Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
File: wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft (raw, json)
Hash identifier: OCWSMCd1ec2CGzJ36pyr24jo00KJiqQaEg91yzHR09s=
Subject key identifier: 52:0F:FB:59:02:83:53:AA:B8:BD:40:57:30:3C:34:8D:E5:B0:A5:68
Authority key identifier: C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
Certificate issuer: /CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Certificate serial: 019A326A527969CD9B7A56BD046AC9F2771D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
Manifest number: 06B7
Signing time: Thu 30 Oct 2025 00:00:19 +0000
Manifest this update: Thu 30 Oct 2025 00:00:19 +0000
Manifest next update: Fri 31 Oct 2025 00:00:19 +0000
Files and hashes: 1: pHhGl7hC09oju4TJunou2EvQcgs.roa (hash: 2VlBpUDieZUHkJYBbPMMtM8Or6vr8jhJfvPVbdLnF2s=)
2: wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl (hash: FiM6okczha3MwpvxpKLUgIWORCSPYvPC0ozDGa0cMOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:32:6a:52:79:69:cd:9b:7a:56:bd:04:6a:c9:f2:77:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Validity
Not Before: Oct 30 00:00:19 2025 GMT
Not After : Oct 31 00:00:19 2025 GMT
Subject: CN=520ffb59028353aab8bd4057303c348de5b0a568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:97:41:60:c9:7c:ce:e8:b0:25:78:42:29:
96:05:41:b9:23:a2:1c:f2:f3:fe:70:34:35:47:04:
e0:51:09:3c:1b:f9:29:ee:d0:4a:43:5f:07:8b:e9:
39:e6:32:f8:56:3d:93:18:4e:81:2d:e3:64:ba:c3:
8e:df:2f:7f:06:3d:2b:95:e6:4a:86:70:49:aa:93:
12:2c:7f:b9:c0:8a:b5:b5:5b:48:6b:67:60:c3:6e:
b1:0c:0e:ff:d1:aa:c2:3e:be:62:97:4e:18:bd:f2:
25:ac:26:18:4a:04:de:6a:d6:59:97:35:db:13:44:
e7:95:d2:aa:c0:d8:0b:4c:c2:f4:d0:62:03:e0:ad:
21:fd:3e:9d:0f:aa:1c:98:18:d7:9f:6b:f6:07:3e:
bd:57:65:e5:4b:2e:47:89:28:42:c1:3e:df:0d:6f:
25:5e:e8:f1:4b:a9:ad:28:ce:bf:d8:12:96:d5:ca:
11:19:eb:6f:9b:59:8a:c7:0c:87:b6:2c:d9:9a:3b:
e4:3e:4c:67:88:82:f2:6e:b7:6d:0f:b0:d2:be:44:
9e:b5:6e:e6:27:1d:04:d1:c3:f4:cd:87:4f:8f:f1:
e4:6b:44:4b:07:3e:a6:0f:12:83:23:13:66:f5:bd:
19:f0:82:74:f0:ca:97:3e:92:29:18:a4:5f:7a:d8:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0F:FB:59:02:83:53:AA:B8:BD:40:57:30:3C:34:8D:E5:B0:A5:68
X509v3 Authority Key Identifier:
keyid:C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b3:04:d8:5e:7c:f6:43:dd:03:a4:10:42:a6:f3:64:0e:ba:
8f:a5:de:ab:d6:7a:28:3f:39:ff:35:f0:94:e5:d4:0c:24:2a:
f2:53:35:8c:d9:d1:a5:6c:35:0a:e6:71:bd:58:db:a5:28:a4:
3b:55:c1:8d:34:81:bc:eb:34:b2:2f:fb:ad:ad:da:8c:9a:ac:
85:f0:cf:06:8a:af:ce:fc:6d:0b:36:e6:f9:2b:4f:39:e8:99:
f9:64:f5:76:30:82:5d:26:e5:8d:e5:95:02:e7:90:cd:9a:ee:
d1:9b:42:a8:0f:eb:32:15:9e:b1:98:d0:36:52:80:d4:db:26:
fb:db:96:98:6e:a1:de:2a:40:58:0c:45:c3:1f:47:4b:ce:0f:
9a:70:8a:09:88:42:e7:8b:f8:4f:2f:3c:ea:0d:06:00:9f:ab:
09:17:75:cf:3d:c6:80:7e:ac:41:03:55:c4:4a:cd:87:eb:c7:
80:7f:da:4d:98:92:3e:19:6a:ab:70:33:e4:ca:8c:e1:96:27:
dc:ad:d3:f8:67:1f:ad:ab:48:69:52:b6:0f:55:6c:4c:42:be:
ff:8e:07:81:d4:63:c0:e5:1f:3f:1e:45:fb:fc:94:79:52:ab:
e9:a1:38:5f:af:2a:c4:1d:6d:96:68:f3:76:2e:58:7f:0a:d6:
4b:80:d8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 05:55:37 2025 by rpki-client