Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
File: WF2Wj1vhzmceINWDHBcAAfNy090.mft (raw, json)
Hash identifier: pdNDqRgYURlUMkEp/KQ7m4cefQFnNptVfStXrRNiOMg=
Subject key identifier: 04:A7:44:42:FD:89:B1:CB:DD:D4:72:FE:0C:5B:07:07:86:9F:2D:70
Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
Certificate issuer: /CN=585d968f5be1ce671e20d5831c170001f372d3dd
Certificate serial: 019A2553EA01C2CAFB6A06CA367951C3DCB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
Manifest number: 16A6
Signing time: Mon 27 Oct 2025 11:00:47 +0000
Manifest this update: Mon 27 Oct 2025 11:00:47 +0000
Manifest next update: Tue 28 Oct 2025 11:00:47 +0000
Files and hashes: 1: WF2Wj1vhzmceINWDHBcAAfNy090.crl (hash: slEqYXSdbnIP6SkV4hKVIrcIOfJkBV0rulTKfqNpoOY=)
2: kMkaJavkPA06Y44CWRSY630HVLw.roa (hash: T85LjnoIHLJZIbJyI8O+ldJqpb1UlV1mAtOahfZHzpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:ea:01:c2:ca:fb:6a:06:ca:36:79:51:c3:dc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd
Validity
Not Before: Oct 27 11:00:47 2025 GMT
Not After : Oct 28 11:00:47 2025 GMT
Subject: CN=04a74442fd89b1cbddd472fe0c5b0707869f2d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:45:86:c0:c0:54:32:56:a2:37:69:de:6c:
9c:9f:a1:79:e3:ad:65:2a:f4:8c:00:33:2f:0d:9a:
8c:e5:0a:c0:c1:32:55:59:bd:5a:b4:06:24:8e:31:
7d:d1:17:2e:17:e3:45:f0:d3:53:e8:d6:02:94:fd:
b1:b5:bd:d4:aa:38:f3:bb:6b:06:9b:54:a6:d2:f2:
e3:c4:ed:50:45:ab:b6:58:d2:4e:9b:52:9d:3b:04:
0d:8e:4e:58:f1:39:aa:cf:af:52:3e:01:06:bb:cb:
de:55:93:a0:d2:c7:a3:7b:1a:8f:75:69:e0:7d:e4:
57:9a:c6:67:a2:d6:af:ca:a6:cd:7c:7a:bf:cd:1a:
eb:14:74:e6:18:01:58:1d:d9:be:a3:40:3f:7e:4e:
f5:25:08:c4:e3:26:d2:32:a4:9b:6e:a1:bd:8d:b1:
8d:8a:7a:e8:c0:59:68:37:43:24:69:c1:59:ba:25:
28:71:ec:b7:ba:38:0d:27:ba:45:07:56:32:bb:9a:
10:5a:83:11:c6:40:7d:20:7d:47:53:fe:8c:e7:46:
ca:6a:9c:9d:28:5e:a8:30:e2:d3:c7:13:ef:1b:6d:
cc:1f:f7:ec:e0:d1:0d:ba:d8:a9:75:5f:34:90:88:
4a:83:bb:dd:51:3d:82:e6:8f:c2:fc:2d:b5:7a:e1:
56:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A7:44:42:FD:89:B1:CB:DD:D4:72:FE:0C:5B:07:07:86:9F:2D:70
X509v3 Authority Key Identifier:
keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c4:08:11:3c:e0:05:84:d8:e7:00:57:c5:5a:d8:9e:07:f1:
1e:a5:e8:a3:89:9a:ba:08:a0:d1:41:c4:f6:b9:44:db:fa:b5:
d4:72:97:0b:12:41:38:63:e0:72:63:18:b0:40:5e:e7:15:9c:
ae:c5:bc:b8:9d:f6:01:eb:8b:8e:c8:88:64:61:15:06:ba:76:
1a:19:34:62:07:53:e0:13:9f:e2:23:f9:bf:dc:28:51:2f:66:
46:3c:3b:c2:eb:14:a5:b2:61:88:57:1e:52:73:8d:21:72:c3:
45:55:cf:45:4d:ab:5e:73:65:da:65:4a:ea:a2:bd:4a:12:f0:
bf:05:6e:fc:6c:fe:53:7c:2c:a7:50:e6:10:e0:0c:95:00:6e:
66:7b:b2:11:3f:1b:bf:e7:a1:de:33:4d:b1:ee:ba:78:38:9b:
ee:75:d2:80:e0:cb:31:5e:06:c3:b1:e1:fe:c2:ff:10:4a:3a:
f5:96:b6:7c:e2:7a:f4:0b:b6:fc:8f:c3:e1:04:3a:48:c5:ef:
06:36:e0:e6:d8:6c:44:62:f8:af:93:3e:6d:24:41:04:10:0f:
16:f7:c2:87:67:b8:e0:cc:26:ac:34:70:04:75:22:f5:b8:cf:
a7:05:b8:87:e9:b8:b9:4f:af:c6:05:c7:6f:8f:a3:26:00:cc:
39:c6:75:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:33 2025 by rpki-client