Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
File: WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft (raw, json)
Hash identifier: MKrieAuO7o3TDSdsL/9NXMiPkP+uFKhhdRDBwItefKI=
Subject key identifier: F7:DC:A7:D4:C6:D2:EA:84:78:9D:29:F4:8D:E9:C8:F7:03:47:43:79
Authority key identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
Certificate issuer: /CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Certificate serial: 0199FD6B52B2BD55D53AC1C9C496E11DFEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
Manifest number: 023C
Signing time: Sun 19 Oct 2025 17:01:32 +0000
Manifest this update: Sun 19 Oct 2025 17:01:32 +0000
Manifest next update: Mon 20 Oct 2025 17:01:32 +0000
Files and hashes: 1: WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl (hash: 33ocLabokFgJQh7Zzse99NKz8U6h0l39YmxreKkRApQ=)
2: _sGWnEAm6H3GQnFAjvcpfjYmmpU.roa (hash: e0wmcRqP7ldHP1lF0Smi9FCBdi4Vz7I53Q9ZET+MPRw=)
3: dJzDSPenGFs61jrjvaTekpH7lb0.roa (hash: kpJ+1xwnPbkQC6dTg5VdbKW3vchd3ul1f6drVPMIJlo=)
4: o4GoVj1IVmnPHBj-vP4PnBTlkD4.roa (hash: HjBekZUZeHTCiqwh5UX3k0G+u1uy5Ap+OteoXrFlzT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:52:b2:bd:55:d5:3a:c1:c9:c4:96:e1:1d:fe:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Validity
Not Before: Oct 19 17:01:32 2025 GMT
Not After : Oct 20 17:01:32 2025 GMT
Subject: CN=f7dca7d4c6d2ea84789d29f48de9c8f703474379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:db:5b:e3:1e:8a:18:2a:4a:7f:5f:ec:fb:5f:
4d:ff:06:4e:7e:e1:ef:56:67:e7:9d:59:89:2f:85:
3d:61:f0:4b:da:1f:1d:f8:f8:5c:38:b5:c3:07:c6:
5a:27:1c:77:92:e5:d1:cc:e3:6c:e1:e1:ac:ad:a1:
5f:a7:ed:82:f9:b2:e5:92:83:5a:2e:60:14:87:f4:
32:d1:36:0a:54:48:dd:0a:67:44:6f:82:20:d3:d1:
f1:f7:17:62:00:50:01:fc:43:f8:f0:41:7a:5b:39:
5e:9d:81:0f:3f:8f:f8:a3:9b:bf:d0:14:41:09:8a:
0e:c8:28:20:3d:1b:2e:f7:df:19:c8:c8:a5:e9:df:
b7:6d:f6:35:ff:b8:3c:60:7f:83:41:b6:89:3c:01:
5f:a9:69:f5:f5:b4:39:9f:6a:30:55:a9:03:21:90:
27:b7:21:e1:39:04:ab:34:5d:09:bb:c0:62:3a:5e:
56:3b:71:c1:6a:bf:60:3e:30:d1:d0:61:b5:19:ad:
83:54:bb:f6:51:5a:cf:5f:bf:4b:00:ce:0e:b0:c4:
71:2c:56:d8:15:3f:ca:c9:e9:f1:41:9e:19:55:94:
0b:3f:ca:5d:d4:1d:0d:e5:be:f7:ee:0c:5c:fe:28:
d8:38:81:93:e2:ef:ce:fc:2f:d5:46:ed:c9:e4:fe:
78:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DC:A7:D4:C6:D2:EA:84:78:9D:29:F4:8D:E9:C8:F7:03:47:43:79
X509v3 Authority Key Identifier:
keyid:58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ed:65:94:b4:6d:2b:9e:5a:1f:63:d3:a5:31:98:48:03:13:
a0:9f:c9:d1:e9:24:90:4a:ea:09:af:21:08:8f:b3:32:e2:12:
a2:57:de:76:81:4a:9f:1d:34:bb:8e:d9:0e:a1:9f:56:77:8f:
a2:94:cf:88:8a:7f:13:31:7a:0e:5b:2a:27:a6:e2:50:91:95:
40:29:ba:dd:b1:df:83:84:88:b3:a4:42:b9:5d:ce:5e:72:49:
9e:98:af:77:ef:4e:e8:4c:a1:84:2c:07:7a:30:9a:b7:bd:20:
dd:02:9a:8c:ee:dd:d9:84:33:47:22:b6:f7:88:99:6b:4e:79:
f6:87:3e:05:0c:12:2d:5c:88:9d:3f:a8:51:ab:fa:b5:ea:d6:
77:d3:2b:f7:47:11:aa:9b:12:09:98:eb:ac:30:2d:f5:b9:a1:
1c:81:7d:36:fb:d1:6d:a8:38:37:c0:dc:5d:b5:df:6b:e2:42:
d9:f1:8e:af:1f:56:3a:dd:08:d4:2a:a8:7e:20:b0:7a:d3:85:
bc:55:32:f2:47:eb:18:c0:67:32:8e:2c:0e:d2:c9:92:59:00:
c5:dc:8c:7e:4e:73:cd:42:35:78:e7:a0:57:99:6c:de:62:88:
77:d7:03:29:90:42:2c:98:03:0c:e1:81:ab:78:7a:be:73:15:
40:14:3a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:56 2025 by rpki-client