Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
File: WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft (raw, json)
Hash identifier: bGjSn7kJjBV5uv/DWov6++FuOUnum5AAnwGFjI/wRiA=
Subject key identifier: D2:24:70:4A:B3:A0:E7:20:59:4B:E9:09:28:1F:B6:F4:E7:8B:4E:91
Authority key identifier: 5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
Certificate issuer: /CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Certificate serial: 019A71B7870403940A70291CE46B6A391F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:00:44 +0000
Manifest this update: Tue 11 Nov 2025 07:00:44 +0000
Manifest next update: Wed 12 Nov 2025 07:00:44 +0000
Files and hashes: 1: 9fwoj_X2tHpCghfejRb6ra1gTZc.roa (hash: VcsRDD+GofeQD9oKWI4zahEGiyHHMwhCi+kgIO2Xtcs=)
2: R-1q52axanYiR_uRw04t04Z8LDo.roa (hash: v5CC/At/0UFJJZBjnOeP3jsuRpec8w6C2aXVgu/IhIo=)
3: WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl (hash: wm9nq1ymHfrtbWQJ80ej7IVeCs5h7AQMdPrwJVdDc3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:87:04:03:94:0a:70:29:1c:e4:6b:6a:39:1f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Validity
Not Before: Nov 11 07:00:44 2025 GMT
Not After : Nov 12 07:00:44 2025 GMT
Subject: CN=d224704ab3a0e720594be909281fb6f4e78b4e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:db:9a:ea:f2:34:dc:ba:eb:19:70:68:bf:
2a:95:f8:f1:1d:32:65:87:51:6c:20:46:e2:41:9a:
de:01:9a:f5:22:6e:d9:5a:ac:2c:bf:3a:5d:45:0a:
c2:ac:f3:83:86:bd:d1:f7:72:9a:d2:eb:52:fa:d7:
f3:c5:8b:d6:b4:76:62:1a:90:ad:9e:e6:65:b3:ed:
f0:fb:ad:f2:be:b4:54:9d:37:19:de:f0:60:c4:b9:
02:a0:be:61:ab:08:a3:67:d7:ef:33:1e:cf:db:94:
d7:5e:c8:38:49:d1:9b:30:64:d4:7d:f8:10:18:b1:
0f:16:6b:b5:97:c8:6a:cc:62:2f:cf:6b:b7:e1:39:
aa:46:62:59:9c:f7:2d:ea:15:f6:91:7d:8f:72:f8:
c6:7e:fa:7b:48:1d:05:61:6c:d8:72:7c:5d:28:db:
0d:cd:2f:d6:3b:fa:d5:4c:41:dd:69:e6:74:22:b5:
1b:b6:84:45:51:9b:fa:be:18:5d:91:e2:f5:44:c2:
77:78:07:3f:71:a7:76:0f:ab:0c:1c:d9:c9:03:66:
1e:57:bc:fe:1f:f8:08:94:4e:2f:e7:fc:4c:f1:5d:
87:00:1c:a0:9b:34:fe:70:c5:b5:3b:b8:24:b9:26:
c4:3d:09:a6:65:da:ce:ad:9d:d6:51:0e:f3:11:02:
8e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:24:70:4A:B3:A0:E7:20:59:4B:E9:09:28:1F:B6:F4:E7:8B:4E:91
X509v3 Authority Key Identifier:
keyid:5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:68:8f:85:09:67:33:fe:28:6f:47:b2:34:bf:9a:dd:a3:8e:
e8:d1:c0:6b:fd:85:24:2b:c0:55:c2:ba:f2:14:b4:fb:42:f8:
b8:0a:4b:ee:20:24:51:d8:86:69:ba:f2:29:3c:b8:9c:6c:24:
fe:20:b9:af:fa:da:7a:f9:12:aa:2d:88:9b:90:86:a4:a0:63:
bd:be:89:c3:3b:06:f6:61:9d:bb:ac:30:be:25:1b:75:d0:27:
30:6c:ec:6b:f1:2e:e7:79:64:d3:84:d5:7c:90:aa:10:d0:2f:
77:d8:86:ee:4f:be:a6:51:68:63:6b:e1:e3:f6:d5:c0:8b:91:
a6:8c:62:38:90:14:ba:82:46:38:37:40:60:60:c8:20:1b:69:
f0:ab:cd:ad:27:f8:b2:54:8f:9b:ad:0d:d4:ba:e3:b4:5c:96:
80:c8:f3:e7:5e:d2:88:6c:38:32:ba:2b:93:46:65:b1:de:ed:
f6:9b:93:e5:82:66:b6:df:59:6a:a7:6f:d3:00:77:83:e0:7f:
0d:c1:70:4d:bc:46:70:2b:c4:65:e5:7f:dd:f9:ea:ae:da:07:
cd:58:75:6f:d2:85:f0:ad:d3:7a:48:51:a6:ce:59:18:d0:98:
d8:be:ef:1e:7c:38:30:fe:60:b5:94:4b:b8:5c:cb:7b:69:e4:
d1:58:d0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:19 2025 by rpki-client