Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
File: Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json)
Hash identifier: FiRjDr7QFsOBzOWICxz1nYUV+CRgG502TJz6/ecQ75o=
Subject key identifier: 21:3E:7A:44:CD:62:01:85:9E:71:37:7A:06:69:24:F2:0B:D0:42:01
Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa
Certificate serial: 019A228A8C2B474D901A39B6861E33B1107B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
Manifest number: 1527
Signing time: Sun 26 Oct 2025 22:01:36 +0000
Manifest this update: Sun 26 Oct 2025 22:01:36 +0000
Manifest next update: Mon 27 Oct 2025 22:01:36 +0000
Files and hashes: 1: 60T6Ej2ZJn4yFg_MS6n2i1jF0Qw.roa (hash: ixHsF6czewFe6nz5GWBS6cLi+9EpZcSZ2ufhT1ecw/Y=)
2: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: GMLxk/JssswBfsi73yWfp8rES6acBTD/gyrjfsZOwF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:8c:2b:47:4d:90:1a:39:b6:86:1e:33:b1:10:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa
Validity
Not Before: Oct 26 22:01:36 2025 GMT
Not After : Oct 27 22:01:36 2025 GMT
Subject: CN=213e7a44cd6201859e71377a066924f20bd04201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:b1:b3:ff:c0:78:cc:dd:99:45:2a:c1:4d:
95:33:f5:69:6e:a0:73:1a:5a:d4:1a:64:49:0c:ad:
3c:34:32:8e:9b:02:a7:3c:a7:32:23:9f:58:ca:d9:
8d:a0:85:8a:64:13:bb:92:0d:aa:15:16:bc:fa:51:
d7:43:2d:29:73:8c:e4:4c:e8:6d:03:2e:6d:97:2d:
fc:71:86:63:8e:62:ef:1f:0e:45:89:8c:50:f7:2f:
97:9e:f5:02:65:43:3a:1a:9e:74:76:5e:bf:d4:13:
70:24:f7:43:66:5a:5a:f3:57:91:db:d8:2b:d2:b8:
12:4d:a4:f9:cc:b7:1e:bc:7c:7c:e9:57:d5:72:18:
4b:b3:65:99:ae:ae:76:69:a1:6f:73:0e:87:12:19:
f4:e3:fa:a1:33:91:82:93:f3:8f:de:53:ad:1c:21:
b9:7b:0c:af:d2:72:d6:ec:86:7b:56:1f:16:35:6a:
68:d5:8d:9c:35:60:e2:b0:b9:52:ae:02:0a:50:26:
d7:5d:73:bf:22:8d:da:f1:e3:ee:47:03:a5:3c:4b:
89:08:02:b8:40:3a:da:17:af:75:ea:20:af:a4:e3:
ff:90:a3:c9:d3:59:b3:e6:62:24:0e:eb:2e:6b:5d:
aa:51:da:24:3f:33:18:48:08:63:3f:18:cf:46:f7:
92:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3E:7A:44:CD:62:01:85:9E:71:37:7A:06:69:24:F2:0B:D0:42:01
X509v3 Authority Key Identifier:
keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:38:5f:ea:05:c8:e0:98:e8:0f:70:07:d1:ff:12:c5:3f:00:
53:c7:a8:ee:0b:5d:fd:3d:cb:ac:a0:18:e6:58:54:14:90:88:
90:6f:41:c9:c5:8e:18:3b:87:a3:61:e7:a7:1a:a8:ce:e0:70:
e1:ba:a5:1a:64:fb:c1:82:86:e3:c0:8f:61:4c:fe:cd:e9:08:
3a:54:05:b5:41:db:f4:42:c1:93:90:8e:73:d0:f5:06:60:c5:
89:ba:9e:e9:85:c6:d8:6e:6e:94:dd:b5:91:6a:82:74:42:81:
05:aa:a2:81:37:b3:b4:21:89:3e:10:8b:99:cf:83:81:54:57:
15:c3:f3:70:c7:50:42:0c:2c:68:3d:15:7a:32:30:4b:7d:c7:
c7:cf:7a:d6:f6:d9:78:53:d8:d1:df:c3:ff:c5:ac:d6:ea:d8:
b5:98:d1:f6:dc:f0:ad:4d:94:f9:e5:0e:18:4e:57:af:7d:ef:
54:7d:09:03:81:5a:dc:a1:09:9f:8d:df:b2:dc:b3:5c:4b:a1:
4a:18:9b:5e:00:b7:71:44:05:a8:9b:a8:ec:83:5c:e4:3b:d4:
b8:45:35:9d:a2:4a:1f:11:5b:ed:52:4d:f0:b1:bb:d6:1b:35:
22:fd:20:9b:a4:3f:76:d3:14:6c:15:65:72:a6:55:76:38:7f:
92:81:8b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:42:15 2025 by rpki-client