Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
File: WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft (raw, json)
Hash identifier: TzUDAVfFbveG6L0UTIpv7RbgiYxUotoRU5PsG6vHsHA=
Subject key identifier: 27:B7:3B:FC:A1:D2:8C:E4:0E:AF:CE:9F:16:BB:F3:99:FB:95:F6:B1
Authority key identifier: 5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
Certificate issuer: /CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Certificate serial: 0199337FF351A25280DE7F3EEDD8A6E85191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
Manifest number: 0E9A
Signing time: Wed 10 Sep 2025 12:00:47 +0000
Manifest this update: Wed 10 Sep 2025 12:00:47 +0000
Manifest next update: Thu 11 Sep 2025 12:00:47 +0000
Files and hashes: 1: CyjhjoDiSo7WFimizlr7VkadJR8.roa (hash: cM6TG/2qfvLGo5XP6sM8MTNGlbdx/5vkQ91bz6yRUQw=)
2: WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl (hash: 1VVmybazzKVK+J29HM139+GUGP73HgAEV8BNikwfHIQ=)
3: hWPfJRigBwQrXXI_iYiIoMMdvMI.roa (hash: wsY9wU/Uh/qwSah/fwLqo3Fci0fOUVaJuSLnsVDw8zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:7f:f3:51:a2:52:80:de:7f:3e:ed:d8:a6:e8:51:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Validity
Not Before: Sep 10 12:00:47 2025 GMT
Not After : Sep 11 12:00:47 2025 GMT
Subject: CN=27b73bfca1d28ce40eafce9f16bbf399fb95f6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:27:aa:04:b8:88:c7:b0:39:82:aa:b7:cd:9c:
83:7c:b1:2b:4b:61:ff:ab:f6:d5:03:17:49:1b:2b:
1a:93:95:66:73:69:6e:1c:e7:7c:53:20:f6:c4:df:
db:8a:e9:28:11:cb:cb:00:68:85:d7:08:6d:c3:40:
af:97:05:39:19:1f:86:f2:5d:88:0d:57:47:9f:d5:
2a:32:76:db:a1:81:1d:df:ec:2b:ad:d9:a8:6f:14:
50:b5:25:d6:55:c4:f8:68:64:d6:02:65:3c:9c:40:
12:71:88:d3:b4:6a:78:63:ca:e1:df:42:d9:81:8c:
2c:d2:64:04:97:1f:8a:f2:8f:61:80:d7:be:ad:71:
e3:55:ba:d5:0f:40:35:d6:02:f6:ee:8e:89:47:db:
40:72:e4:70:ba:9a:82:a7:93:17:ae:7d:44:3e:5d:
e3:31:6b:6f:e2:5d:c5:2d:6d:4e:ab:3f:53:c3:aa:
62:04:45:c3:e4:35:b4:14:cd:19:8d:c1:2a:7d:52:
ee:23:92:b5:16:29:0a:d2:33:34:9e:33:e8:53:76:
c1:07:91:92:3d:c2:0e:ce:db:6b:29:14:ff:68:dd:
75:4e:79:2a:67:26:3a:4a:b6:0d:e8:96:cb:53:51:
55:5d:35:1d:1d:bf:c3:0e:11:ca:c0:c8:8f:bf:17:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B7:3B:FC:A1:D2:8C:E4:0E:AF:CE:9F:16:BB:F3:99:FB:95:F6:B1
X509v3 Authority Key Identifier:
keyid:5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3b:4a:c5:97:89:e8:da:42:bc:8c:7e:e1:15:37:c1:f2:0d:
93:3b:ad:05:d8:6e:74:35:db:0d:e2:98:77:99:1b:dc:aa:7f:
d6:4e:31:95:40:23:1e:b4:ea:47:18:5d:4f:c3:3e:ed:ae:a3:
70:4c:b9:4f:d0:6b:8a:ca:09:23:65:0a:4d:7d:1f:ee:20:0e:
ff:6d:3d:f9:a9:57:c8:57:54:26:31:d8:91:eb:b4:cb:9d:f8:
10:85:41:b5:ed:c8:75:aa:bf:20:f2:ca:f9:5d:29:b1:d8:70:
ea:f4:f6:af:a3:83:8d:a5:8c:df:d0:3e:e1:ab:67:b5:b5:c2:
3f:ef:cc:6a:59:4f:c3:e6:8f:57:5e:d2:9d:96:57:2e:1b:5b:
61:49:2d:21:b0:9e:bf:35:a0:d0:de:09:36:71:ed:5f:23:92:
96:30:d4:99:f6:80:3f:f3:d9:f3:99:04:01:7c:a7:38:03:a8:
d3:cf:3d:e9:d0:f0:27:2f:79:6b:85:55:f3:69:23:43:1c:4c:
ab:d3:63:34:a4:e8:81:2c:0b:51:ab:8a:01:45:04:a8:40:f0:
73:9c:b1:4d:67:54:89:b3:52:56:d4:db:da:67:dc:b2:1c:d8:
b7:3e:76:e9:43:a0:87:6f:95:2e:63:13:bd:9d:93:75:ab:e2:
3c:f5:7d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:58:13 2025 by rpki-client