Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
File: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json)
Hash identifier: rYWKJvUrYkaDe7u6//kTQN3eJ+zusqHGGcob5TeI2Lc=
Subject key identifier: 56:BB:6D:9F:EF:89:36:5D:A6:87:93:DF:9E:BD:BE:C6:30:D8:34:2B
Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188
Certificate serial: 019A2289FBF1DBCEDE1757CE484C46A8C97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
Manifest number: 1660
Signing time: Sun 26 Oct 2025 22:00:59 +0000
Manifest this update: Sun 26 Oct 2025 22:00:59 +0000
Manifest next update: Mon 27 Oct 2025 22:00:59 +0000
Files and hashes: 1: 9DgRjVnXujq9q_YCFn45nR0DQj4.roa (hash: O21H051OjlQDXJqDxZPxmKAH8eiXb3ghevpaFns+yA0=)
2: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: sFnojMHjMu89Z3Q8HIi9NNHQL2mOQjt9QO8ktPXficI=)
3: ad0B85jvjdQ5awOY3wMvIUJWKS0.roa (hash: TTcNh3M53FShxBm0xKV5WZZn8GR6GuYGWd3G/MpA0dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:fb:f1:db:ce:de:17:57:ce:48:4c:46:a8:c9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3358110dadf224e719914161731df5e56c4188
Validity
Not Before: Oct 26 22:00:59 2025 GMT
Not After : Oct 27 22:00:59 2025 GMT
Subject: CN=56bb6d9fef89365da68793df9ebdbec630d8342b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3e:43:fb:bc:d7:70:45:18:a0:93:18:91:0c:
2e:ac:1c:49:4a:40:cf:b4:5d:76:fb:2d:68:e0:c5:
ab:14:46:60:13:90:8c:c5:90:1b:0f:3e:d4:89:f3:
72:89:d4:89:b6:3f:50:a3:13:48:95:e1:26:df:ed:
c8:ad:a2:74:f8:52:af:06:c2:93:ab:ce:ae:ee:00:
f5:2a:ed:e2:99:df:7d:fb:61:90:1e:38:d6:ea:ac:
19:2c:0e:b0:8e:3d:f3:60:2b:c1:05:6e:58:40:67:
8a:5d:99:59:1c:79:ed:18:db:73:18:7b:4f:d5:12:
22:47:7a:02:de:2d:65:69:58:ae:47:61:02:dd:06:
b4:81:54:91:f7:ed:93:59:ca:da:2b:f2:ba:b8:24:
d5:af:a1:15:df:71:c5:82:ca:f1:95:c3:65:ee:30:
3d:b8:f4:0b:d5:b2:d5:7d:c1:b1:8a:db:b4:aa:3e:
d6:5f:ee:85:09:31:06:d0:db:1c:5b:07:b9:31:ae:
29:e9:be:dd:de:86:d5:fa:88:0f:ba:52:d6:4c:8b:
b4:de:ae:69:03:ea:50:68:32:68:3a:c9:ae:16:68:
70:59:97:67:52:85:2e:05:73:0b:11:7c:a7:47:9f:
7f:92:b0:b0:ac:52:4e:6c:84:4d:30:18:f0:98:54:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BB:6D:9F:EF:89:36:5D:A6:87:93:DF:9E:BD:BE:C6:30:D8:34:2B
X509v3 Authority Key Identifier:
keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e9:5e:31:36:70:b6:b3:3e:71:d0:3c:de:3f:2b:37:c9:3c:
a7:38:6f:ea:48:bf:e8:72:fe:e9:62:2b:79:4d:52:cd:36:84:
a9:b8:86:a7:2f:e3:aa:b5:8a:dc:34:8d:0c:ec:08:44:72:6a:
dc:a0:f0:19:b0:61:29:04:e4:6a:ed:53:7e:11:ee:71:d1:67:
fb:9e:2e:e2:ba:d8:bb:1e:88:62:47:4a:64:3e:91:e2:6a:88:
8d:4a:4e:b6:7c:00:f1:69:54:0c:85:dc:c9:82:ab:c0:61:0f:
ba:22:59:4b:3e:3f:de:89:4c:b4:50:16:c8:2a:77:e8:ac:9e:
45:74:23:7d:4b:17:11:48:17:cd:b5:be:14:c1:33:80:2e:e6:
37:61:6f:ce:eb:00:64:b4:19:d8:d1:07:b8:db:ce:ce:1b:3b:
9a:b0:41:ca:5b:7d:63:5d:82:4c:94:fe:9d:91:21:79:91:8e:
68:bf:6a:e4:b5:37:cc:78:cf:1d:77:56:f6:dd:88:db:5f:52:
da:89:a9:23:54:1e:9f:1a:9c:34:ea:a4:2a:93:b9:5a:64:85:
79:b8:a6:e1:c5:7f:21:d7:db:95:93:0b:c2:11:be:ba:3c:4e:
0f:87:62:73:9a:30:4f:6b:c5:4a:06:a1:97:d6:f5:ab:35:ec:
36:bc:a4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:02:42 2025 by rpki-client