Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier: 3MKvdEAPw3c6yJ+LQbjbhhuNi26mcoxj635o8SICmso=
Subject key identifier: 21:78:87:F2:77:E7:C5:15:EF:C5:7D:CC:92:EE:B8:26:C9:03:2D:9E
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial: 019A326AC13D0329BC8D791FEAB6F45ABE76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number: 0C57
Signing time: Thu 30 Oct 2025 00:00:48 +0000
Manifest this update: Thu 30 Oct 2025 00:00:48 +0000
Manifest next update: Fri 31 Oct 2025 00:00:48 +0000
Files and hashes: 1: UA_CLesELhQ-K1ritg7wCW9o0fw.roa (hash: hqf0nplvHISKqpfSG16CNVc9bBoJPdoMfb/a7H1JSQw=)
2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: qotAFUpLjeY5O0YwxpSJQxzxulVOkMpcJSQVdJZYXfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:32:6a:c1:3d:03:29:bc:8d:79:1f:ea:b6:f4:5a:be:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Validity
Not Before: Oct 30 00:00:48 2025 GMT
Not After : Oct 31 00:00:48 2025 GMT
Subject: CN=217887f277e7c515efc57dcc92eeb826c9032d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:60:f2:44:ad:14:ae:7e:0d:10:91:55:3b:
77:87:2d:9a:2f:73:37:7c:bd:c5:a6:17:8a:98:0c:
a0:bf:53:cc:9d:98:96:f1:88:43:42:fa:bf:82:6a:
2f:a4:0e:c3:0d:a6:d8:ba:b2:a7:8c:7f:2a:d3:d9:
5e:43:2f:75:5f:9a:c0:ad:12:fb:80:40:74:18:1b:
96:02:c1:a0:3b:64:54:0e:37:f3:a2:de:e8:fc:12:
7e:63:b4:50:e1:79:a7:3f:c1:af:5e:0e:d6:87:9a:
e0:7f:62:0e:a8:59:61:bc:d9:e4:21:20:24:13:f8:
74:96:47:44:f2:36:c9:63:71:40:b8:ef:d0:2a:eb:
b1:7f:73:fc:5c:c9:70:dd:48:c6:23:92:45:a4:63:
c4:8d:e4:76:ff:48:6e:6f:fa:88:85:47:28:b5:fb:
75:0e:30:1d:da:f5:3a:e0:85:93:34:d3:77:32:e8:
ae:eb:17:f0:89:d0:62:99:27:0c:5f:ec:36:a5:1d:
a6:5e:7e:05:93:d6:b5:db:33:af:cc:d3:f0:78:49:
7a:a4:e5:b8:5f:5a:bf:4b:e1:f3:53:84:5b:8e:27:
ac:49:0b:81:08:13:7d:01:db:a2:96:80:f8:c4:f4:
3d:b3:d9:1b:13:14:68:2f:56:e7:c4:50:07:59:5f:
1e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:78:87:F2:77:E7:C5:15:EF:C5:7D:CC:92:EE:B8:26:C9:03:2D:9E
X509v3 Authority Key Identifier:
keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2f:bf:9e:49:1a:b2:32:f7:20:5e:84:92:98:31:00:e9:5b:
5d:2d:10:95:fc:12:a5:8d:bd:f6:40:e9:6f:96:5b:7d:0d:c2:
59:f4:98:91:58:d6:25:dd:e1:10:45:9f:ca:78:c1:5d:bc:c0:
8d:40:ea:c6:9d:22:b5:b5:b6:6f:34:25:3a:3b:9f:ea:4b:4f:
f2:f4:fa:8b:cb:4c:48:a1:9e:33:5b:c8:50:64:2c:b5:d9:ec:
94:2d:76:75:17:c2:e5:db:80:bc:f5:ec:fa:4c:a7:2f:2a:a9:
ef:bf:7b:03:a0:b4:a8:a5:dc:1d:9e:85:45:b8:d9:8a:76:26:
cc:52:3f:94:2b:1d:06:f5:3f:3e:69:28:30:29:79:b4:75:07:
71:7a:3f:85:ab:aa:00:1d:32:9f:3a:d7:b6:cf:ef:3f:68:6d:
bb:9e:15:05:9f:70:ab:be:b4:0b:72:b6:6b:fc:23:68:6d:ff:
83:34:40:83:85:80:f2:6e:cc:6b:92:a5:59:11:1f:9c:03:25:
fb:e7:d7:ee:fa:04:c8:6a:2c:b3:62:3d:74:16:b0:97:c0:94:
b8:d2:b2:93:b1:81:3d:ba:4e:ac:0b:bf:a5:a5:fe:36:ee:ef:
35:af:a6:ec:00:18:21:bc:97:d6:85:48:05:73:37:33:79:e6:
67:2b:6e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 08:09:15 2025 by rpki-client