:2a:e8:0d:af:72:97:8f:ed:71:f8:bf:
e4:e5:6b:43:e0:24:94:3f:d6:a8:b0:b3:a4:54:e5:57:d4:14:
1e:46:d4:37:22:8e:1c:80:99:b3:ea:a1:1f:45:65:b6:f4:d6:
10:8d:5c:6b:86:c2:c5:85:54:54:e8:a6:cd:c3:41:3c:97:5d:
79:db:5c:ae:17:af:e6:8b:be:c4:0c:86:3a:40:57:6b:a2:c4:
56:38:81:46:75:63:64:e0:63:ce:6e:4b:96:b6:51:30:01:dd:
b2:9f:25:b8:66:da:8a:35:a0:95:57:72:e0:fe:e8:22:67:bd:
8d:91:0b:cb:c7:d9:81:90:ef:54:ee:58:4e:83:18:8d:f0:56:
82:96:0e:12:f7:84:e2:1b:1d:ec:27:80:ec:58:35:e2:37:51:
36:5c:e1:7a:f6:9e:92:7d:16:3a:d5:d9:8f:ef:e8:18:83:ee:
d2:62:4b:b6:79:70:a7:cb:f8:d7:14:48:de:0f:5a:5d:49:fd:
bc:6b:ac:5b:27:29:72:6c:a0:84:e1:0d:fd:bf:c7:57:ee:9b:
ec:41:2f:a0:2c:a7:85:d5:d8:ba:46:cc:ff:4e:a1:4f:ab:74:
3e:bd:41:b4:03:50:49:ff:bd:95:54:19:01:23:0f:d0:aa:ff:
36:d5:d8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:36 2025 by rpki-client