Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
File: WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft (raw, json)
Hash identifier: kj54TRcVz/hWTWuxJNzTPBznBqF2f+MwVdas2A5dI/Y=
Subject key identifier: E9:24:1D:9B:CF:7E:C2:B1:58:A6:C1:0E:4D:5F:02:5F:7A:82:5C:C7
Authority key identifier: 5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
Certificate issuer: /CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Certificate serial: 019A22F79762302A089BBC08AE8BEFCE3FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
Manifest number: 0F16
Signing time: Mon 27 Oct 2025 00:00:42 +0000
Manifest this update: Mon 27 Oct 2025 00:00:42 +0000
Manifest next update: Tue 28 Oct 2025 00:00:42 +0000
Files and hashes: 1: CyjhjoDiSo7WFimizlr7VkadJR8.roa (hash: cM6TG/2qfvLGo5XP6sM8MTNGlbdx/5vkQ91bz6yRUQw=)
2: WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl (hash: aPtd+mYwprnKJCZKeRsXrRrvJ+hqW5AB8jmVbYqD9zA=)
3: hWPfJRigBwQrXXI_iYiIoMMdvMI.roa (hash: wsY9wU/Uh/qwSah/fwLqo3Fci0fOUVaJuSLnsVDw8zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:97:62:30:2a:08:9b:bc:08:ae:8b:ef:ce:3f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Validity
Not Before: Oct 27 00:00:42 2025 GMT
Not After : Oct 28 00:00:42 2025 GMT
Subject: CN=e9241d9bcf7ec2b158a6c10e4d5f025f7a825cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:09:b7:97:78:89:8a:4a:9a:17:d0:85:e2:
39:cc:98:3e:3b:02:9e:a6:33:a5:3f:3c:25:7b:20:
24:a5:f5:39:f7:88:e2:24:e8:b7:66:b6:55:cc:9a:
6f:6c:0b:3a:ae:41:9f:c6:2b:4c:e9:b5:64:34:84:
21:f9:de:4c:87:17:75:93:7c:6f:8c:d6:c4:86:63:
21:b9:6b:3f:d6:d9:3b:41:e9:d9:ac:aa:e1:1a:2d:
98:83:c8:26:59:de:b3:3d:60:f7:77:02:b0:e4:61:
88:8e:70:6d:4e:d4:63:b5:0e:5f:fd:be:5e:f1:27:
f6:2e:5b:24:40:e8:92:d3:5e:9e:ed:cc:02:25:ef:
6b:d9:aa:78:4f:22:08:ed:a3:14:2c:c3:b2:74:7e:
12:92:de:62:54:f9:cf:4f:f3:91:71:7c:a6:d3:3a:
83:dc:cc:71:c2:eb:49:29:31:22:81:14:f0:e0:4b:
df:e0:2a:32:d6:64:f1:b7:b9:bc:b0:8e:2a:43:90:
a6:57:d1:11:e8:6a:bc:a2:22:89:5b:7e:99:ea:ab:
ea:48:44:43:b1:45:de:7e:ae:e0:b8:92:db:6b:34:
fe:b2:d3:c4:54:79:33:34:b2:8b:2a:29:3f:4e:44:
ad:7c:01:48:53:bc:3a:b3:27:2b:90:5e:f3:e7:c8:
e7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:24:1D:9B:CF:7E:C2:B1:58:A6:C1:0E:4D:5F:02:5F:7A:82:5C:C7
X509v3 Authority Key Identifier:
keyid:5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1e:a4:4b:dc:0c:a9:ca:26:bf:75:fa:16:1c:da:59:55:93:
92:3d:a9:5f:d1:ea:9d:32:c2:4d:df:d0:a4:4c:ed:59:a1:4b:
19:fc:c4:96:b1:6a:4b:07:13:fe:45:d6:25:22:26:5f:87:e3:
a0:f4:02:13:c3:3a:e8:9d:3b:eb:cb:17:d8:0e:a0:64:1b:5f:
b3:38:68:29:76:7c:e9:3c:6a:3a:00:e7:41:2e:f7:94:3e:f0:
ef:a2:1c:65:52:3d:f7:bb:32:c4:ca:ba:2a:db:56:12:51:62:
5d:01:f6:ca:8e:08:67:a8:9e:1d:a5:6d:84:ff:50:7a:75:bd:
36:25:55:45:4c:51:ae:21:5d:cd:57:b1:09:35:00:e9:7f:5b:
eb:6a:10:92:fd:85:0c:04:fb:09:be:1d:06:39:64:77:e2:81:
46:e3:8e:57:18:01:10:ab:5a:11:de:7b:db:fc:f4:1d:71:6a:
c7:58:2d:36:62:4b:31:1f:63:ed:6e:84:02:aa:90:dd:65:81:
5e:be:a1:03:ce:9d:9e:00:1a:b7:61:43:8b:f3:9c:0c:af:87:
bb:9e:7b:f1:22:bf:d9:2e:6e:98:e8:b7:b6:85:17:eb:04:f3:
f2:ca:48:f4:c4:9d:f3:4a:8b:c1:a1:11:c1:3a:41:e9:11:9d:
91:62:12:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:18:26 2025 by rpki-client