Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
File: wtKsHXyezPVli4jxb2E9ez6OjHI.mft (raw, json)
Hash identifier: JLyklAd7oRdYbGAOh29e/QqIuL3NU4iTGUeeE1Mjr90=
Subject key identifier: 20:57:8B:A4:8D:6E:3F:D2:29:A1:19:88:47:02:B3:77:7E:FC:7E:CF
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial: 019A1E07CAB2CB508FB37D62F015F22A47A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
Manifest number: 0DCA
Signing time: Sun 26 Oct 2025 01:00:18 +0000
Manifest this update: Sun 26 Oct 2025 01:00:18 +0000
Manifest next update: Mon 27 Oct 2025 01:00:18 +0000
Files and hashes: 1: iyhHvdxrCDpCx0rthc1y2PDRVeM.roa (hash: tsQpmBoieuwyK9NLkB/rFB9zv5VDj/xDszDJZlsYm+M=)
2: kYICD71uUIhZT1NgaYWPu4i9VEs.roa (hash: tlKuBt17kCCF6TmwuYmDos64rg+wgJTpFtqRY1+6cVg=)
3: wtKsHXyezPVli4jxb2E9ez6OjHI.crl (hash: Rd1p5vM0Xet1hB6LJn79L023VL9t2AUQYMDmcXm3j7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:07:ca:b2:cb:50:8f:b3:7d:62:f0:15:f2:2a:47:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Validity
Not Before: Oct 26 01:00:18 2025 GMT
Not After : Oct 27 01:00:18 2025 GMT
Subject: CN=20578ba48d6e3fd229a119884702b3777efc7ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b1:eb:01:e2:7f:1a:54:e4:24:67:b1:30:97:
3c:c9:cc:91:01:5c:08:1e:43:d2:b4:d6:e1:aa:ef:
04:8c:e5:d3:5d:25:d6:9a:f9:16:b7:35:c6:d2:1a:
d1:de:be:b4:55:98:95:57:ab:d9:03:b2:40:4f:05:
15:c2:43:07:eb:97:ef:82:97:c0:ea:a7:a2:d4:c2:
cd:ff:26:77:0f:e1:c7:47:ac:f7:f6:91:91:a2:f0:
7a:36:2e:9c:e6:29:44:e6:d9:82:54:f9:dc:0b:57:
df:d7:b8:68:3e:bd:96:ea:b5:37:5f:b6:22:97:f8:
8b:86:39:33:bf:8e:6a:e7:5b:14:ce:7e:1b:e1:4b:
6c:20:79:44:a0:6b:d5:9d:40:f6:52:c0:d1:4f:4a:
ff:50:44:c1:bf:06:00:9e:6f:be:4f:4c:c4:de:8c:
83:e6:35:aa:39:a2:2e:54:c4:cf:90:ee:61:8a:18:
e6:88:40:d9:ec:55:dd:a1:c6:0f:0c:af:9a:1c:02:
9b:40:d0:ce:43:73:f0:d3:9f:37:26:c1:c2:d3:6b:
44:8a:c4:73:65:10:40:79:2f:00:e6:9e:f3:4f:c0:
79:3e:74:17:aa:83:f5:8e:86:a0:2f:53:3f:c9:a4:
fe:37:02:a5:3e:8b:2d:38:99:78:4a:41:e3:ba:37:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:57:8B:A4:8D:6E:3F:D2:29:A1:19:88:47:02:B3:77:7E:FC:7E:CF
X509v3 Authority Key Identifier:
keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:22:56:ce:f9:31:47:53:9b:b1:8d:67:26:8d:5c:41:5f:55:
b7:ab:79:7f:e5:b0:c7:ab:3f:7c:a0:67:97:08:a0:65:11:b9:
f6:e5:19:b6:9d:11:81:29:27:18:2b:2f:3f:fd:21:47:ae:43:
0f:74:86:14:e5:94:a9:50:72:a0:62:48:69:84:7c:02:fd:98:
28:92:54:6b:58:e1:75:73:36:37:f2:db:ee:1d:89:2a:c8:89:
c9:e6:fa:fd:c8:9a:ed:1c:63:ce:14:e2:22:57:ab:d5:4f:30:
fb:26:bb:48:34:7b:64:42:d4:4c:d1:93:35:94:8b:bd:f3:e0:
f8:f2:d1:70:3c:b3:e5:43:63:c0:73:8d:2e:cd:ed:9d:bf:53:
04:29:e4:46:a0:1b:56:65:60:77:83:cb:1c:16:cc:69:b4:eb:
5e:ba:4a:fa:01:8a:8a:b6:f6:af:6a:01:bf:ba:a0:99:18:3d:
c5:8d:c6:1b:dd:0a:47:1e:70:85:7c:ed:55:81:22:11:2a:f4:
07:2e:bd:03:7e:03:0c:52:fa:ef:de:c0:46:fd:42:3d:5d:57:
d3:a9:6e:98:f5:fe:b3:c4:8d:b5:06:5c:c0:e8:8a:4c:21:e5:
a2:85:89:f3:47:41:d6:ec:97:21:f4:cc:81:6e:d5:77:c7:f5:
68:24:b0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:11:44 2025 by rpki-client