Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
File: WAbICbdgX21c4Se9LYt2dDULixE.mft (raw, json)
Hash identifier: PpI39st/BbKl7mRjW9NfmrnrKSOs/FAKIpsTT5+DOxg=
Subject key identifier: AB:52:EC:3A:D1:5D:05:68:50:85:C3:6D:E0:C8:AA:CF:EB:B5:EC:6F
Authority key identifier: 58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
Certificate issuer: /CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Certificate serial: 019A1AD056F5D8DE678AF39E9283DE1BE8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
Manifest number: 0604
Signing time: Sat 25 Oct 2025 10:00:52 +0000
Manifest this update: Sat 25 Oct 2025 10:00:52 +0000
Manifest next update: Sun 26 Oct 2025 10:00:52 +0000
Files and hashes: 1: NWoXdf60qAqmSr6FbuL52Si_7kM.roa (hash: t2UKYAGI3HyRjneErifjXt9lNGLGftAOePJsseePFFE=)
2: WAbICbdgX21c4Se9LYt2dDULixE.crl (hash: 3bI2vV1VO5Nq8RM1DgWPw3R0U13Dyhr2KAy3Gd3V5Z8=)
3: WCa02rex0sd9sPiC2XX_JjOTVXw.roa (hash: A7EWT3mURBDpeD/IQOh3v6v33IvqR3HU4O/X883nOww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d0:56:f5:d8:de:67:8a:f3:9e:92:83:de:1b:e8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Validity
Not Before: Oct 25 10:00:52 2025 GMT
Not After : Oct 26 10:00:52 2025 GMT
Subject: CN=ab52ec3ad15d05685085c36de0c8aacfebb5ec6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:20:70:a0:3a:4e:e4:9e:4a:98:89:9e:05:
b9:17:d9:40:e4:1c:c6:2e:8c:f5:b3:62:60:0b:95:
39:61:02:5a:f2:c5:93:07:4c:a1:ca:31:e4:08:52:
db:6d:d9:ec:3d:1c:ae:ef:2c:6f:95:28:a0:f1:3c:
35:fe:95:39:af:81:a0:6a:88:d0:82:51:76:dc:45:
20:0e:81:51:f5:6e:bd:c5:c3:14:b7:1c:15:a1:f4:
f0:00:8e:6b:79:3c:74:93:13:20:e3:99:08:4d:fa:
97:9b:dc:76:1d:d2:62:e1:65:40:2c:a7:17:7b:72:
1e:a5:1c:54:e4:b7:98:fc:85:65:77:e8:fe:59:e8:
7f:66:15:29:38:10:64:2d:22:86:c4:3d:69:b5:d2:
5f:16:27:6b:4b:5a:ca:a9:fc:ba:61:e8:d7:cc:fb:
c6:d5:73:a2:97:e5:5b:98:ac:d3:85:53:35:d4:d3:
68:26:ba:d1:12:12:ae:d2:d0:e1:43:ef:ce:c5:c6:
80:ed:c2:da:d9:ce:3a:4a:79:b0:4b:c4:3e:10:97:
6d:41:2d:9e:10:cf:f1:71:7f:45:6e:3f:cf:88:79:
35:65:a5:01:7a:5b:94:e8:0c:d4:67:c1:d9:78:89:
fe:1e:1b:16:54:33:29:eb:54:5d:04:56:56:67:fd:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:52:EC:3A:D1:5D:05:68:50:85:C3:6D:E0:C8:AA:CF:EB:B5:EC:6F
X509v3 Authority Key Identifier:
keyid:58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5b:f9:a3:ef:43:23:13:6c:d6:b4:09:07:f5:07:15:85:f3:
bb:a1:6e:0a:ae:50:f0:81:cc:a5:3e:bc:b0:de:60:d0:da:bd:
44:14:d2:20:f7:cf:ca:be:e2:cd:2c:21:6b:9f:71:11:39:0d:
f5:82:ad:d3:c1:a2:59:02:7d:24:4f:e1:c3:89:79:4a:fe:c9:
49:7f:4f:44:0f:5f:93:ad:96:da:ca:50:5b:9e:d3:6f:8f:2d:
a0:3c:37:14:27:83:1f:01:2b:34:86:52:ce:d1:38:8b:e2:70:
c8:1f:b4:4a:6b:68:e9:e8:a8:41:42:47:93:ce:55:cf:bd:a4:
52:8a:35:4f:28:af:cd:18:89:70:0f:9a:6d:74:db:f0:a1:d0:
c1:7f:d9:4c:97:52:01:39:c5:23:02:9f:ec:c7:90:3d:05:5d:
d2:86:24:22:51:bb:d4:5c:f7:e3:b8:ad:dd:43:63:3a:1b:df:
33:c8:67:02:bf:3d:6e:c0:eb:44:5d:25:8c:53:32:25:06:89:
de:09:9b:b8:e5:7e:58:1c:78:35:14:9f:82:38:31:18:c0:93:
5e:65:4c:64:8b:53:82:32:df:0e:0e:78:78:85:2f:e0:21:0c:
0c:bb:f2:73:25:0b:65:bd:63:21:e7:2b:13:2b:57:31:0c:b0:
35:f2:75:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 18:28:42 2025 by rpki-client