Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
File: WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft (raw, json)
Hash identifier: Ag8rssFlRLJwIZUc7ICVit/MptkrzRmTomrI5x9tazM=
Subject key identifier: F2:EA:A8:B9:6C:EC:D4:36:40:39:52:5D:97:4B:00:CF:C6:31:FC:EF
Authority key identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
Certificate issuer: /CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Certificate serial: 0199C569C78CE8410E0CDBEF5B43640C437C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
Manifest number: 021F
Signing time: Wed 08 Oct 2025 20:01:07 +0000
Manifest this update: Wed 08 Oct 2025 20:01:07 +0000
Manifest next update: Thu 09 Oct 2025 20:01:07 +0000
Files and hashes: 1: WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl (hash: JnJQWcbXK0S0LcGiCYEtyR9zFBBzIPWFaNuvm7L/jGc=)
2: _sGWnEAm6H3GQnFAjvcpfjYmmpU.roa (hash: e0wmcRqP7ldHP1lF0Smi9FCBdi4Vz7I53Q9ZET+MPRw=)
3: dJzDSPenGFs61jrjvaTekpH7lb0.roa (hash: kpJ+1xwnPbkQC6dTg5VdbKW3vchd3ul1f6drVPMIJlo=)
4: o4GoVj1IVmnPHBj-vP4PnBTlkD4.roa (hash: HjBekZUZeHTCiqwh5UX3k0G+u1uy5Ap+OteoXrFlzT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:69:c7:8c:e8:41:0e:0c:db:ef:5b:43:64:0c:43:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Validity
Not Before: Oct 8 20:01:07 2025 GMT
Not After : Oct 9 20:01:07 2025 GMT
Subject: CN=f2eaa8b96cecd4364039525d974b00cfc631fcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:a6:f8:86:9a:42:aa:a1:3a:f6:dd:1c:97:
9f:08:59:4e:d1:6d:a0:21:ef:f5:50:5d:8d:b8:f4:
c6:ad:73:30:5e:6e:0d:ef:7f:cf:bf:f5:0d:9e:4a:
e8:90:ef:cf:0c:a8:f7:e4:cb:02:5d:0f:3e:77:16:
26:46:f3:1b:5b:86:54:b2:ed:10:5a:1a:56:17:ad:
29:8e:96:6f:ac:e3:3a:5e:6c:22:bd:fc:25:c6:24:
05:0b:5d:8b:a4:99:4b:a0:d1:4d:57:f8:08:b4:e8:
54:d8:5c:31:71:9e:a7:cd:87:2e:53:39:4d:0f:ff:
f4:ad:0d:d8:ae:f8:02:1c:b4:d7:95:0e:35:40:92:
bd:9c:ba:7d:c5:4e:31:57:89:15:9d:e2:87:13:58:
43:6e:fa:83:32:b5:fd:a2:3a:df:33:73:a8:53:11:
16:71:f5:b3:7e:48:d6:22:3b:17:69:78:de:12:d4:
d9:45:d7:66:45:35:64:e1:dd:51:a3:4b:9f:d4:79:
d6:7f:ca:55:73:0f:00:06:ee:10:a5:e6:76:1d:4d:
f4:ea:ad:59:01:c3:4e:b0:ac:63:00:61:53:e9:8c:
88:13:70:d8:5e:32:0d:cc:5e:7e:40:ef:21:15:ce:
42:de:81:a7:0e:56:c9:82:c2:49:a9:a9:59:3f:ff:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EA:A8:B9:6C:EC:D4:36:40:39:52:5D:97:4B:00:CF:C6:31:FC:EF
X509v3 Authority Key Identifier:
keyid:58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:32:f2:63:5e:97:d8:47:3c:e8:fb:29:cd:3f:e5:75:27:5f:
8f:9d:ac:24:75:b5:b7:69:b4:b8:10:1b:70:52:5f:0c:a9:66:
2f:92:f2:c7:41:19:c8:7c:cb:37:23:43:1e:80:15:3d:0c:17:
c6:2a:a7:da:be:fa:44:dd:2b:90:41:60:b5:9a:5c:fb:af:64:
c6:d8:b0:3a:fa:8a:ed:13:5f:5d:53:b3:b1:55:01:c8:9c:60:
09:81:30:5d:e9:9f:8a:37:e9:ed:1a:95:fb:20:0d:f0:75:06:
d8:7a:0e:da:e5:2c:39:f7:59:61:84:68:02:96:f8:3d:82:79:
fd:ab:2f:81:33:c4:32:35:94:9f:64:33:23:b1:0f:72:78:bc:
43:fd:89:3d:6c:46:a0:93:52:19:6d:32:c5:c9:c9:be:e8:ef:
f6:30:10:4c:17:e8:5d:17:a3:fa:5b:4f:f0:46:9c:c9:5c:5a:
52:0c:dc:65:a6:47:0c:68:01:1b:8a:dc:f2:3e:db:83:d4:e4:
62:85:92:e9:9e:ee:d5:b9:29:21:11:71:d1:76:e9:7b:3d:b2:
4a:db:85:2b:52:62:07:89:db:f3:a5:9f:1f:60:8b:84:2c:3a:
7c:72:a6:26:65:07:54:a6:b2:4b:60:34:9d:df:f3:75:a0:c3:
c3:a4:c1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:24:51 2025 by rpki-client