Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier: 4sKOnPif7wIS7yGraOn1D4ctFnrJAdeoHb/DZa98utA=
Subject key identifier: 07:CF:BE:BC:9E:FB:B8:A8:F3:A0:62:32:05:65:EC:31:D9:1A:55:2D
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 019A05FF411751BA147BF57D0B723F78817A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number: 1147
Signing time: Tue 21 Oct 2025 09:00:05 +0000
Manifest this update: Tue 21 Oct 2025 09:00:05 +0000
Manifest next update: Wed 22 Oct 2025 09:00:05 +0000
Files and hashes: 1: 9c0rgR7sx5b0INcSJYu5W29d3Lc.roa (hash: y70EM6GErQtflpK0nFkjr6koXzt1x9WLonWw/bb44FI=)
2: GGiu1L5lhvZ8MzbHc6hTc-r37u4.roa (hash: rDG83BQh2P4hrlgqRkJ2V5CxzCdFANpJED+WOO84WlU=)
3: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: cGGWAbGg0WV3xsuWGA9OwJ16akLh+um4TQZPOWb2oDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:ff:41:17:51:ba:14:7b:f5:7d:0b:72:3f:78:81:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: Oct 21 09:00:05 2025 GMT
Not After : Oct 22 09:00:05 2025 GMT
Subject: CN=07cfbebc9efbb8a8f3a062320565ec31d91a552d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:08:5b:b5:3c:ad:85:67:b1:c2:fc:b7:e7:
33:20:4c:3a:8e:f4:5b:45:20:2e:d1:7e:98:01:39:
8c:51:f6:dd:1e:1d:dc:a9:1c:e3:09:bf:15:8a:50:
b5:5c:cb:90:fe:30:ca:b6:60:bf:94:c6:7f:3b:21:
91:c6:b3:e7:20:b8:d2:5b:7b:ff:3f:be:2d:6c:03:
71:22:e1:1e:2d:7e:af:94:56:52:b4:e7:48:78:11:
3c:57:e6:8d:63:90:24:3f:c8:5a:b8:99:74:6a:4e:
0d:c5:be:88:e3:2e:62:59:e9:9b:27:f5:15:98:5f:
86:9c:15:b6:9b:6f:74:dc:64:1e:ba:4d:3a:75:8c:
1a:58:ee:06:8e:d3:6b:b0:87:7e:a5:1d:3f:dc:a6:
6d:ec:5a:69:ff:96:11:73:db:d7:6d:2a:ef:93:a8:
e7:3f:4c:ca:2d:e6:ce:9d:eb:92:cd:4f:13:cc:6d:
f2:b7:ca:b9:6c:31:87:6d:60:c6:43:3d:e9:62:ee:
43:42:2d:73:11:50:cd:f9:ec:c2:12:3f:c2:7e:d5:
ae:cf:db:11:64:aa:88:97:0d:49:59:dc:58:93:55:
63:82:b5:da:ee:e2:ea:e4:5a:bd:8f:81:dc:de:7d:
19:d6:f6:57:5e:34:4c:e7:fe:4a:01:7a:e1:93:0b:
93:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CF:BE:BC:9E:FB:B8:A8:F3:A0:62:32:05:65:EC:31:D9:1A:55:2D
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a6:02:31:16:f0:64:31:6b:82:e3:77:e1:7f:b2:51:42:2a:
89:77:23:6c:6c:b4:27:e9:cb:71:5e:09:a1:d0:6c:a4:fb:65:
61:0c:b1:a6:10:c5:3c:56:40:fe:0f:8e:e1:af:4f:28:f5:9d:
08:fd:84:e2:72:29:75:c8:9a:b6:a2:b6:29:ce:95:b3:d8:c8:
40:27:16:46:c2:31:dc:3d:ad:dc:f9:12:e9:5f:e9:b1:c7:7f:
dc:01:e1:85:1d:b1:49:b6:5b:67:42:92:88:c0:58:34:51:9c:
da:5e:76:e1:9c:b5:0a:ca:bb:de:c3:96:68:e9:44:60:f2:b4:
ef:cc:2b:5a:9c:53:f3:a7:f7:7b:0e:48:49:f4:db:4b:b4:71:
00:7a:1f:88:49:d5:e5:89:60:4e:26:62:95:bd:02:00:f7:f2:
cb:26:fd:73:1f:18:05:45:e7:b8:4a:32:2f:70:cb:e3:b3:b8:
07:6b:e4:b2:e1:f2:5f:a8:36:f7:df:b1:3c:4f:51:75:ba:98:
d4:53:e8:0a:7e:6f:7a:80:a4:fd:20:ed:e3:6b:c3:d9:a1:07:
6c:bc:e7:77:6d:aa:22:83:78:6a:ed:3c:88:40:d3:46:3e:fb:
13:b7:8e:f6:2d:7e:5f:11:4d:18:34:b7:99:e0:85:28:34:7c:
4a:3d:b7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:07:15 2025 by rpki-client