Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
File: WfJfgmyjg6C3pcA2eteB_id_Z88.mft (raw, json)
Hash identifier: oGuADom7mfp/qj5PKWPazstoDsa8NEQgoTuyY9bGCHA=
Subject key identifier: 61:08:5F:EC:C4:4E:4E:C0:2B:AD:81:14:8D:19:47:CE:F6:F8:7C:D2
Authority key identifier: 59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
Certificate issuer: /CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Certificate serial: 019A2C9F4E925370ED09E21764819B9BCBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 21:00:28 +0000
Manifest this update: Tue 28 Oct 2025 21:00:28 +0000
Manifest next update: Wed 29 Oct 2025 21:00:28 +0000
Files and hashes: 1: WfJfgmyjg6C3pcA2eteB_id_Z88.crl (hash: 7Mf3OEstImvuSAux9CyhCQ3O0Hq3RaAGspt3aEzZ3nA=)
2: Wmojj5WI86DdYFq5g4bYA7Nw2eQ.roa (hash: zUiZqLG6W26ho//gZg9iQz5Nrd2fw/u+RT7b1CbWXkM=)
3: kL9XeaVdFYIH8Ee21mjkEgEBZ5M.roa (hash: GmszFqPnsf/cmc4G3XaWK6S4KreytGM4kW7CsuDRkfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:9f:4e:92:53:70:ed:09:e2:17:64:81:9b:9b:cb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Validity
Not Before: Oct 28 21:00:28 2025 GMT
Not After : Oct 29 21:00:28 2025 GMT
Subject: CN=61085fecc44e4ec02bad81148d1947cef6f87cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b1:7d:8b:bd:71:2b:3f:30:1e:37:93:b0:1f:
0f:be:b3:70:e5:e3:a6:1f:e2:2f:77:19:fc:42:e2:
83:18:f9:85:02:c1:8b:70:a8:72:67:b8:30:d8:24:
3b:dd:8a:80:6c:23:4d:b7:35:94:0c:48:fb:49:d6:
a8:1e:86:10:22:6a:70:66:63:dd:50:6d:2a:cc:c2:
6d:cc:89:18:f1:ba:c4:85:1d:36:15:c3:a0:ff:c3:
84:97:a2:cb:20:fd:90:5d:79:07:f2:a3:e2:89:70:
ab:40:00:7a:01:e1:9c:24:05:f0:44:08:48:82:df:
9b:47:e4:d1:b2:62:2b:d9:f1:02:b5:bf:13:ca:b9:
54:a3:d0:77:78:47:07:5e:bc:b1:dd:e0:4a:52:07:
55:7a:1d:77:f8:ea:e5:ac:0d:06:ce:5f:94:be:dc:
5e:76:08:24:24:5d:70:b2:23:97:3b:78:f6:95:aa:
c0:29:87:ce:fa:79:8e:d0:31:f1:ae:d6:04:24:71:
fd:fe:ab:63:d0:c5:7a:15:b0:7b:53:f6:5e:70:13:
b7:c0:4d:b3:80:d6:58:39:14:8c:42:72:3c:58:91:
87:f8:82:12:d9:d8:75:af:d3:4f:d5:ef:20:8c:a9:
3e:60:15:4f:3a:a4:d2:62:ec:a2:bd:b2:61:f5:58:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:08:5F:EC:C4:4E:4E:C0:2B:AD:81:14:8D:19:47:CE:F6:F8:7C:D2
X509v3 Authority Key Identifier:
keyid:59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:98:96:95:bd:c0:b8:98:4b:8f:5a:5f:7a:56:20:13:91:93:
18:fe:4f:1e:08:ba:24:92:94:d5:b9:dc:b8:30:40:57:30:40:
e5:24:6a:6e:3f:bc:e3:02:9f:bc:3f:00:a6:3f:44:75:0a:16:
7c:83:e8:b4:b3:1b:6e:3f:87:69:6c:79:ea:04:7f:a5:a7:59:
db:da:52:33:17:5f:d1:59:bf:c2:59:82:20:36:60:8d:b8:62:
2a:70:21:08:b4:df:54:4e:22:90:30:c0:4a:0f:f3:ec:f9:b9:
62:76:21:5d:65:48:94:7d:c9:d3:df:2b:30:81:5e:56:62:65:
ec:e9:59:a8:d5:c5:1c:bd:4d:a1:2f:b2:20:79:c4:51:71:44:
14:ce:03:13:84:5b:7a:58:83:c7:31:9b:3b:8d:99:c7:36:c3:
ad:f8:33:0f:b8:0b:1c:2d:f1:cb:30:ca:e8:94:72:61:05:2a:
67:90:6c:16:3f:f8:bb:9f:82:49:13:b0:bf:19:92:c7:2e:d7:
56:40:ea:b7:42:31:92:f9:ec:0c:93:98:a3:f8:75:b8:97:47:
ec:f3:2e:c5:4c:0f:d4:09:58:9a:d1:51:2c:58:b0:9d:72:2a:
b9:78:5d:40:68:b8:15:b7:57:07:9f:fe:13:74:1d:b0:bb:5e:
fa:36:0f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 05:28:56 2025 by rpki-client