Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: fBjYR2KiqJgZycw95wKfuj1VZolrNnE9HWCHE+cAj6k=
Subject key identifier: 6F:E8:4A:8A:F9:22:D8:E2:A1:53:ED:D4:6B:32:62:A5:4C:54:F9:01
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 019A232E8412853AB6F1D5F76EB1786AAE7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 0804
Signing time: Mon 27 Oct 2025 01:00:42 +0000
Manifest this update: Mon 27 Oct 2025 01:00:42 +0000
Manifest next update: Tue 28 Oct 2025 01:00:42 +0000
Files and hashes: 1: 2symQxt9tiTp5JPRu9SVrhpHnoI.roa (hash: ETxwfWEk5Ji119X6QNRzmnwtDjfSz5qCO5WUq2I4qpI=)
2: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: ZwDSocgfjzPTZfdW+SVIDul/F8ym7HhWeHUJuKTQUgY=)
3: aiepDcInSC7XQM1NAo38Ltggcos.roa (hash: 6COc/WNOkQasZPkjRm4nKC/vd3bNAbojTsGDQ+J1+tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:84:12:85:3a:b6:f1:d5:f7:6e:b1:78:6a:ae:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Oct 27 01:00:42 2025 GMT
Not After : Oct 28 01:00:42 2025 GMT
Subject: CN=6fe84a8af922d8e2a153edd46b3262a54c54f901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:e6:e2:84:bb:17:40:d4:c6:3c:37:bb:66:
87:b6:32:a3:6a:17:26:67:2b:05:ec:f9:d8:4a:32:
52:27:af:c5:95:28:68:b6:c8:50:97:c7:ab:cf:85:
e0:0f:32:0c:cd:4b:c7:8d:82:4e:da:be:19:30:a2:
d1:0c:e3:ba:31:f0:56:23:01:f1:50:d1:c3:9c:cf:
79:52:e3:0d:db:4d:c5:0c:52:da:e0:6a:11:9a:b1:
04:ba:39:70:a9:70:14:bc:60:4b:0f:90:e6:6b:e8:
7b:c3:7a:84:f6:4e:b1:fb:a2:06:10:69:c8:ee:59:
06:9a:96:10:b0:d9:ab:ff:6a:ad:6b:53:00:54:e3:
2b:a3:ad:8a:b7:d9:4d:85:ed:d5:83:54:9a:0d:25:
57:d9:7a:fb:4e:8b:b5:18:5a:6a:9a:4c:32:f5:ac:
25:ee:98:d7:86:43:ee:18:e8:ba:f1:58:b4:61:7b:
90:c7:89:68:42:85:a6:ba:0a:3d:ff:49:d8:77:82:
fc:ae:0c:78:fb:f2:17:03:f3:50:5d:fb:59:3d:4f:
da:6b:98:f8:e6:f0:0a:0c:54:e5:fa:2e:04:d3:ef:
d1:4b:52:65:99:39:ef:55:19:be:1f:7d:1e:ca:1a:
b2:01:de:46:c4:16:5d:93:74:ab:ef:b9:79:df:66:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E8:4A:8A:F9:22:D8:E2:A1:53:ED:D4:6B:32:62:A5:4C:54:F9:01
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:38:b9:d9:6c:8f:d7:16:d0:e8:da:91:7e:9e:f3:83:b4:58:
30:90:97:87:16:bb:5f:d2:2a:d0:40:a6:b4:1d:dc:76:02:ec:
4e:6c:36:81:be:2f:9b:8e:72:35:9c:73:05:53:bb:31:bf:37:
ee:9d:e1:9a:11:08:cd:b2:3d:2c:eb:70:09:af:65:bd:9b:ad:
54:64:38:de:80:d1:8f:86:8f:67:cf:54:bd:26:a1:81:02:28:
97:ac:ea:32:91:aa:92:53:5e:0a:2e:a1:42:7a:3a:1d:c6:e7:
a6:b4:92:01:b2:63:ee:6c:d0:cc:50:30:77:eb:f3:f9:0e:c0:
b8:5b:d7:1b:ff:10:83:b4:49:c3:41:2e:9e:9b:e6:dc:46:07:
fd:52:c8:f1:09:36:72:9a:ae:b2:f0:d5:f7:fd:fc:ad:30:97:
78:2d:2b:e1:5d:ac:53:a8:23:e9:24:98:09:e1:ff:3c:c3:97:
85:f5:d3:74:67:86:8b:1a:78:44:ae:64:ca:c3:68:78:19:2b:
72:f0:e4:a3:98:64:97:31:f5:ca:40:3e:e4:6e:0f:a4:06:f0:
e6:db:79:ee:b3:a4:e4:27:66:c2:20:9a:1a:ce:da:73:38:6d:
81:70:6d:8a:ea:3b:d4:29:e6:cc:f6:e9:83:d7:3d:45:7d:2e:
88:12:08:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 08:40:49 2025 by rpki-client