Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
File: WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft (raw, json)
Hash identifier: h8Uxr0Xww8O958sRXjyKw9XLBEnvVOFLBk/34Pddy9o=
Subject key identifier: A6:44:CE:60:E6:A6:61:43:AA:F7:7E:0F:7B:71:7D:2A:B1:FE:08:31
Authority key identifier: 58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
Certificate issuer: /CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Certificate serial: 019A0780C1A98365B2C3AE68807C1FA987AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
Manifest number: 064C
Signing time: Tue 21 Oct 2025 16:01:09 +0000
Manifest this update: Tue 21 Oct 2025 16:01:09 +0000
Manifest next update: Wed 22 Oct 2025 16:01:09 +0000
Files and hashes: 1: HdQg4z2Zf1RFHyfPIhhO8wU76o4.roa (hash: 6V9zMRoiTuGwCa4UmUjRFtWch8Ql0rvMtNhWDgEc7Wc=)
2: WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl (hash: 2Qro/lTRhvxQnJqKPMK0DGB9bAHcx++9Ff6vWi1XE6E=)
3: rztsTufSoR-W_P1Ii78nFC4FuTk.roa (hash: xuo1Ar7awubUSeGyu2ODhUDhZtyEioCr27uE58GVZok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:80:c1:a9:83:65:b2:c3:ae:68:80:7c:1f:a9:87:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Validity
Not Before: Oct 21 16:01:09 2025 GMT
Not After : Oct 22 16:01:09 2025 GMT
Subject: CN=a644ce60e6a66143aaf77e0f7b717d2ab1fe0831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:63:26:b0:54:6c:61:a8:fc:94:24:bc:78:
d7:fd:3f:f7:91:83:15:91:11:f0:dc:1a:78:fe:4a:
d3:f8:eb:d2:ee:ba:a5:d6:7c:bd:0b:cf:1d:80:b4:
0c:b2:a4:c3:42:f5:46:35:d7:ed:8d:bf:61:04:c2:
02:43:1e:ce:bc:31:3c:74:84:6e:b1:4f:48:a3:1b:
90:72:67:61:74:84:8d:e7:07:5f:6d:d9:51:16:25:
2d:f7:e2:bf:fd:f0:73:7a:76:ff:93:49:37:64:99:
94:ce:a5:e3:4c:d2:9a:11:fc:aa:33:12:e5:8f:c0:
da:17:d3:6e:c2:c5:57:11:6e:be:e0:96:64:8c:86:
8f:ed:7c:80:de:98:54:53:13:22:a9:00:17:eb:07:
8c:77:c9:9e:2b:97:b6:d0:f7:0f:a2:10:94:62:41:
cf:6a:c4:8a:2a:86:4b:2d:74:31:de:77:ff:0f:69:
67:51:15:cb:df:bf:08:c3:0d:12:53:f3:b2:fa:11:
1d:6d:2a:38:6c:4f:67:70:cc:2a:9d:e7:13:18:95:
17:11:f3:d9:4f:ac:42:f1:3f:6a:60:06:ef:4a:59:
f3:ce:43:af:c8:4d:bd:c7:2d:02:65:fa:61:a4:92:
ac:5f:0c:28:e6:6d:d3:a4:a0:0d:5f:eb:27:38:8f:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:44:CE:60:E6:A6:61:43:AA:F7:7E:0F:7B:71:7D:2A:B1:FE:08:31
X509v3 Authority Key Identifier:
keyid:58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3f:39:9c:32:a8:24:c1:58:2e:f4:b6:24:70:09:d7:74:ea:
c8:8f:b7:88:69:11:e7:7d:a1:0e:b0:35:03:0f:46:4f:38:f0:
24:7c:80:bc:42:7c:d7:24:19:96:36:2c:a7:69:3c:01:ed:87:
e8:fc:ee:2b:1d:27:17:16:d6:ca:4c:ca:d1:54:5e:c2:3a:9d:
83:99:3a:76:84:ef:25:3f:5f:b9:c4:8c:2d:2d:75:28:8c:ea:
d5:af:ea:c9:ba:58:f2:8d:69:72:f4:ad:01:47:c3:1c:3c:a7:
57:17:34:0f:97:b6:db:95:0b:15:b4:df:ef:07:cc:be:37:4e:
9d:a9:05:18:3b:be:6b:e1:bb:f2:ae:9b:6e:31:da:17:a9:33:
d3:09:fd:07:57:42:e1:7c:bf:eb:c7:12:87:35:92:77:9e:cd:
33:cf:bb:0f:9a:fe:31:81:59:eb:74:51:40:cb:88:85:c8:8b:
b2:cc:16:2a:88:52:59:29:95:4c:34:fe:a4:f4:2c:34:3c:bc:
ca:68:f2:42:b8:a0:93:ac:d6:cc:ad:a9:27:39:bd:ef:92:e4:
4a:12:b7:ef:44:59:a6:cc:f9:65:88:fb:44:2e:32:20:6a:ef:
17:d4:db:00:a9:b2:7c:2b:b0:e6:49:44:ae:d2:3a:f5:94:6d:
b6:9c:b5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 23:37:59 2025 by rpki-client