Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
File: WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json)
Hash identifier: seMuB6WFPoYKVtZtwDEyetI/i6l8IU0metI6TB9fUnQ=
Subject key identifier: F0:07:BB:8C:E6:01:8B:33:90:0F:15:08:CA:D7:BB:4E:A8:5C:B6:E9
Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
Certificate issuer: /CN=591338a61f6a0f548420a9392037f4811749508a
Certificate serial: 019A28C27222D644FC89A4F7DEE5B8254814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
Manifest number: 045C
Signing time: Tue 28 Oct 2025 03:00:22 +0000
Manifest this update: Tue 28 Oct 2025 03:00:22 +0000
Manifest next update: Wed 29 Oct 2025 03:00:22 +0000
Files and hashes: 1: QvzIuDIPsfNvbsiu-OpMImndcj4.roa (hash: Zd0Oz2LJKbUfeoowQWU8WhWLnHtXOXflOCBLaOBPWyw=)
2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: 0MD0OPt0SwBgcww/QhKgUeM/RRNBeocBbuoXAGcvPFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:72:22:d6:44:fc:89:a4:f7:de:e5:b8:25:48:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591338a61f6a0f548420a9392037f4811749508a
Validity
Not Before: Oct 28 03:00:22 2025 GMT
Not After : Oct 29 03:00:22 2025 GMT
Subject: CN=f007bb8ce6018b33900f1508cad7bb4ea85cb6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:11:01:e6:9a:97:67:f6:4c:73:d2:44:7b:
48:d0:2d:00:da:45:13:a9:42:92:46:cc:72:53:04:
56:68:ec:4f:5e:db:03:cd:40:75:ea:c3:a1:fa:e4:
36:88:60:fa:b8:8c:5a:b2:e6:72:17:be:3f:fd:b7:
f2:6b:00:78:fc:da:d3:bf:8f:50:60:5a:98:e5:48:
37:6a:ab:1e:25:01:66:b0:76:51:2e:48:31:cf:00:
b5:83:53:e8:c7:d8:16:87:5c:c3:ff:3a:34:4b:a9:
6a:55:8a:2d:7c:42:52:6f:29:e8:ae:e3:df:53:be:
10:ca:5f:e1:46:d9:ce:27:96:33:37:f2:b0:4f:9e:
97:fe:53:8e:de:da:6e:ac:5e:41:5c:42:64:b5:1f:
a7:f7:7c:20:b0:89:29:51:94:58:0c:cc:be:04:7f:
7b:0a:df:2d:46:84:77:c9:79:39:d6:ad:f5:39:63:
3b:05:df:9b:90:19:95:2d:93:fa:bb:40:2f:37:dc:
e8:21:0a:46:d4:51:48:27:ec:e1:60:0a:0c:2b:06:
35:5f:0b:76:cf:01:fe:da:f7:62:87:88:28:5b:c7:
5c:21:bc:7a:2d:50:e4:28:9b:52:ea:05:27:af:45:
35:35:4f:6e:5e:be:ca:92:80:1d:18:81:0f:5c:7f:
24:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:07:BB:8C:E6:01:8B:33:90:0F:15:08:CA:D7:BB:4E:A8:5C:B6:E9
X509v3 Authority Key Identifier:
keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bd:dd:ea:ca:d3:b7:89:17:fd:2a:e2:e1:e2:a9:fb:74:94:
23:23:dd:17:07:9d:49:09:ad:41:81:8d:9e:0d:74:d6:d7:9a:
99:1d:ea:1f:aa:77:cd:4b:3d:16:08:a4:14:57:31:48:b7:b6:
54:8e:14:47:8c:19:72:d8:3a:4a:7e:e7:88:b9:b6:cf:64:90:
d1:c8:5a:8c:1d:f3:ce:a4:74:9d:c5:9c:a8:d9:91:b3:da:76:
51:9b:39:5e:6b:73:29:47:fd:f5:e5:0b:f5:2c:54:ef:f3:33:
62:da:08:53:9b:cd:b6:95:39:92:e6:9f:07:83:7e:75:f3:26:
3a:17:34:23:04:cd:84:e0:bc:d5:92:6d:21:dc:14:d5:c8:f7:
ac:c5:dd:ad:58:9f:d8:7b:08:f1:dc:28:79:ac:c9:37:80:be:
42:5b:33:8d:c7:79:e3:3d:3f:c9:c2:2d:25:4f:0d:fc:01:6a:
f0:bc:91:ed:cb:9c:94:6c:29:29:fe:3d:da:0d:8e:a4:cd:99:
0a:45:c7:89:bb:c2:1b:0b:fe:d6:8f:7f:04:a6:ab:9f:06:3a:
9e:97:98:fa:9c:89:63:8e:3f:04:d3:16:bd:41:e6:61:43:f3:
bc:95:2e:34:56:28:51:5b:dd:79:79:20:26:8a:4f:14:30:c8:
ed:ce:e5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:31:58 2025 by rpki-client