Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
File: WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft (raw, json)
Hash identifier: KSppXogZ5/DVbdOUNxthNLF/HPrUt94DYSsur+V8rLA=
Subject key identifier: D7:2D:65:AC:EE:D8:45:D2:1B:0C:2A:3E:B9:AB:DD:CD:CD:65:B8:C8
Authority key identifier: 59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
Certificate issuer: /CN=594b79990f616a8344c860148fc922910e154dad
Certificate serial: 019A1505E577702D1A53A3F6FE0D1CA960A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
Manifest number: 0F35
Signing time: Fri 24 Oct 2025 07:01:39 +0000
Manifest this update: Fri 24 Oct 2025 07:01:39 +0000
Manifest next update: Sat 25 Oct 2025 07:01:39 +0000
Files and hashes: 1: WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl (hash: tiVmh3Y/7XhhuJapNKIsrjkmqvHdW/tNIfzlOD+o2Ig=)
2: g2GyYtJFOKWBkyrCF3Zn6C9X_qA.roa (hash: KOU5LPuCuD+DZVOgS7dpp5JLgW4GWVq1/6dngwGDNNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:05:e5:77:70:2d:1a:53:a3:f6:fe:0d:1c:a9:60:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=594b79990f616a8344c860148fc922910e154dad
Validity
Not Before: Oct 24 07:01:39 2025 GMT
Not After : Oct 25 07:01:39 2025 GMT
Subject: CN=d72d65aceed845d21b0c2a3eb9abddcdcd65b8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1c:3a:48:e8:a1:fa:e0:63:3d:a2:46:4c:10:
a7:e9:8d:68:ae:bf:35:e1:9a:03:4a:65:40:93:c4:
b0:6e:68:6f:06:cb:27:c4:b4:f2:ea:10:6d:ae:29:
aa:9b:ed:b5:32:d4:bf:50:8d:e4:2f:b7:aa:29:55:
de:85:d8:08:a1:3b:85:95:34:fe:f9:b3:c4:a2:c7:
ec:9a:86:80:96:52:ba:54:1f:92:ff:fa:40:35:ce:
0e:aa:b5:2e:30:f2:bd:0d:8e:94:ac:f4:2d:d5:93:
bb:6d:44:bd:5d:78:d5:96:04:bc:ba:07:9f:28:74:
ae:08:aa:87:7c:3a:01:2a:a5:1e:43:6b:25:6a:91:
dd:60:96:6c:d1:d5:ac:32:26:84:ad:c2:77:a1:35:
33:46:23:29:99:61:7f:a7:28:93:05:d7:4d:bb:1e:
7a:3e:6e:bb:8a:99:23:21:e1:e4:ea:35:77:18:06:
80:03:a6:f9:02:2c:03:c9:a0:47:09:61:2b:f5:d7:
5b:ce:d4:1c:20:0c:75:49:10:02:c2:6c:af:37:cd:
c5:81:c4:d2:2b:39:dc:aa:6a:ee:d7:67:f7:bc:ce:
9a:83:ce:2e:6b:bf:a9:ae:24:e1:df:6f:3e:09:e7:
33:ae:6c:35:9d:f7:3a:73:4a:d5:7a:58:bc:56:9e:
19:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2D:65:AC:EE:D8:45:D2:1B:0C:2A:3E:B9:AB:DD:CD:CD:65:B8:C8
X509v3 Authority Key Identifier:
keyid:59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6b:95:ea:cb:fc:a7:f2:4f:6f:c0:b5:ef:3e:e7:6d:13:25:
da:87:84:b7:b9:5c:7a:ac:c5:ba:44:49:ff:6e:58:1f:ed:b5:
be:70:d8:43:7d:e5:f8:77:d0:3c:d6:4b:53:37:d5:fd:87:cb:
b6:be:ef:7f:c4:7c:f7:fe:e2:8a:71:97:ad:fe:ac:eb:9a:29:
93:59:d3:67:8a:25:67:22:c7:14:57:2f:55:fc:cb:32:fd:30:
ec:98:4d:00:1d:8c:09:b2:5b:82:81:0c:88:f8:af:f3:39:ea:
97:6b:17:0d:db:2e:f7:4c:af:8f:5a:1b:82:4e:b4:00:d0:c3:
68:5c:0a:5d:9e:d7:eb:bd:05:fe:b2:86:d4:1d:5c:30:32:fc:
bc:c9:75:44:bc:0c:7b:88:20:71:2b:5b:24:23:f1:7f:bc:64:
1c:66:04:41:8b:82:d7:25:46:af:6b:68:a5:16:1a:82:d0:96:
2d:f2:d9:db:a4:b5:45:7e:5e:67:81:16:37:67:e7:7c:c0:3d:
b8:ce:41:1c:3e:5f:89:92:b5:b2:2d:65:f8:51:8c:20:63:83:
91:d4:0b:b0:0d:a2:b1:72:15:51:a4:7e:b3:62:28:22:ed:be:
be:40:dc:76:0e:d7:e5:73:1c:b1:46:7c:fb:c9:76:89:f9:a5:
86:13:ce:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 11:45:35 2025 by rpki-client