Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
File: WSxpn4_svshH0zkLRljdPLIcUrM.mft (raw, json)
Hash identifier: el3PWWJixmOQT/tfH/xo2NeOE8HeQ+IRvuU2cqDEDeQ=
Subject key identifier: 2D:D0:FC:F9:DD:E2:E8:A8:87:7E:17:D0:40:62:C1:39:62:DE:00:24
Authority key identifier: 59:2C:69:9F:8F:EC:BE:C8:47:D3:39:0B:46:58:DD:3C:B2:1C:52:B3
Certificate issuer: /CN=592c699f8fecbec847d3390b4658dd3cb21c52b3
Certificate serial: 019A7225B9EDB7776D707773C38FBC2F9169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
Manifest number: 04CB
Signing time: Tue 11 Nov 2025 09:01:06 +0000
Manifest this update: Tue 11 Nov 2025 09:01:06 +0000
Manifest next update: Wed 12 Nov 2025 09:01:06 +0000
Files and hashes: 1: JGGUZFFW6mkhM2spC4Om8Sl5Ik0.roa (hash: dqTj/vaS7gUXIm5IFoD4OZy7eNLtptQVc2/Kh4P7oE4=)
2: WSxpn4_svshH0zkLRljdPLIcUrM.crl (hash: IWqMeAwnNa1EM2wFwKLgOH2MNghcY57OHMb0fdkUwXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b9:ed:b7:77:6d:70:77:73:c3:8f:bc:2f:91:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592c699f8fecbec847d3390b4658dd3cb21c52b3
Validity
Not Before: Nov 11 09:01:06 2025 GMT
Not After : Nov 12 09:01:06 2025 GMT
Subject: CN=2dd0fcf9dde2e8a8877e17d04062c13962de0024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:4f:9c:06:ff:70:f4:3b:c1:26:28:b5:ea:
26:b5:ac:39:07:ce:26:87:cb:07:ab:2f:60:a4:90:
f0:65:de:81:51:15:cd:a5:3f:ae:f5:54:01:4f:d4:
ae:16:d6:5b:48:63:2d:09:c9:e9:86:44:95:14:7b:
4c:35:40:03:bf:de:cc:a8:2e:72:80:4a:77:6a:98:
13:21:f5:a6:de:f9:40:91:ae:53:e4:2e:7c:24:70:
00:ae:c2:43:b8:41:6b:b6:e8:05:a6:ae:91:e1:48:
79:67:b4:e4:5e:60:0a:18:ad:07:92:15:68:62:60:
05:c5:98:c3:49:7b:bd:c7:57:12:9a:6f:d8:4e:c3:
77:e7:0b:db:9c:be:17:f3:f7:ec:72:2a:0f:3c:d8:
1c:da:ed:62:4a:ea:65:7e:b1:d1:d1:e1:9f:1d:3e:
b0:af:0b:77:b1:65:8b:16:a5:7f:c2:18:32:0c:fd:
d3:22:b5:ff:5e:d4:e1:80:21:ea:31:1f:c2:b9:97:
d3:b6:48:ea:43:66:f6:63:75:2a:42:5d:80:de:60:
4b:dc:33:8b:97:16:94:d5:04:dc:cc:8c:fa:b0:84:
d2:18:db:bf:a4:25:83:4b:b2:48:61:27:bb:29:1d:
69:f9:29:03:40:6e:95:52:ea:ba:93:b2:17:0f:fd:
9c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D0:FC:F9:DD:E2:E8:A8:87:7E:17:D0:40:62:C1:39:62:DE:00:24
X509v3 Authority Key Identifier:
keyid:59:2C:69:9F:8F:EC:BE:C8:47:D3:39:0B:46:58:DD:3C:B2:1C:52:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:aa:77:e4:56:68:e6:55:1a:fd:42:94:0f:fd:95:69:d8:44:
