
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.mft
File: WvTebnPI4FPLZAt00rkSq9kLBYA.mft (raw, json)
Hash identifier: M98VXdhOZ7Yu7Pk5/Xa7CwTsr0AwolBkLp/4i6QV5Dk=
Subject key identifier: 9A:D9:A7:C9:89:AD:C8:8F:A4:BC:39:7E:DB:E9:B1:00:08:3D:F4:C0
Authority key identifier: 5A:F4:DE:6E:73:C8:E0:53:CB:64:0B:74:D2:B9:12:AB:D9:0B:05:80
Certificate issuer: /CN=5af4de6e73c8e053cb640b74d2b912abd90b0580
Certificate serial: 019A70DC4997373F253FB46A4FE3A56992B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvTebnPI4FPLZAt00rkSq9kLBYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 03:01:16 +0000
Manifest this update: Tue 11 Nov 2025 03:01:16 +0000
Manifest next update: Wed 12 Nov 2025 03:01:16 +0000
Files and hashes: 1: 0v7Hbx6uvAjTzMR1ae0wtzCXqPs.roa (hash: X/0g7PrCl2CLKg5GGuiZl8qcF+NtmVWffZy1vRePW8E=)
2: 5gefhPupXGMjzsgq0OKOkBlguf0.roa (hash: IdihGOA1nFuPlzif6mX/sdPmuX9pgoo7t01a9txWbZ0=)
3: WvTebnPI4FPLZAt00rkSq9kLBYA.crl (hash: FJ79J5oM2oKfo5991j8z/h34zO+WMBHCaH/7gpAStpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WvTebnPI4FPLZAt00rkSq9kLBYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:49:97:37:3f:25:3f:b4:6a:4f:e3:a5:69:92:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af4de6e73c8e053cb640b74d2b912abd90b0580
Validity
Not Before: Nov 11 03:01:16 2025 GMT
Not After : Nov 12 03:01:16 2025 GMT
Subject: CN=9ad9a7c989adc88fa4bc397edbe9b100083df4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0a:06:b4:73:ac:50:ad:4a:51:ed:c0:1a:03:
37:b8:90:67:93:ff:93:58:f3:ba:a7:dc:94:17:a8:
dd:b6:8e:aa:e9:8a:56:31:a7:e7:93:f7:47:a4:a9:
9f:3a:e2:ce:6b:1e:88:2b:6f:1d:75:a2:14:50:cd:
63:7d:b7:61:75:f8:77:a1:1f:77:e8:04:59:f5:9f:
2b:54:74:87:79:de:ce:b6:14:03:25:a1:7c:4a:74:
00:9b:b5:c4:4d:68:58:22:c7:c4:8b:5a:c4:58:92:
91:ac:65:f8:0d:b1:4a:99:3b:47:7a:5d:fd:8b:6f:
80:e6:2b:9b:98:cd:ff:21:c7:9f:80:f4:df:d4:49:
4a:f1:f3:12:28:15:26:70:8c:29:96:11:b5:6a:2c:
31:d0:d4:fd:5f:78:72:e4:06:bc:e4:52:4d:c7:60:
19:9f:bd:02:31:e9:85:18:d5:ff:74:ae:ba:b5:c3:
d8:d0:a0:ab:6e:e6:c9:1f:6b:58:73:c8:dc:ef:4d:
08:b4:fe:bb:43:ba:98:9c:3c:d4:dd:9d:0d:81:03:
51:3f:c6:a4:dc:f6:f1:3a:6c:91:32:ad:0f:06:ba:
e5:82:10:09:80:4a:c5:01:5d:20:84:4c:b9:db:7c:
43:20:a6:9d:1e:d0:41:36:80:06:a2:4a:e0:4c:b8:
78:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D9:A7:C9:89:AD:C8:8F:A4:BC:39:7E:DB:E9:B1:00:08:3D:F4:C0
X509v3 Authority Key Identifier:
keyid:5A:F4:DE:6E:73:C8:E0:53:CB:64:0B:74:D2:B9:12:AB:D9:0B:05:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvTebnPI4FPLZAt00rkSq9kLBYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:45:73:1f:b5:82:01:e1:25:46:9c:fd:8f:ca:78:22:2d:be:
4e:dc:8f:e6:92:0e:1c:80:62:4d:fd:a2:22:15:ff:17:2d:eb:
21:7e:8f:3a:91:95:e5:b3:6c:e2:00:f2:fe:5c:ff:e3:ab:90:
c4:cc:83:46:c2:71:09:d3:aa:4c:71:0b:5f:51:a6:c2:21:c4:
c5:14:db:36:63:df:7a:fe:3e:d0:4a:9d:c6:89:b0:29:64:01:
8c:29:11:be:0e:09:b6:43:de:a3:ff:41:e3:cf:d3:ce:fc:e7:
64:52:fe:51:2e:ed:ac:5f:ae:ca:fd:d1:35:05:78:ca:b5:b6:
fe:c7:ab:9c:22:5e:61:07:a3:1e:ce:aa:1a:6a:90:99:96:46:
5e:e1:99:72:9f:54:d2:51:39:25:e4:c4:16:f8:36:9c:d8:b1:
62:c9:f5:f4:a6:1c:0b:fe:87:4f:ce:b4:00:bb:9f:7c:3a:4f:
86:7e:2e:f6:18:8b:f9:c0:61:e2:49:49:25:65:7e:02:46:33:
3a:3e:72:26:ab:39:01:4e:f2:b5:c1:e8:04:ac:ca:11:8c:dc:
fd:fd:31:7b:a6:05:d0:e2:c2:a2:fa:e7:4c:82:ab:7f:69:d8:
cf:9a:29:ec:f2:7e:6a:e8:3c:b8:74:2f:55:cb:96:e1:e0:8a:
01:14:c9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:54 2025 by rpki-client