Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.mft
File: Way0AidliYvk8GBQzTovkpHYM2c.mft (raw, json)
Hash identifier: hhBF1q1uc1xbbc7qMXCqJNXZoOyTQeHtdgKyZ09w8u4=
Subject key identifier: E7:8E:44:7F:FD:44:9E:E7:E8:E2:6D:74:66:3B:A6:74:8C:2B:F2:4E
Authority key identifier: 59:AC:B4:02:27:65:89:8B:E4:F0:60:50:CD:3A:2F:92:91:D8:33:67
Certificate issuer: /CN=59acb4022765898be4f06050cd3a2f9291d83367
Certificate serial: 019A251CC21E6449EB630D1BF31CCEBC116B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Way0AidliYvk8GBQzTovkpHYM2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 10:00:32 +0000
Manifest this update: Mon 27 Oct 2025 10:00:32 +0000
Manifest next update: Tue 28 Oct 2025 10:00:32 +0000
Files and hashes: 1: Way0AidliYvk8GBQzTovkpHYM2c.crl (hash: WlwtcFsFMJwsjznKYTW3OFbsheuPQ/zGodQVwVCy4LM=)
2: ulpVz6oz9XYNKND7r8cyUHxYbf8.roa (hash: gFOodfsqdoFiAv0lVY3HgqujFbAqe9mhjL0SdVU2xyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Way0AidliYvk8GBQzTovkpHYM2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:c2:1e:64:49:eb:63:0d:1b:f3:1c:ce:bc:11:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59acb4022765898be4f06050cd3a2f9291d83367
Validity
Not Before: Oct 27 10:00:32 2025 GMT
Not After : Oct 28 10:00:32 2025 GMT
Subject: CN=e78e447ffd449ee7e8e26d74663ba6748c2bf24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:c0:a9:f0:8b:c0:4b:5c:7b:33:e7:d0:c5:
2e:f4:3d:50:72:10:9c:38:58:8e:93:8a:e1:b1:9e:
bc:b4:cc:8e:ba:36:87:90:80:69:9f:79:bd:0f:91:
a3:55:a0:b6:7b:73:be:ac:85:27:cd:e3:63:41:9b:
fa:2b:37:43:77:1f:ad:f7:96:a8:f2:a5:ad:f2:95:
d6:06:70:37:9b:a0:3b:3f:fc:82:ae:46:c0:f3:43:
b7:cc:d8:f7:fa:cf:4d:f3:ed:bf:32:80:12:c6:f4:
37:dc:1a:34:01:d0:a0:1d:2d:85:3b:8c:7a:07:ab:
39:2a:d1:c9:ab:55:94:00:8f:1a:36:b5:46:7a:a0:
14:1e:85:70:46:5d:dd:30:64:78:6c:b2:db:f6:cd:
20:05:68:aa:54:b9:f8:e8:26:6f:d3:59:65:6e:c8:
a6:58:10:c0:ae:db:ea:32:0c:5f:02:e5:87:1d:84:
29:26:88:9c:72:24:3a:48:67:65:e0:55:81:e2:1e:
fb:83:1a:b4:a8:e0:5d:0d:5b:f0:ce:05:db:ce:03:
17:6c:27:08:39:46:44:26:25:d2:12:8f:b7:52:8e:
79:4a:51:3d:5a:07:d2:08:e3:d3:c7:32:5d:07:12:
ea:df:8e:98:ac:f3:6c:3e:81:c4:bc:6f:a9:24:74:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8E:44:7F:FD:44:9E:E7:E8:E2:6D:74:66:3B:A6:74:8C:2B:F2:4E
X509v3 Authority Key Identifier:
keyid:59:AC:B4:02:27:65:89:8B:E4:F0:60:50:CD:3A:2F:92:91:D8:33:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Way0AidliYvk8GBQzTovkpHYM2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:12:ce:0b:4d:51:fc:07:4a:1f:b3:57:17:f7:6c:57:8c:49:
1d:60:c5:a7:6f:47:64:cd:7d:cb:51:62:4b:7b:0f:5d:84:be:
78:04:52:f7:27:3d:07:3e:45:52:b5:5c:46:1c:fd:82:ce:b2:
a8:17:ea:24:a1:67:f7:5e:0c:e6:a2:3a:27:5d:d7:e0:00:d1:
55:29:c3:88:53:9b:b7:f4:f1:80:92:ec:fa:3d:4a:30:2e:3d:
14:28:72:eb:69:15:2e:9d:53:cc:31:2b:ae:3a:c6:62:e3:97:
fb:88:1f:3b:00:78:c6:11:07:a0:0c:05:e4:5e:27:39:db:7e:
2b:af:3b:2a:a4:0d:82:89:40:e2:fc:2b:e5:26:e8:7a:71:09:
ad:63:26:60:36:15:77:3c:23:66:63:7d:57:58:53:74:2e:49:
38:22:ac:82:ea:e7:80:a8:e3:c1:a6:51:b3:bc:44:f0:c4:d4:
7d:f3:3a:dc:ae:60:ee:51:65:3c:02:e0:91:66:cb:65:9b:94:
1e:d6:10:3b:af:a2:03:c4:5f:66:f6:f7:e0:7a:af:33:47:dd:
4e:3c:7a:9b:9b:aa:f0:c0:64:dd:e3:4d:06:df:92:95:1b:91:
74:8d:ef:9a:e9:eb:26:bb:0f:37:e3:46:2c:53:b5:da:a5:4a:
b1:52:3c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:36:47 2025 by rpki-client