Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
File: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft (raw, json)
Hash identifier: FVfFWrOM4vcPUPTB26VeWWyh4StYBY8iLl+4Llhs8mA=
Subject key identifier: 45:F0:F2:0D:9B:E9:9F:9E:80:9D:F0:0E:52:9A:19:38:54:E3:FB:CF
Authority key identifier: 59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
Certificate issuer: /CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Certificate serial: 019A269D35BC5AB1AF93A8487478BE0822C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
Manifest number: 0108
Signing time: Mon 27 Oct 2025 17:00:28 +0000
Manifest this update: Mon 27 Oct 2025 17:00:28 +0000
Manifest next update: Tue 28 Oct 2025 17:00:28 +0000
Files and hashes: 1: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl (hash: rlQDVm2Zd0rZWOFLqzjEjubn0XtJ3tf/ugucBR7U9DE=)
2: o0U8osvjVfiUePXARN4QCTizNIY.roa (hash: ya55CYA+rU6mfw44B9MOjIiEFlx2IM7GsmvEpJ7vX+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9d:35:bc:5a:b1:af:93:a8:48:74:78:be:08:22:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Validity
Not Before: Oct 27 17:00:28 2025 GMT
Not After : Oct 28 17:00:28 2025 GMT
Subject: CN=45f0f20d9be99f9e809df00e529a193854e3fbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:97:be:61:12:b2:9c:2e:8d:b7:76:b7:32:
72:d4:65:5d:ec:f7:66:a6:96:2f:a0:60:a7:d8:88:
7a:f9:61:46:9e:c3:70:03:03:18:fb:b5:43:77:e9:
21:99:78:ca:43:cb:9d:85:a5:c4:80:08:a9:d5:95:
8b:f7:49:30:04:5a:80:8d:73:ca:b7:40:1d:f9:86:
5c:7a:c2:f2:33:4e:1e:9a:61:3f:97:e3:f1:7d:8b:
93:33:df:50:ea:4e:71:27:7b:21:dc:68:da:c3:0e:
b5:b1:41:50:2d:eb:2c:5f:1e:a4:8e:e7:de:a0:5e:
7e:4a:60:78:cd:3e:ee:55:82:07:79:10:85:6d:4a:
1f:1f:f1:be:d9:3e:53:0e:2f:78:b1:e2:13:b2:4c:
e5:a6:63:dc:63:24:7b:e1:d5:f4:40:2c:00:10:4a:
77:20:b6:80:bf:cc:07:8d:39:13:80:9f:47:25:74:
85:53:d5:e4:39:1c:cc:24:3e:b3:81:44:59:6f:27:
54:68:01:bd:4c:67:18:89:b8:16:85:e9:0c:95:d8:
02:ba:25:f7:77:7a:96:ab:96:c6:c3:ee:3c:bd:40:
40:30:bd:a7:49:be:1a:ff:f3:3d:cc:76:52:7e:ad:
44:c0:7a:bf:e4:4e:4a:65:9c:1e:0c:a9:89:18:17:
8c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F0:F2:0D:9B:E9:9F:9E:80:9D:F0:0E:52:9A:19:38:54:E3:FB:CF
X509v3 Authority Key Identifier:
keyid:59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:87:f7:ab:a5:47:ae:3c:40:59:3b:b0:5a:73:71:4a:a2:d2:
e7:bd:c2:1e:cf:3b:cd:27:71:f5:2a:e8:a2:94:0b:be:ff:14:
1e:5b:ca:8f:5f:e8:2a:51:4f:83:7e:13:a2:4a:f7:fa:f7:2c:
a3:a2:c3:9c:7c:02:c7:77:c1:ec:b9:f5:b5:6d:09:c7:9b:88:
fb:0e:66:25:8e:67:26:91:5b:91:6a:8e:9a:bd:a2:db:aa:c6:
23:c4:b6:86:a2:b9:6a:29:27:dd:80:2b:18:85:68:9f:1c:fe:
dd:b9:ae:1c:7e:20:01:67:f5:1f:db:7c:48:08:a0:c4:1e:e1:
8c:99:36:7f:61:da:04:6e:93:82:35:22:45:c6:b2:df:a0:d2:
b3:fe:0a:2a:63:e1:9a:04:51:0c:b4:59:c8:4f:be:54:50:b8:
db:1e:b5:fc:44:58:9e:bf:7f:0f:e9:29:3b:6e:ea:d7:bc:d4:
54:f8:89:21:aa:79:ed:89:f5:6b:cc:c1:d0:14:a3:de:0a:1b:
1a:01:b1:ea:ce:24:dd:6e:24:86:2e:86:70:e3:ce:c6:73:ea:
f0:c5:8c:b8:b7:d9:e9:7d:91:02:1f:4a:74:a6:43:2c:ff:ba:
fe:3a:44:c4:90:36:fb:72:63:c4:8c:fb:dd:c4:bb:1c:8c:19:
ff:09:c2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:58:15 2025 by rpki-client