Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft
File: WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft (raw, json)
Hash identifier: 1lMNSFi3bCg8/Ow3KxdeEKYDybw66oov7OhahCaIqag=
Subject key identifier: A4:3D:9B:36:EF:CB:30:56:0A:CD:26:23:DB:82:6E:13:84:74:D3:7A
Authority key identifier: 5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41
Certificate issuer: /CN=5ad9c45020072b3369c2b810fef4527244c5b741
Certificate serial: 019A725C8C29837856950E05A6D718E41AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:00:59 +0000
Manifest this update: Tue 11 Nov 2025 10:00:59 +0000
Manifest next update: Wed 12 Nov 2025 10:00:59 +0000
Files and hashes: 1: 7wPReiiZCkAbhtBTvjj1V5aksnE.roa (hash: rquPP/JOGLNyEJui2m/8V+t5G02of5Esav2aIUndmQc=)
2: WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl (hash: BrRKoRaqqHo2RAl6Iui78JBKxIorWtZ0Ra5Iwg146Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:8c:29:83:78:56:95:0e:05:a6:d7:18:e4:1a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad9c45020072b3369c2b810fef4527244c5b741
Validity
Not Before: Nov 11 10:00:59 2025 GMT
Not After : Nov 12 10:00:59 2025 GMT
Subject: CN=a43d9b36efcb30560acd2623db826e138474d37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:77:bc:54:17:67:4a:a1:53:2b:e7:31:40:
52:3a:5e:a3:3c:13:6a:a7:75:66:e8:5f:40:dd:09:
1e:04:c8:66:53:0f:93:94:9d:48:d7:90:ca:21:f6:
70:91:82:48:54:6c:49:0f:fd:58:58:f0:00:64:ee:
8d:6a:d7:07:ab:34:6b:98:b0:62:e7:6b:e4:ff:83:
74:9b:ab:e4:11:89:56:c2:a7:99:b1:06:35:60:f5:
23:6b:da:94:09:9b:19:a4:d4:20:54:41:c1:64:09:
fa:4d:55:9e:eb:ca:96:5e:f3:ce:e2:e9:b7:ef:d1:
7e:09:02:8e:d6:4b:28:0b:37:00:2e:09:49:47:32:
44:00:a2:68:b7:6a:3a:23:0c:45:d0:8e:1f:32:cd:
ab:d4:cb:07:bc:1d:b9:66:81:44:06:4b:5c:89:df:
71:7e:c6:e8:ed:7c:21:e8:ec:a7:bf:e2:d3:43:ad:
ed:13:36:7f:48:53:b1:aa:1c:ba:e8:f6:97:3a:f5:
27:9e:a0:74:58:c9:9f:f1:01:fc:30:9c:a5:df:7d:
07:9a:8c:76:60:15:42:28:c5:fe:49:2e:19:a0:e9:
d9:a2:73:aa:51:2b:e2:c8:a4:ef:e9:42:d0:e5:13:
84:12:66:58:f7:b8:b8:0f:bf:7c:1d:5a:7c:94:77:
5d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3D:9B:36:EF:CB:30:56:0A:CD:26:23:DB:82:6E:13:84:74:D3:7A
X509v3 Authority Key Identifier:
keyid:5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:fa:16:76:7e:30:47:34:e3:3d:37:3b:9a:d5:8d:cb:b5:ed:
5a:3b:40:15:44:89:a1:a0:d2:64:ab:56:ac:d1:66:dc:71:c2:
67:88:40:9d:e9:c8:62:2a:2a:80:32:4c:39:b7:35:f5:ec:6b:
71:f8:ae:29:6e:5d:8a:22:7d:c4:8b:e9:3e:fc:5e:8d:0c:64:
81:80:75:c7:6b:42:56:c9:8a:cb:68:56:b0:6d:04:a3:93:ba:
61:27:61:4c:04:fc:eb:a8:da:49:ad:2d:c9:77:5b:4f:a6:49:
3b:2b:89:62:a1:1b:29:66:9c:73:38:2b:bd:b2:83:c2:44:cd:
50:01:8e:dc:8a:15:5d:16:1d:e1:09:73:64:3c:0a:f9:84:5b:
d9:56:f0:77:23:12:a6:19:98:fa:30:66:31:5c:82:22:61:af:
f7:8f:56:f0:d9:dd:fb:a2:23:7e:a6:36:da:f1:98:4f:cc:40:
bb:48:0c:35:23:48:0f:bd:46:69:00:c3:e6:0d:d1:d9:d4:af:
0b:89:d2:bd:9e:e4:9b:5c:a9:6f:c6:63:c2:6a:b8:3e:a7:9a:
5f:f9:8f:9a:9b:2b:5b:13:6f:01:3c:f4:8b:66:c0:3e:03:3f:
69:bb:d4:95:9d:24:6d:be:80:20:6a:28:75:3d:06:50:83:a9:
59:67:d6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:39:23 2025 by rpki-client