Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
File: WtYtZLAg5sARSELydiZePAfT6lw.mft (raw, json)
Hash identifier: YsM9RNYw+brFyzYF6PlOY1W/SMxCce7gZ4o0XoLbT5o=
Subject key identifier: D8:1D:DE:9B:11:C9:C8:87:CD:0A:2D:8B:88:6E:D8:85:2B:CF:3F:D7
Authority key identifier: 5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
Certificate issuer: /CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Certificate serial: 019A725CB30AA058967656A34FDC40149D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
Manifest number: 0331
Signing time: Tue 11 Nov 2025 10:01:09 +0000
Manifest this update: Tue 11 Nov 2025 10:01:09 +0000
Manifest next update: Wed 12 Nov 2025 10:01:09 +0000
Files and hashes: 1: WtYtZLAg5sARSELydiZePAfT6lw.crl (hash: QRrdeCaeEbdkbB9G1xgXxW6OhxBxfzzE1zP1xpmgILE=)
2: lZfbUbYtdAwEvAPz9QgaQ6AiUzc.roa (hash: 95YPoU3EnMBScsmNlHgLSHa16IwnjsnV9FN8H0xyPaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b3:0a:a0:58:96:76:56:a3:4f:dc:40:14:9d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Validity
Not Before: Nov 11 10:01:09 2025 GMT
Not After : Nov 12 10:01:09 2025 GMT
Subject: CN=d81dde9b11c9c887cd0a2d8b886ed8852bcf3fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ea:0f:c6:63:ca:1a:28:09:41:55:85:81:e6:
1e:e3:72:b8:52:2c:f4:e3:34:cd:02:2c:52:f8:bf:
19:96:dc:d0:ae:47:ba:0c:44:fe:98:2f:19:5e:bc:
95:83:6e:8d:b4:1f:f9:dd:f1:a8:f6:d8:59:48:90:
32:24:c7:7c:a2:3d:90:e8:48:7e:1d:06:14:e7:d7:
24:ad:fa:7f:48:81:a2:3c:2b:8e:7a:f1:3a:6d:b2:
88:bc:77:1c:43:84:32:1f:50:fb:88:97:ea:c5:a7:
25:07:a9:c0:fa:b3:af:79:3a:09:e0:d1:63:9b:5e:
66:3e:7c:b2:cf:88:46:24:46:c8:52:79:94:79:3f:
36:72:55:8d:c5:50:c2:f7:8e:6a:d3:9b:b3:0d:ab:
17:8f:34:1a:fe:f9:fd:86:9b:5f:52:a4:e1:14:86:
f7:d2:d7:22:4c:84:3e:06:74:f5:8f:75:ce:b6:a9:
1e:0d:0d:70:15:0f:ab:0a:3d:af:c3:3f:e2:af:8f:
44:a6:e0:a4:5a:42:4a:75:5f:c3:50:80:4e:d1:ae:
e4:61:43:76:8e:d9:ee:24:45:ea:87:c4:74:39:bf:
74:b1:df:50:ac:28:29:45:e6:83:66:64:f9:72:74:
05:76:8a:64:9c:31:d8:89:e6:43:ff:0c:2a:9e:59:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1D:DE:9B:11:C9:C8:87:CD:0A:2D:8B:88:6E:D8:85:2B:CF:3F:D7
X509v3 Authority Key Identifier:
keyid:5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d0:dd:6f:9d:d9:79:ef:4f:af:05:c2:ac:7d:30:2f:4e:b4:
db:75:c6:2d:dc:16:9f:bf:f9:54:26:b5:36:8c:24:a3:2e:7e:
08:29:4d:96:a0:23:79:ca:f0:88:b3:cb:a4:86:1d:14:a9:a2:
99:46:41:af:2d:02:86:ef:ff:ad:ae:68:80:6d:24:0a:39:b7:
c8:ca:7c:62:34:ed:dd:db:bf:25:27:dd:7e:e1:40:2c:27:4b:
2d:6f:88:f7:d4:66:50:11:36:80:99:f3:f7:db:03:88:ca:c0:
66:6b:58:f3:50:a9:57:bf:97:58:04:3e:8c:6f:49:fc:46:21:
4d:05:50:e8:0a:db:28:1a:49:32:29:a0:48:c0:47:e2:bd:09:
06:51:d2:ce:84:cd:8d:32:2f:0f:49:d5:5e:ae:08:e6:20:53:
78:2b:b3:02:c5:50:ba:29:c4:13:30:1c:ed:51:65:9a:7f:ab:
cb:48:23:2d:95:2e:43:67:d8:34:45:de:4e:71:b8:0e:a5:f0:
0e:a5:a7:42:3b:4e:92:16:47:9e:4a:d0:e6:66:f5:39:b0:18:
9a:99:c4:60:e5:b2:c1:5b:d3:30:fe:b9:39:bd:c7:fa:b9:37:
65:45:41:45:a3:41:0b:6a:5d:e4:ca:70:7f:a4:69:7e:63:90:
d9:b1:c1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:16 2025 by rpki-client