Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft
File: WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft (raw, json)
Hash identifier: RyrRkwQ/DvuPy9p7MNKgRKysDg2nB08m0iC98m2gb8Y=
Subject key identifier: E2:50:A9:9D:F6:18:A0:76:39:C2:89:D5:02:97:37:3A:19:84:02:56
Authority key identifier: 58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B
Certificate issuer: /CN=582ac3589fc539ab852690f85d9f3f7f234ec39b
Certificate serial: 019A2F326169A274AC5ECCD4C96F8FE83A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft
Manifest number: 0986
Signing time: Wed 29 Oct 2025 09:00:22 +0000
Manifest this update: Wed 29 Oct 2025 09:00:22 +0000
Manifest next update: Thu 30 Oct 2025 09:00:22 +0000
Files and hashes: 1: PkwWwJkvXsUEh6Cv0L7IgIGfFS8.roa (hash: ldaxlOWxdPdxsizqAkQ8NMKwi+hD26UCyicpS3F4O+A=)
2: WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl (hash: lVdZ29b71cXyrn++E9UolRDT4fiQM8QlQtNRgJGHuN4=)
3: zlPIwjDPqeKD3uFdmxv9hznl_LA.roa (hash: sBzI0OQdYuCXwCE1xwy5akb2HUt9JvXsMA0Ia8KRcEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:32:61:69:a2:74:ac:5e:cc:d4:c9:6f:8f:e8:3a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582ac3589fc539ab852690f85d9f3f7f234ec39b
Validity
Not Before: Oct 29 09:00:22 2025 GMT
Not After : Oct 30 09:00:22 2025 GMT
Subject: CN=e250a99df618a07639c289d50297373a19840256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:f5:ff:99:29:2b:cf:ad:09:a2:e7:cc:70:
c0:a5:c1:0e:fa:93:87:05:2d:1a:a9:58:ff:39:dd:
60:82:30:e2:b0:9c:45:ad:4e:7c:a1:00:ac:0c:67:
7a:8c:93:a6:55:3d:96:46:20:03:5f:5c:ea:1b:68:
87:9c:78:ec:51:1a:f7:d8:2b:12:78:41:6c:73:39:
c3:39:2a:0e:5f:4b:a7:b7:1f:be:08:dc:d5:93:2b:
ab:0c:89:29:9d:89:76:49:a0:9b:ee:0d:21:b6:8d:
c5:98:0d:61:f5:6b:d0:bf:cd:97:13:8a:08:dc:3b:
90:c0:94:93:56:b5:0c:2c:c9:1c:37:24:d0:d2:e5:
c2:d0:68:43:18:f1:01:c9:bc:eb:ce:33:a1:69:51:
7b:32:2f:14:26:03:dd:a5:e5:01:b4:8d:be:2a:fc:
37:55:a2:5a:03:6f:8c:62:b9:bc:7d:ea:91:fa:50:
d5:e4:5f:e3:a4:be:aa:d9:0b:17:ba:ea:c9:3d:12:
68:9f:5d:9c:18:cc:3f:ec:13:33:f5:34:4b:a1:88:
06:e1:71:e4:5a:c2:5f:83:fb:10:d1:a5:36:d1:4b:
7a:9b:3d:04:cc:1e:0e:4b:74:33:b0:48:cc:42:ad:
4d:19:9e:69:8f:8c:f9:c7:46:4b:57:c5:c6:2c:80:
96:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:50:A9:9D:F6:18:A0:76:39:C2:89:D5:02:97:37:3A:19:84:02:56
X509v3 Authority Key Identifier:
keyid:58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:25:1a:bc:93:30:a3:c5:c3:70:4a:75:2e:a5:f6:c4:1b:bd:
26:5e:cc:6b:27:52:54:d5:45:5e:80:9d:b1:89:0a:12:50:58:
5d:0c:38:53:8a:c1:f3:88:3a:fc:af:6a:14:81:26:82:02:98:
3f:d3:05:f2:69:64:f3:e4:32:75:02:58:3b:1b:8b:d9:b0:11:
0c:4f:3a:cb:85:19:ab:c3:dc:3d:e6:57:33:98:c1:a6:c6:bd:
ba:b0:71:fd:cd:c1:da:86:aa:82:54:5c:1e:fd:15:2e:38:df:
4e:0f:bd:c5:a2:1d:54:98:c2:93:2d:c5:3f:31:93:86:8e:ee:
ce:c4:c4:e7:cc:ab:15:17:32:a5:a1:cf:6f:12:cd:8e:71:3a:
fd:f2:0e:f2:6c:0a:25:83:99:1d:68:4b:05:ef:57:2b:8e:bf:
c1:ce:8c:93:58:d1:8a:52:ec:8d:87:1f:97:c5:eb:30:2a:1a:
df:50:f8:e9:0c:2e:c2:3d:92:2a:90:b3:70:30:7e:66:73:d9:
cb:ea:79:ea:1f:00:32:45:ca:b7:c8:97:37:ea:0e:a6:d9:32:
e8:f9:bd:04:1f:01:24:c7:a6:bd:88:d9:ee:5c:df:bf:11:a4:
c6:0a:56:3f:79:b5:22:ed:99:53:91:a7:06:44:5d:a0:02:ff:
5e:96:fb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 11:26:10 2025 by rpki-client