Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
File: WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft (raw, json)
Hash identifier: XqSZYJo86k8twIaj1xo0lW52XKmpBT+9LFjMglBmytQ=
Subject key identifier: 29:56:33:8C:EE:C4:99:7E:15:81:9A:16:32:74:B1:4B:73:CD:65:42
Authority key identifier: 5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04
Certificate issuer: /CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
Certificate serial: 019A13845B9597281846EC739889C6A2E692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
Manifest number: 0386
Signing time: Fri 24 Oct 2025 00:00:32 +0000
Manifest this update: Fri 24 Oct 2025 00:00:32 +0000
Manifest next update: Sat 25 Oct 2025 00:00:32 +0000
Files and hashes: 1: WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl (hash: e62GWpB3u5tFJy3rCapYTqh3tvQhSBS2/nVf0oKVCW8=)
2: uKvJupUJsNWoo5ivCG67FugGN0w.roa (hash: GwajJ7n21P+w7t9dfCC8gYHu25fAVce6h/mSVAkHqyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:84:5b:95:97:28:18:46:ec:73:98:89:c6:a2:e6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
Validity
Not Before: Oct 24 00:00:32 2025 GMT
Not After : Oct 25 00:00:32 2025 GMT
Subject: CN=2956338ceec4997e15819a163274b14b73cd6542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:55:c2:8d:33:76:06:8e:41:39:ad:6c:39:5a:
bc:39:24:17:46:bc:73:32:39:0d:b6:7f:d5:99:52:
73:cf:6b:10:95:13:76:76:9a:9a:a0:57:ba:74:e1:
56:61:27:4c:36:c9:e2:3e:e1:e3:af:5d:05:70:1a:
29:db:75:3d:58:e8:c9:16:ad:e2:a7:f6:e9:4d:2b:
20:27:75:6f:ce:7b:ae:c5:81:83:39:85:6c:d8:f9:
71:97:6c:0f:36:40:e9:51:06:5c:cd:b7:89:62:20:
ca:bc:8a:c1:85:03:f1:64:9f:27:17:7f:9c:fa:9e:
7b:31:10:01:b0:ae:51:12:58:2a:e2:0f:8b:5e:ee:
44:dd:60:4c:11:a1:2c:7d:a5:90:3f:98:c2:5f:a9:
0d:a4:d4:b3:8c:6e:8c:e1:ea:34:4a:23:e8:ce:5c:
21:ff:64:8b:13:16:76:23:13:55:e3:10:4f:37:34:
b1:eb:e6:01:da:67:fa:27:3a:e2:90:a3:68:b8:1d:
11:7c:de:c0:07:6c:72:5c:6e:82:52:59:50:49:97:
e9:25:74:be:4e:28:2c:c2:bc:08:88:fc:b2:e3:7b:
f5:b3:15:5b:df:26:70:fe:06:22:13:d9:fc:c6:c1:
9d:ac:bf:11:00:c6:0f:d1:ba:35:90:fe:30:a9:c0:
cd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:56:33:8C:EE:C4:99:7E:15:81:9A:16:32:74:B1:4B:73:CD:65:42
X509v3 Authority Key Identifier:
keyid:5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:81:d0:d1:90:a3:f7:aa:dc:c8:e6:05:3b:66:26:ea:21:ce:
e3:21:7e:b1:be:d2:d2:f9:02:13:b4:56:af:68:da:f5:d8:03:
fc:f5:18:15:bf:ae:5b:ce:02:51:ae:f6:15:5a:36:74:b4:cd:
c7:0a:c1:56:c2:5c:5c:dd:7b:dd:d9:76:e5:2a:5c:09:7a:0e:
5e:8b:83:7c:12:cf:26:b3:f9:0b:47:3b:9d:44:ab:65:1b:ac:
c5:a5:67:d5:30:11:9a:f3:be:52:69:44:eb:b5:a6:aa:01:7f:
cc:69:2b:e5:4e:d7:4b:09:b2:0f:56:af:67:98:fa:94:4a:0f:
f3:27:8c:8a:4f:28:dc:11:5d:80:1b:ae:d0:ad:8a:b5:e3:4e:
b7:a9:3c:53:20:53:47:9c:92:f8:0a:75:65:f1:87:13:73:c4:
8a:3d:07:0d:87:38:07:08:6e:41:58:d1:17:e5:bb:25:ac:de:
0e:d7:4a:16:d1:e2:df:62:0b:12:0f:a7:b0:6e:05:39:24:56:
7b:29:58:2d:73:28:96:6a:cb:12:4c:c8:ab:19:cf:00:b0:38:
18:fa:dd:ce:c9:a1:7d:3a:74:63:f8:cd:0c:35:8a:53:03:6e:
62:2c:29:5d:f4:bd:3f:31:4c:b3:a6:21:91:91:30:ab:0a:20:
db:d4:6d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 02:40:20 2025 by rpki-client