Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
File: WVt4mYk7niSL5hVd9EX2MK5daHI.mft (raw, json)
Hash identifier: 2RcQwBKGcXHwt2DcGgkfbyt7hKaOiBtT7Wp4gr3IPjk=
Subject key identifier: 7B:B6:FE:5D:CE:04:B6:39:8A:4B:D7:A5:6A:71:D9:18:6D:63:83:4C
Authority key identifier: 59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
Certificate issuer: /CN=595b7899893b9e248be6155df445f630ae5d6872
Certificate serial: 019A7293793241F7F0B3E804D5A38F262839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 11:00:58 +0000
Manifest this update: Tue 11 Nov 2025 11:00:58 +0000
Manifest next update: Wed 12 Nov 2025 11:00:58 +0000
Files and hashes: 1: 5-_m5sx2pOrKBnn6vsQwme9LIWs.roa (hash: h/D8Ki0B/ZgXWanH4BZ9jNHNZb1ZLuVPvKx+u3l030A=)
2: WVt4mYk7niSL5hVd9EX2MK5daHI.crl (hash: FLCL7lv4+QALGfewHqkZ4FomK4zUlRObcHRRBpTehBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:79:32:41:f7:f0:b3:e8:04:d5:a3:8f:26:28:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b7899893b9e248be6155df445f630ae5d6872
Validity
Not Before: Nov 11 11:00:58 2025 GMT
Not After : Nov 12 11:00:58 2025 GMT
Subject: CN=7bb6fe5dce04b6398a4bd7a56a71d9186d63834c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:19:1f:fc:61:7f:42:a7:f5:60:aa:e3:38:85:
bb:07:6c:f8:3b:6c:c9:1f:d9:8a:52:f0:ea:9a:be:
47:31:8e:3c:5c:b7:2e:54:23:20:b8:19:62:68:ca:
5a:a0:48:cc:3f:b6:ec:4a:79:d7:49:e7:21:cb:4f:
7d:c2:a8:a8:96:a9:3e:0b:d0:e9:7c:8e:d4:9c:0f:
04:7f:b3:e3:9d:8a:15:d6:08:e4:b3:09:0f:a3:55:
8a:72:ad:e2:2d:d5:13:51:56:fd:10:ad:7e:46:0b:
d6:e3:d2:b5:2e:58:3b:0d:60:30:b7:1d:41:39:1e:
5a:3b:43:9f:ae:2e:20:dd:d6:c4:39:6f:ad:3f:cf:
17:7c:7c:96:4b:a4:39:e5:84:f9:d0:26:4b:b4:92:
d5:30:aa:9b:86:78:15:50:09:5f:24:fa:2f:c1:0e:
80:1c:dd:fa:fc:f4:dd:b4:f7:c2:81:68:79:6a:ae:
52:ca:ee:1f:5e:7a:27:5a:69:34:24:1d:c6:e1:5a:
b9:73:28:58:93:c3:ea:89:2e:a4:8a:f8:7e:e8:29:
82:97:ab:47:b4:63:fd:02:83:a4:a6:bc:e5:fc:49:
c0:4d:fc:89:87:15:8d:03:20:c0:07:34:7c:68:33:
ea:8b:e1:85:a5:c2:74:af:7c:ba:bc:72:f6:33:87:
ea:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B6:FE:5D:CE:04:B6:39:8A:4B:D7:A5:6A:71:D9:18:6D:63:83:4C
X509v3 Authority Key Identifier:
keyid:59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:83:0f:08:bc:73:80:e0:45:38:dc:de:78:19:02:a7:76:a3:
c8:47:9d:db:81:b4:cc:5d:13:84:37:6d:9a:e2:ce:7c:cc:40:
7c:12:9f:45:2e:61:95:45:09:60:53:8e:b3:b3:37:8c:6c:21:
be:50:7a:57:c8:d7:3b:e2:1d:b4:a8:f4:78:6b:9c:52:e7:66:
c5:7f:b3:07:af:8a:e2:f1:21:2e:ea:e4:66:7a:45:f8:a9:43:
c3:e7:86:f2:95:0d:2c:2c:e3:a3:7a:ee:0f:1a:6a:0f:23:5a:
e5:d8:67:ed:eb:f0:d5:3f:41:2b:02:b3:fe:5f:14:93:d1:a6:
24:e9:2d:b5:35:87:5a:88:04:2c:2c:01:6a:de:b2:ab:27:fb:
ee:55:2b:66:69:3f:79:6a:38:2a:70:c3:27:f9:b0:95:46:0c:
95:5d:98:b0:96:d1:40:a6:1f:6d:76:c5:c9:21:dd:bf:7e:14:
62:bd:5b:4a:15:59:6c:da:ad:e6:b5:aa:c6:d5:ba:1d:25:fb:
f5:bc:4d:a4:7b:f3:e1:19:82:f9:49:f7:79:7a:e2:ec:a7:90:
5b:e0:d6:76:e0:b7:7e:10:d6:42:db:b5:2e:82:c3:b3:75:ff:
af:6e:43:ec:40:e4:71:c8:89:05:b0:d1:65:a2:8f:81:26:d2:
ba:3a:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:14 2025 by rpki-client