Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
File: WtERZRPCPYeqy_Wxu-45mBx2McE.mft (raw, json)
Hash identifier: Fk5qW/BwfYwlPLtjr7x2TMnFI34VDIFdt2sCL4T5sUQ=
Subject key identifier: 7B:A2:32:71:D8:F6:8A:E8:2E:A4:0D:0D:53:2B:07:5B:FE:F2:BA:06
Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Certificate issuer: /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Certificate serial: 0199FD3420C79A4C39513CBB9B985CB1E4DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
Manifest number: 0620
Signing time: Sun 19 Oct 2025 16:01:15 +0000
Manifest this update: Sun 19 Oct 2025 16:01:15 +0000
Manifest next update: Mon 20 Oct 2025 16:01:15 +0000
Files and hashes: 1: WtERZRPCPYeqy_Wxu-45mBx2McE.crl (hash: 0qVXNk46nDBMf5bo1MF/0Vc+aaDTgi+kMYaD99kmGFQ=)
2: a6Ca0db6IRWqpeQUf-mkPOP5Y6E.roa (hash: +wI+O0cNbhPu/Y/iWm666e3mQkbcXkl04FBEwBpeXro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:20:c7:9a:4c:39:51:3c:bb:9b:98:5c:b1:e4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Validity
Not Before: Oct 19 16:01:15 2025 GMT
Not After : Oct 20 16:01:15 2025 GMT
Subject: CN=7ba23271d8f68ae82ea40d0d532b075bfef2ba06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a1:99:34:78:51:89:0a:65:2b:41:9a:7a:cd:
44:bf:1f:20:92:af:fa:d6:ec:c9:6d:59:8d:5b:d1:
62:2d:df:d8:e7:a1:2d:d0:b3:68:07:ff:f1:a6:cc:
1a:ae:aa:c5:3d:75:6e:f9:92:6c:62:d9:65:ff:b4:
4c:99:21:cc:90:ce:27:4d:67:94:b3:71:1c:55:66:
d7:95:57:a8:c1:10:db:e4:be:f7:26:27:92:41:38:
a1:4b:ad:1b:a8:7a:4c:c0:b1:97:88:42:40:a4:91:
dd:29:30:04:09:8a:a5:67:c1:1e:bc:5f:6e:f8:c8:
be:9e:9b:68:d6:87:04:5b:b4:dd:5b:ed:c8:85:31:
51:a7:e8:ed:86:e3:a5:4e:4f:18:42:ce:01:3f:ed:
ef:87:da:62:8c:48:a2:c2:77:7b:b3:2e:37:c3:a5:
7a:c5:25:f5:af:40:48:aa:43:6a:50:c8:1f:73:2a:
6d:5d:27:aa:4e:1b:54:58:c7:be:96:5a:e4:84:b7:
49:fd:9b:c4:20:c5:16:d6:93:9f:5b:25:1d:58:10:
64:58:1a:e4:41:d9:d8:5f:a4:8e:87:06:2f:14:e0:
92:4b:ab:68:9b:df:7a:d3:34:36:74:03:8f:fa:7c:
81:f0:90:26:62:c0:da:bd:b7:d9:62:ba:aa:71:11:
c2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A2:32:71:D8:F6:8A:E8:2E:A4:0D:0D:53:2B:07:5B:FE:F2:BA:06
X509v3 Authority Key Identifier:
keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:13:5a:a4:26:56:7e:dd:84:81:99:37:59:7b:e1:e7:43:0e:
03:96:4b:01:ba:44:58:0a:24:3a:61:17:24:2d:6d:7d:c5:8f:
43:fe:ea:e7:a1:0a:38:fe:fd:80:49:0b:bd:7f:70:5a:05:34:
2e:b9:95:68:b8:a7:15:f8:4a:36:4c:d7:f8:31:a5:50:82:0a:
c4:d9:fc:7d:27:ba:25:e5:aa:32:89:9e:1d:4b:65:4c:37:54:
62:b5:82:46:89:64:3a:66:c6:7d:e8:1a:30:55:6d:23:db:01:
de:67:53:6d:d4:4a:7d:ec:d3:6d:ca:5a:13:56:e5:ab:53:59:
e0:b4:23:e7:3e:0f:9d:5b:1b:7e:5e:05:b2:15:df:00:9d:96:
09:5a:3f:9b:77:bd:1d:08:7d:73:5c:b7:2b:0f:0a:81:16:67:
63:67:33:14:20:09:62:e4:b7:08:4a:f4:ff:6d:f6:2e:80:a9:
ed:98:f9:39:4e:a4:a7:9c:95:54:3b:c3:00:d9:31:28:bf:53:
a0:2c:27:d9:14:c2:5a:3a:96:49:89:36:8d:92:24:9a:03:d3:
05:4f:8f:73:59:18:67:fe:ab:aa:9e:c9:28:c7:42:45:d1:af:
3c:4a:da:79:f6:70:07:d8:be:39:dd:e5:2c:db:a2:bb:ff:19:
ef:6f:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:36 2025 by rpki-client