Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
File: Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft (raw, json)
Hash identifier: tt0P07I7n268LVSqRpn1y+Pv2NVrJtpY6ZGiEqXjYpo=
Subject key identifier: 2A:85:5B:D6:8D:D3:29:D0:49:6F:2C:8E:5D:6A:3C:2D:55:53:B8:CA
Authority key identifier: 5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D
Certificate issuer: /CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
Certificate serial: 019A0B5E3A3CDDCD391907279B38E558F55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
Manifest number: 045F
Signing time: Wed 22 Oct 2025 10:01:55 +0000
Manifest this update: Wed 22 Oct 2025 10:01:55 +0000
Manifest next update: Thu 23 Oct 2025 10:01:55 +0000
Files and hashes: 1: OcSSArCWQB8P_3TQhOP1Kjmg4F4.roa (hash: +2C6c4zXqA1Vi974tbwpI0Ciww2lyqoubywKBoSNij8=)
2: Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl (hash: 6d9GngqdF2zoJ+OGnlKik2dVMRP4xsYNngPAwndLIRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 10:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5e:3a:3c:dd:cd:39:19:07:27:9b:38:e5:58:f5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
Validity
Not Before: Oct 22 10:01:55 2025 GMT
Not After : Oct 23 10:01:55 2025 GMT
Subject: CN=2a855bd68dd329d0496f2c8e5d6a3c2d5553b8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:60:52:05:9c:06:07:55:03:c3:e5:cb:7c:0e:
05:75:a0:86:8e:cb:b2:a5:83:fa:5d:08:2c:90:ec:
ab:ae:d3:ba:b7:4d:97:34:f7:26:2d:34:c3:03:ff:
a4:33:fa:fb:c1:c3:77:61:e1:0b:e4:f4:cd:86:89:
55:e4:81:85:5d:91:6a:f7:ef:a9:58:5b:d9:c5:60:
d0:39:40:70:be:95:23:9b:65:a2:97:ec:56:b6:4e:
11:a0:c6:0f:5b:d1:93:44:27:b2:b3:a4:fa:f2:96:
6b:2e:d1:d4:86:e4:7b:ea:1c:33:14:f8:15:e3:31:
83:f0:5f:59:df:53:96:69:bb:31:77:80:f5:0e:7a:
55:3e:4b:2f:6c:74:d3:bc:19:e4:b3:05:e4:1f:5f:
b7:c8:d9:dc:1f:f4:5a:01:52:77:52:4f:d0:85:ab:
51:34:c6:96:20:46:72:2d:f7:88:05:d6:2d:76:fd:
6c:1b:64:8f:cc:e2:f0:29:24:c8:ce:d5:2c:7a:2b:
08:fe:d2:ce:39:43:db:f7:7a:7f:49:63:99:19:68:
73:3b:bd:53:f7:24:06:40:0b:83:95:e4:c9:23:12:
1a:f4:dd:99:a9:ae:c0:ca:34:2b:bd:7d:f1:36:01:
45:a7:2e:db:90:e7:44:09:e4:e2:d3:0b:b2:c2:44:
07:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:85:5B:D6:8D:D3:29:D0:49:6F:2C:8E:5D:6A:3C:2D:55:53:B8:CA
X509v3 Authority Key Identifier:
keyid:5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0d:73:bd:fa:08:85:87:f7:5b:95:2f:69:c4:ac:12:03:86:
c2:a0:fe:a7:99:c5:d9:65:18:6f:31:8f:00:3d:cc:ee:f3:ff:
5d:3c:67:a4:de:d3:6b:13:ca:28:6e:cc:df:3e:99:2d:02:24:
93:92:ca:ff:82:70:81:31:37:0f:bf:34:89:37:72:98:17:34:
66:2b:50:09:22:6f:87:1d:ae:6b:09:e4:97:c7:6d:6b:a1:2f:
3f:d0:89:9c:18:ed:66:28:03:05:18:46:6b:bd:8d:01:8f:e3:
e0:0c:0f:9e:cc:f8:3b:d8:25:1f:fa:10:45:ca:59:78:51:d0:
47:7d:a9:01:33:6b:38:dc:69:3e:71:b1:3e:32:8a:56:e4:df:
28:96:2b:e2:39:6b:88:bb:d5:e7:19:9d:58:28:f3:8f:5e:93:
3c:e3:38:54:23:47:72:8f:d2:4a:4d:31:62:ac:29:50:58:bf:
07:79:76:02:57:a5:0d:e0:47:b4:24:82:73:d4:8a:f2:f7:e7:
01:b1:9b:51:2a:4a:01:6c:0e:ba:2b:1a:d2:52:63:b4:a4:38:
b6:74:f8:64:ca:6c:0d:52:3a:a7:2e:c0:e8:9b:49:d9:32:6f:
7c:de:16:fe:17:4a:6a:66:dd:24:1d:1a:05:45:df:d8:f4:6a:
66:4e:ca:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:03:15 2025 by rpki-client