Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
File: WsswiUYeH1-JhLd0LIm7aPG4jBI.mft (raw, json)
Hash identifier: /mrj6M2+9l+3sO+rlwlfkAq3sSK2FVtKwQoJG44I0qo=
Subject key identifier: 9C:EE:5E:46:0B:1D:75:00:52:AC:47:61:B9:75:55:D8:45:D2:73:02
Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
Certificate issuer: /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Certificate serial: 019A71B91CFC2D39488DFE9A6B024CB740CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:28 +0000
Manifest this update: Tue 11 Nov 2025 07:02:28 +0000
Manifest next update: Wed 12 Nov 2025 07:02:28 +0000
Files and hashes: 1: WsswiUYeH1-JhLd0LIm7aPG4jBI.crl (hash: CqYMvrP3k03DwDR+oYpcHb5xMW1o34eREPbrsBFMaV8=)
2: v9e6BQrrpkX4J49zO0X4mqGyYf8.roa (hash: BAka5v89zPoK2V8W4Aeck9ZsQ+ba33dD3QTkdH9ixgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1c:fc:2d:39:48:8d:fe:9a:6b:02:4c:b7:40:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Validity
Not Before: Nov 11 07:02:28 2025 GMT
Not After : Nov 12 07:02:28 2025 GMT
Subject: CN=9cee5e460b1d750052ac4761b97555d845d27302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:73:f5:ff:6f:23:2c:f3:bc:24:26:9a:0a:06:
20:a7:a3:d0:01:70:85:06:ee:c1:d6:ae:61:d9:09:
59:80:86:87:0e:2d:76:ac:4a:73:cc:54:71:ab:16:
cf:1b:a8:73:ca:2f:50:5a:67:26:51:72:b3:3f:6e:
1c:a0:f9:2b:42:62:58:42:3d:21:8b:6e:7c:fd:26:
cf:74:85:63:04:49:91:f5:9d:39:78:b0:95:cc:9f:
28:54:09:f5:bc:09:4b:36:00:92:47:63:dd:fb:a1:
09:19:b1:2b:d4:f1:33:cb:d6:30:a3:93:3d:13:f0:
95:fd:95:78:db:ea:6a:59:0a:8a:66:de:38:72:b4:
5f:57:3d:4a:b8:ee:9c:b5:4a:c2:f7:f2:c3:6d:2a:
70:de:a2:c8:a2:a5:dc:74:ed:98:30:e1:9e:02:0b:
3c:21:47:a8:c3:e0:f9:dc:2c:65:47:c5:d2:ea:91:
39:ce:fb:9b:7e:50:80:cf:c7:f1:42:8d:70:3b:ac:
66:a4:62:df:04:bb:4b:78:73:02:73:ab:0c:95:55:
75:a9:ea:62:c7:ae:e2:e1:6d:af:46:a9:a8:d2:d7:
00:9a:ff:35:9c:d9:51:24:d8:82:64:34:c9:82:a7:
ec:d0:e5:b3:eb:f3:c0:80:36:3e:df:b9:13:12:13:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EE:5E:46:0B:1D:75:00:52:AC:47:61:B9:75:55:D8:45:D2:73:02
X509v3 Authority Key Identifier:
keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fd:6d:a1:29:78:b4:49:e8:3d:c4:af:5e:96:c4:92:cd:59:
fe:cf:ce:21:d2:06:9f:2c:71:26:16:f8:3f:b6:44:ce:a7:b4:
6a:4c:4f:3b:68:c0:a7:b7:37:e4:16:da:0d:ea:de:bd:c5:3f:
1e:82:46:f0:f2:72:0c:1e:c4:f4:c6:04:79:1c:f4:21:ff:99:
21:d8:8a:8c:ed:53:6b:46:4d:95:84:35:0c:47:ed:a6:60:1e:
22:6e:29:44:87:a9:2e:b1:39:96:97:9b:80:90:7a:bb:40:ff:
1e:59:65:16:1b:d5:59:be:69:e8:7d:4e:13:e0:fd:4b:c3:6a:
ee:7a:ab:4b:80:e8:16:99:73:c3:ff:34:cd:fa:f6:28:be:10:
5b:2e:bf:01:88:3f:b2:c7:df:53:54:7d:c0:f9:f3:86:f2:cd:
8f:17:39:d0:b1:a5:f0:c7:b7:30:cd:4e:e3:75:72:d9:e3:28:
29:4d:09:b8:24:35:0e:ca:19:23:82:9d:b1:75:2c:df:30:49:
41:0c:18:9e:f7:a9:92:ef:e1:fe:86:a9:b6:58:d2:16:27:a7:
f5:15:7b:c4:4a:77:db:f0:0b:b3:75:86:fb:29:31:9d:c5:bf:
bb:57:74:f2:3b:e2:07:3b:ac:03:04:5e:d0:7b:29:dc:86:c0:
89:e9:a8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:50 2025 by rpki-client