Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
File: WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json)
Hash identifier: qNxzyLoxEHWaMr5DdfEGOevW/0zrxxd3uEswIFjz28M=
Subject key identifier: 54:EC:17:F0:BB:BC:C1:99:5A:91:0C:91:31:F8:14:AE:17:9F:74:4B
Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Certificate serial: 019A2666A221BB3114325047EA71695E62C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 16:00:51 +0000
Manifest this update: Mon 27 Oct 2025 16:00:51 +0000
Manifest next update: Tue 28 Oct 2025 16:00:51 +0000
Files and hashes: 1: MNitg_keBs4dR0_QJsKKFy2jt9w.roa (hash: sEGk1tMGmp6moB/qNZm65GUjuchkzx/EiGw40gyU6pI=)
2: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: dGEIRtKGkQy2W2xxnVZsno5dWH5Bsp3IrAt/KfpIDCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:a2:21:bb:31:14:32:50:47:ea:71:69:5e:62:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Validity
Not Before: Oct 27 16:00:51 2025 GMT
Not After : Oct 28 16:00:51 2025 GMT
Subject: CN=54ec17f0bbbcc1995a910c9131f814ae179f744b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:77:13:06:4c:f7:2d:ba:fd:32:a0:4a:73:00:
4e:86:e2:63:98:4c:ff:db:0f:20:f3:d0:24:4b:ee:
cc:3c:3f:09:d9:43:c2:ff:ab:ad:bc:b8:16:b6:e0:
ca:c8:e0:34:78:1a:d2:7c:20:92:7a:d7:e2:c8:35:
71:13:4c:e4:a1:32:10:b2:58:cf:56:1f:f3:ac:47:
91:02:61:2b:f2:d6:c4:e3:8a:96:98:ec:e4:3e:ca:
0d:23:e8:c3:77:74:9d:c8:07:26:1a:f9:62:f2:c8:
80:46:f8:41:a4:4b:1a:0e:28:1d:0f:52:10:37:52:
77:f9:66:cd:75:47:bb:d0:7b:11:ad:0a:c8:ce:b5:
a4:89:ac:b0:5f:2b:c7:01:5b:48:e6:e4:80:0c:a9:
5b:21:c0:4e:fd:53:da:98:a3:8e:08:a9:5f:b6:27:
c8:ba:b2:11:7e:99:40:7c:5d:38:a1:69:5c:55:80:
a2:a4:f4:32:dc:02:3a:3a:af:03:8b:94:b6:0f:8d:
55:60:4a:c4:3f:96:05:25:1e:3c:47:0d:f5:b9:9f:
e8:85:09:c5:94:0d:b9:d6:14:d3:d3:0d:6a:dd:88:
29:7d:a2:a4:0c:b3:30:8b:ea:9a:20:6c:c3:4a:1a:
2c:8b:84:53:bd:85:73:75:80:73:2b:6e:28:66:96:
4d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EC:17:F0:BB:BC:C1:99:5A:91:0C:91:31:F8:14:AE:17:9F:74:4B
X509v3 Authority Key Identifier:
keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:18:fa:6e:33:ec:bc:b9:84:91:55:ca:6a:64:69:3d:18:67:
de:c9:3c:f3:98:54:03:3c:c4:d0:91:5d:72:bd:ae:cf:d8:05:
1c:e5:26:b5:e8:f5:a3:1a:98:b7:6f:93:36:8f:1f:4e:8d:e4:
55:c2:b1:83:40:3d:e2:72:ee:e0:76:60:f6:e4:93:fc:8d:b9:
16:6f:b0:66:be:9e:a0:29:57:82:3d:bc:7b:6f:65:56:ab:dc:
2f:a4:2f:36:03:ac:ef:e2:df:4e:42:8d:c4:a0:33:ad:0c:88:
f0:bc:47:be:53:65:d0:56:f0:de:82:64:e5:08:a4:f9:95:95:
63:a2:69:08:28:07:e8:21:77:97:4d:0b:a4:87:b2:35:bb:84:
d3:19:80:7c:8d:a3:ef:7d:d6:75:87:58:95:8e:a1:f2:91:3a:
65:1e:21:a1:87:8a:2d:ac:2d:63:5f:1e:70:f3:ac:e2:3f:69:
2a:0f:58:2d:00:9e:7a:30:94:9c:aa:4e:2f:e9:e3:56:df:12:
14:f3:ed:e5:2b:02:1a:74:93:f5:ae:e8:7f:11:25:94:05:1a:
a0:0a:4e:a0:f8:3b:38:15:64:c7:8d:2e:40:3b:ba:1f:ff:e9:
ab:59:23:d6:8b:a5:88:53:a5:67:3a:09:75:36:48:3e:04:d0:
ea:ef:30:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:21:27 2025 by rpki-client