
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
File: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft (raw, json)
Hash identifier: SL8x1go3K7MBvftlBF/weydI79MbQTaEaL1LYLHYFik=
Subject key identifier: 90:1C:CF:3D:52:06:70:9D:FC:FB:0B:09:DE:97:A1:D7:88:84:01:21
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 019A25C18E4DEA2D2D944C08FFDC616482BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
Manifest number: 1422
Signing time: Mon 27 Oct 2025 13:00:33 +0000
Manifest this update: Mon 27 Oct 2025 13:00:33 +0000
Manifest next update: Tue 28 Oct 2025 13:00:33 +0000
Files and hashes: 1: 0T4kYsm4csSjL8VboPiv6-n-j0A.roa (hash: aDj2+cGm+6rFRblQlBX3W4oDpuhRvKm1wzGVwZCxKxo=)
2: 0kdqhMgoXMqa2bGg6WCouazRWoA.roa (hash: m8tqnKE1kxATVgNxV4xo3K5SETCSivJyawzzyZu0T8M=)
3: Bdn1DcMJLsTBh2Q12ScTlfextfA.roa (hash: 5aLKJErELEuvOisnhFo7YC5MNb/X65d9eCU26oCY0QQ=)
4: CwkL85UqoIRe6_M2Y8-_-N4dRZg.roa (hash: IuDgpmoqQyZe/QgfNMc3PyivvmiOvLYcwJyNp9apwNQ=)
5: Ka0pjuU2eliSF6kAA4oHaZoEvsA.roa (hash: 62kAAv2Hh6q7YMgpvoYSR/SU5a88o0FYbuA/sB0zQYU=)
6: MgxF_7heYMD80wktONtKXy_JUjw.roa (hash: VSasJsU9l5n4BfJqqcCZXt2bux9xLXSz0Hlw9ESwmwY=)
7: P-3m5q4qPQ2SNeiAs_GOekqcfjs.roa (hash: eKfLN+GcqqNwEJXEtNi5qdZ/kBOqEtfUu7tt1fh/R9c=)
8: VkosI65EihkcngTWaTJkG6-9m2I.roa (hash: fX35nzHhBNIcEWDRVnVwrt3ML71QDkHBtpojCYaD+w8=)
9: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl (hash: vRtgJcB8rfC6B046lCsOWPeIcz4cgfkxmEL9orePyEE=)
10: m04fb-jUHyOTXhh_z_q3Hd-LAMY.roa (hash: bXlmxzbFdTP+0jnQtSP1HnYWBUd9rItj9AvW7vkRDls=)
11: pgAR_DhucAVso-7iUGVc2v72k-k.roa (hash: 9hxBN+TWA9N4uVVJ3lzI0bLTHIAllmoH+jSnFMWRgCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:8e:4d:ea:2d:2d:94:4c:08:ff:dc:61:64:82:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Oct 27 13:00:33 2025 GMT
Not After : Oct 28 13:00:33 2025 GMT
Subject: CN=901ccf3d5206709dfcfb0b09de97a1d788840121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:df:7a:a3:21:8e:60:21:5f:60:89:af:eb:
3e:85:34:bf:b7:64:0f:19:24:62:8f:dd:87:3a:29:
88:ba:6b:0e:a7:37:2e:19:60:ff:ef:e4:1a:19:a3:
42:c0:98:93:28:74:6b:a8:66:1d:61:c1:b6:3e:0d:
03:6b:d0:32:ef:49:d3:fa:85:89:bf:43:69:b2:e3:
a1:a9:86:ab:df:5d:a5:df:f5:92:af:d2:6e:67:d8:
e0:79:85:7a:98:fc:84:dd:ed:04:3e:5c:ce:06:f5:
9d:3f:bf:98:6e:e6:1a:f8:42:10:7d:73:af:48:d0:
63:cd:e1:e0:e4:5c:af:b7:db:60:dd:f7:44:2b:f0:
4f:c9:f4:1a:55:7b:a2:25:de:b7:a5:bc:d0:bf:59:
4d:f2:3b:83:bb:94:6c:3d:40:2a:a4:63:82:e4:68:
9d:97:ec:62:8b:d9:d1:06:2c:f0:6b:6f:43:a0:e8:
be:1f:e4:4e:59:68:82:2f:fb:8f:29:f8:df:57:ad:
df:7c:45:b1:be:ff:dd:6b:2e:ad:f5:de:f3:71:00:
9c:4f:b1:f4:2f:15:c5:a6:52:39:8b:00:9e:e3:22:
2c:75:dd:ad:43:5e:a9:0a:c6:11:12:c9:50:d1:28:
9c:a1:8e:da:68:62:ef:d2:52:a4:f8:1a:de:d2:3f:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1C:CF:3D:52:06:70:9D:FC:FB:0B:09:DE:97:A1:D7:88:84:01:21
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:64:ff:5f:8a:67:89:29:12:97:e3:86:79:4e:6d:6c:20:b9:
b4:63:61:d4:6e:29:e0:cf:a8:7c:80:05:32:92:da:12:c1:0c:
1f:bd:88:f6:3a:21:58:22:7e:88:e2:ca:b7:08:a1:7f:a2:eb:
db:17:20:fa:fd:14:f6:71:03:d5:eb:a6:36:65:70:8d:ab:4a:
c4:b6:fc:a6:f5:df:e5:30:83:09:64:72:ea:56:f2:8c:9f:a3:
0d:87:15:46:64:80:0d:24:39:2f:c0:43:a3:77:4e:8f:bd:ef:
73:88:39:cd:23:16:b0:75:ef:a6:21:1b:77:37:80:5d:2f:7c:
13:e9:e8:fc:2c:c8:e3:dd:c9:96:d2:8f:dc:22:28:45:dc:e1:
10:d7:a3:9e:8c:d2:e6:6b:60:b3:03:a0:1c:06:36:a2:59:06:
0c:46:76:70:75:1c:e3:9b:94:82:f3:86:a3:f2:e5:22:6d:a1:
67:ee:4c:f8:f8:5f:5f:ac:cf:01:f9:67:fa:27:49:db:1d:00:
60:e0:9f:32:e1:fd:64:c5:2c:57:e0:62:c7:7b:37:38:d8:11:
d7:47:99:cb:b8:5a:3f:b4:86:cd:2d:54:21:1d:31:e8:95:9d:
b0:04:09:51:9a:1d:89:f6:83:33:55:39:b9:35:f5:23:5c:2b:
33:77:d6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:31:37 2025 by rpki-client