e5:a3:ba:b6:2c:fe:e7:f2:81:64:02:2e:f9:e7:6c:04:c9:0c:
a3:cf:1d:c2:d3:02:b4:53:5a:36:6b:77:e2:ed:4e:bc:1d:08:
eb:87:79:6c:03:1d:85:1c:a7:90:76:5f:b9:2d:29:cd:ad:1b:
3e:6f:60:84:86:99:83:84:f1:b0:57:3c:26:de:73:99:97:e7:
df:22:ea:ee:fc:48:d2:32:99:31:af:66:b6:99:db:7d:80:75:
78:33:6b:39:de:2f:3e:41:f2:26:92:d5:7a:08:6c:c9:17:a4:
cc:ec:2e:b4:5a:8b:4e:f6:38:8c:17:80:e7:31:5e:39:99:95:
5c:a9:fb:18:1d:71:86:2f:69:ec:e4:08:d2:20:56:c7:40:69:
39:c8:5f:00:53:17:e1:cf:9e:29:99:e1:6e:53:89:1c:5f:e4:
a4:86:db:4a:52:4a:cc:66:0e:df:01:f2:f6:66:83:db:1a:a8:
18:56:7d:fd:6c:6f:84:34:3b:0e:4e:75:e5:76:f1:0c:5e:b0:
63:fa:48:b7:4c:09:d1:3a:9d:33:e9:57:47:c4:f5:37:d5:96:
34:a1:e8:d2:36:16:8c:9a:cf:8e:c7:32:f6:9e:16:bf:3f:87:
0f:6c:aa:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJbntt3dtcHdzw4+8L5FpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MmM2OTlmOGZlY2JlYzg0N2QzMzkwYjQ2NThkZDNjYjIx
YzUyYjMwHhcNMjUxMTExMDkwMTA2WhcNMjUxMTEyMDkwMTA2WjAzMTEwLwYDVQQD
EygyZGQwZmNmOWRkZTJlOGE4ODc3ZTE3ZDA0MDYyYzEzOTYyZGUwMDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/VPnAb/cPQ7wSYoteomtaw5B84m
h8sHqy9gpJDwZd6BURXNpT+u9VQBT9SuFtZbSGMtCcnphkSVFHtMNUADv97MqC5y
gEp3apgTIfWm3vlAka5T5C58JHAArsJDuEFrtugFpq6R4Uh5Z7TkXmAKGK0HkhVo
YmAFxZjDSXu9x1cSmm/YTsN35wvbnL4X8/fscioPPNgc2u1iSuplfrHR0eGfHT6w
rwt3sWWLFqV/whgyDP3TIrX/XtThgCHqMR/CuZfTtkjqQ2b2Y3UqQl2A3mBL3DOL
lxaU1QTczIz6sITSGNu/pCWDS7JIYSe7KR1p+SkDQG6VUuq6k7IXD/2cpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3Q/Pnd4uioh34X0EBiwTli3gAkMB8GA1UdIwQY
MBaAFFksaZ+P7L7IR9M5C0ZY3TyyHFKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1N4cG40X3N2c2hIMHprTFJsamRQTEljVXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMDY3ODEtZDVkNy00NTQ4LTlkZmEt
YjI4YzNjOGM5OTA5LzEvV1N4cG40X3N2c2hIMHprTFJsamRQTEljVXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jMDY3ODEtZDVkNy00NTQ4LTlkZmEtYjI4YzNjOGM5OTA5
LzEvV1N4cG40X3N2c2hIMHprTFJsamRQTEljVXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQap35FZo
5lUa/UKUD/2VadhE5aO6tiz+5/KBZAIu+edsBMkMo88dwtMCtFNaNmt34u1OvB0I
64d5bAMdhRynkHZfuS0pza0bPm9ghIaZg4TxsFc8Jt5zmZfn3yLq7vxI0jKZMa9m
tpnbfYB1eDNrOd4vPkHyJpLVeghsyRekzOwutFqLTvY4jBeA5zFeOZmVXKn7GB1x
hi9p7OQI0iBWx0BpOchfAFMX4c+eKZnhblOJHF/kpIbbSlJKzGYO3wHy9maD2xqo
GFZ9/WxvhDQ7Dk515XbxDF6wY/pIt0wJ0TqdM+lXR8T1N9WWNKHo0jYWjJrPjscy
9p4Wvz+HD2yqRA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:11 2025 by rpki-client