Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
File: WsRdmhoiQWgz3lml5hnRIJbQlp4.mft (raw, json)
Hash identifier: SRM+6UN71e5lqK4bEmPEfp9l1sdj+Pu7Evg7ipPGenI=
Subject key identifier: 22:C6:4D:A7:50:7D:14:3C:DA:DF:51:76:5A:DD:41:02:B9:D1:9E:3D
Authority key identifier: 5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E
Certificate issuer: /CN=5ac45d9a1a22416833de59a5e619d12096d0969e
Certificate serial: 019922C36780272E23C3026092087693B77F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
Manifest number: 0FC5
Signing time: Sun 07 Sep 2025 06:00:55 +0000
Manifest this update: Sun 07 Sep 2025 06:00:55 +0000
Manifest next update: Mon 08 Sep 2025 06:00:55 +0000
Files and hashes: 1: WsRdmhoiQWgz3lml5hnRIJbQlp4.crl (hash: TFcpKM3u08JpCEFbGu2H9W6V8I10BKTokysbNW/6vBU=)
2: X2K16vfCCw5yGYZ35G284aX5j-w.roa (hash: 1LbHM2S0fWzRZr7mNPkcXGUnRUmoTc3QJQmvi/4U+L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:67:80:27:2e:23:c3:02:60:92:08:76:93:b7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac45d9a1a22416833de59a5e619d12096d0969e
Validity
Not Before: Sep 7 06:00:55 2025 GMT
Not After : Sep 8 06:00:55 2025 GMT
Subject: CN=22c64da7507d143cdadf51765add4102b9d19e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:41:50:3a:cd:53:8f:2a:ba:11:6d:eb:9e:
2a:28:5c:ac:75:df:c9:68:c8:3c:56:3b:74:94:67:
c3:e4:98:a1:7c:16:5c:04:0d:75:bb:2c:1c:05:56:
b3:7e:3c:fc:90:0b:ba:87:63:21:bd:8f:c0:ef:d2:
b6:7a:0e:d8:74:59:81:af:5a:c7:06:ad:94:14:93:
5d:5f:b6:11:0b:b5:a4:7b:32:e2:ff:be:20:00:2c:
39:e9:57:6d:fe:de:2f:47:27:d1:98:8b:9a:1e:9c:
91:85:d7:68:21:ae:0d:67:1f:c0:c0:a1:68:a4:ff:
2f:15:67:82:5f:5f:22:d3:dd:60:b0:a0:12:37:9e:
a6:e9:76:e0:2f:ea:a3:37:0d:81:32:4f:10:73:09:
66:15:1b:4d:30:fb:d8:99:2a:80:d9:fc:52:13:e9:
4c:0a:20:1e:b3:58:3e:3c:0b:04:cf:95:03:c0:96:
71:3e:db:3a:29:8f:1d:7b:6b:6e:ff:57:29:0a:a6:
cb:e7:ac:45:28:e4:8a:d7:70:12:5d:50:ec:81:11:
76:a3:4d:c8:34:fa:b8:3e:71:58:ca:6d:30:6b:ec:
9e:48:cb:6a:54:ba:65:c1:b3:28:38:64:c2:80:8c:
5c:97:d2:bc:fb:25:b0:15:c0:7a:9f:36:fa:3f:75:
cd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C6:4D:A7:50:7D:14:3C:DA:DF:51:76:5A:DD:41:02:B9:D1:9E:3D
X509v3 Authority Key Identifier:
keyid:5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:96:fe:d4:21:5f:6b:71:cc:47:43:9b:8f:95:30:58:28:5e:
68:d1:70:59:63:7b:4e:c9:b4:86:f0:6f:76:2a:b5:4b:b9:5e:
5c:ff:16:94:e0:3b:f1:3a:cf:15:f4:63:96:34:0c:ac:18:cc:
46:53:59:cf:2e:74:fc:4e:68:83:f0:f0:19:d4:9c:68:67:7c:
b7:72:4e:a2:66:fd:da:34:d6:ee:40:4b:ca:6e:cd:ee:82:aa:
fe:1e:8c:e8:b2:5c:49:73:9e:43:64:30:85:8b:74:10:91:fc:
d4:95:42:27:95:53:c8:2c:4f:f0:78:d1:ec:f9:63:6f:11:1b:
a0:4c:4e:4d:2c:fb:63:6b:1d:b3:fd:92:ca:00:0e:b5:f2:ed:
99:6e:93:d1:4b:1e:26:67:f1:4f:db:5e:3e:90:93:17:63:30:
38:b6:ad:59:e9:d7:9f:c8:4f:a4:bf:11:a2:13:be:e7:5f:7b:
d3:59:04:03:dc:95:2d:6f:46:d6:9b:6a:e4:19:07:0d:3a:2e:
59:ee:fa:0d:e2:38:3b:2b:9f:0e:64:74:36:46:b7:08:2d:8b:
4a:4c:e7:7a:e5:a5:7c:01:b8:90:a1:10:e6:db:24:65:7b:e7:
f5:74:3d:c6:33:8c:6d:39:e3:90:5a:bd:72:4a:27:4c:02:52:
1b:b9:9e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:46 2025 by rpki-client