Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
File: WfJfgmyjg6C3pcA2eteB_id_Z88.mft (raw, json)
Hash identifier: X9Pb6YMcqJ9ZBpVPfqMoF2INAxnYjcfH2vdoLxHTqT4=
Subject key identifier: D5:36:A5:1A:34:FB:08:9C:BA:86:9B:00:46:FC:4A:78:C1:B7:65:0C
Authority key identifier: 59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
Certificate issuer: /CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Certificate serial: 0199FC58CA841DF977B9DAF64E973DCF2FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:41 +0000
Manifest this update: Sun 19 Oct 2025 12:01:41 +0000
Manifest next update: Mon 20 Oct 2025 12:01:41 +0000
Files and hashes: 1: WfJfgmyjg6C3pcA2eteB_id_Z88.crl (hash: qi38GvLbn0Vd/oAadeY/APay1Zghse1/IlQUrAb6oBQ=)
2: Wmojj5WI86DdYFq5g4bYA7Nw2eQ.roa (hash: zUiZqLG6W26ho//gZg9iQz5Nrd2fw/u+RT7b1CbWXkM=)
3: kL9XeaVdFYIH8Ee21mjkEgEBZ5M.roa (hash: GmszFqPnsf/cmc4G3XaWK6S4KreytGM4kW7CsuDRkfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ca:84:1d:f9:77:b9:da:f6:4e:97:3d:cf:2f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Validity
Not Before: Oct 19 12:01:41 2025 GMT
Not After : Oct 20 12:01:41 2025 GMT
Subject: CN=d536a51a34fb089cba869b0046fc4a78c1b7650c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9e:b6:db:31:29:99:d9:4c:a7:59:40:e8:34:
bb:09:32:6f:c6:a4:72:81:da:6b:56:06:23:c7:6f:
9c:ce:50:5d:3c:b8:55:7d:51:01:56:21:0e:db:b5:
a0:32:71:fd:d8:8a:12:b8:e3:18:d4:3e:93:b9:32:
14:30:c6:2f:26:dc:02:8d:f4:cb:b1:12:09:27:3d:
cf:c4:de:fc:0a:a9:42:7d:0e:07:02:87:4c:e3:56:
61:6b:f8:ff:c5:7e:db:eb:1a:2d:82:d1:dc:f6:77:
ef:19:39:29:9a:1b:5b:a9:24:67:b6:59:15:f5:18:
ae:99:94:b8:1d:02:d8:de:94:1b:6c:ca:d4:f0:0e:
4d:c5:84:cd:c0:50:f5:d7:d4:22:3c:3a:94:7c:a2:
f1:58:f0:66:0a:9a:8f:21:4b:c7:ea:83:53:35:2f:
ad:11:04:69:39:e5:9d:10:74:d9:68:76:c2:81:eb:
86:4d:04:d3:79:c7:96:9f:0f:d8:ae:46:12:12:f5:
34:e0:5c:2b:be:2b:8d:c7:77:65:1a:56:46:10:84:
a8:4c:c5:b7:90:aa:d9:60:e2:22:8f:1e:cb:b4:a9:
cc:ff:99:9b:85:84:a4:4b:d4:b7:d2:d7:e9:ab:5b:
12:d9:cb:0b:a4:7e:36:fa:36:46:ed:0d:93:55:b6:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:36:A5:1A:34:FB:08:9C:BA:86:9B:00:46:FC:4A:78:C1:B7:65:0C
X509v3 Authority Key Identifier:
keyid:59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4c:94:3b:e0:a1:41:75:e6:0b:1e:e6:46:95:bc:d1:93:99:
c8:e7:43:ff:34:d8:0f:03:d9:f0:74:ab:92:5e:ae:87:c9:55:
43:70:db:eb:23:7b:8c:4c:df:27:dd:f8:46:d5:5e:dd:2a:a2:
4a:e5:5f:6a:6a:05:58:07:ef:ec:af:27:a8:f6:d0:cc:4d:3b:
9f:4b:bb:21:fa:6d:b7:36:3e:22:ec:58:c0:e4:11:49:ff:37:
e0:53:80:38:d9:7a:a2:0e:15:63:ed:b7:89:85:16:4f:96:7e:
e4:f7:7c:f7:25:b5:b5:c9:8b:78:46:93:0a:ce:ae:4b:95:9f:
ea:b8:30:84:9c:b8:42:51:6f:0c:a2:4d:e8:e9:e0:5b:fc:16:
e3:7f:e0:ac:95:c0:f6:4b:18:c9:6f:7e:50:99:26:09:6d:8c:
0b:cb:8a:78:d7:08:8f:2b:f9:91:9c:34:e3:b0:89:27:26:de:
8a:d6:07:d6:3e:fe:f2:e3:7e:86:33:7d:47:09:ca:74:a6:b0:
5c:dc:ef:e0:5a:c4:0c:f5:19:e9:de:95:19:44:6c:3a:0b:d8:
bc:35:ff:9f:d5:3a:39:6c:53:18:04:68:bd:6e:eb:fd:b9:55:
3e:98:80:d2:b3:12:33:75:e1:f5:cb:48:e9:e8:a8:03:0a:63:
e2:9c:1c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:42 2025 by rpki-client