Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json)
Hash identifier: Y4HY+4XCJYHx/z3zilZ7z+eaGKHGm96LbFOOsZHVRcs=
Subject key identifier: B1:BA:58:D8:E1:45:A6:38:F0:03:28:6F:A7:38:B1:76:FB:61:E5:32
Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba
Certificate serial: 019A733812A2C63CF03CB64825F8A9BC03A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
Manifest number: 01D5
Signing time: Tue 11 Nov 2025 14:00:45 +0000
Manifest this update: Tue 11 Nov 2025 14:00:45 +0000
Manifest next update: Wed 12 Nov 2025 14:00:45 +0000
Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: wi4tpTK02ZRwv6O3QPlt63KfdrH6CUZeJhjiE2FvrnY=)
2: wNDSq8yZE9PBcRFzNVbL2mjY9tI.roa (hash: +CAo2P8QJyLpdrdtqSl+fQIj2IGhG8nr3/YTjB35bgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:12:a2:c6:3c:f0:3c:b6:48:25:f8:a9:bc:03:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba
Validity
Not Before: Nov 11 14:00:45 2025 GMT
Not After : Nov 12 14:00:45 2025 GMT
Subject: CN=b1ba58d8e145a638f003286fa738b176fb61e532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:d3:25:f7:20:da:b5:6f:63:b4:89:00:29:
d7:57:9f:83:3f:e8:fe:94:7b:5c:d2:f4:1c:3c:27:
75:83:dd:27:9b:a2:9f:fd:ac:29:50:ea:16:c5:39:
a9:3c:a5:09:28:00:50:3c:6e:5d:c4:cc:b8:c0:70:
bc:e0:74:d6:9a:23:f8:8d:1f:37:e6:59:82:02:d7:
32:1c:19:98:59:91:1b:17:96:35:78:6d:d6:5b:c4:
f1:07:06:32:f0:24:ee:ae:eb:cc:52:92:6e:3e:4a:
01:6b:af:c6:bc:95:23:d9:c9:8e:c0:2f:d1:7f:13:
80:c8:d9:80:ac:be:f0:f0:db:b9:79:c0:0a:f3:78:
5a:36:9c:cb:43:1c:03:1e:30:a5:e6:fd:3c:c1:fd:
de:0c:80:bb:9b:68:5e:66:5e:72:0b:04:c2:dd:43:
29:0b:73:51:f3:91:f2:f1:10:71:9e:c4:55:18:93:
4a:81:1d:47:19:35:30:c6:5f:81:32:71:40:32:7e:
f1:b2:62:99:e0:e2:23:b6:f9:6c:e0:a3:dc:6e:6b:
62:6c:95:1a:f8:f3:a8:cc:64:9e:bb:cd:a2:4b:67:
28:f3:c1:c4:4a:29:2f:4b:c3:8d:dc:cf:35:c6:bf:
02:ab:38:00:9b:b1:6d:f0:61:da:bd:d9:fe:e8:15:
c8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BA:58:D8:E1:45:A6:38:F0:03:28:6F:A7:38:B1:76:FB:61:E5:32
X509v3 Authority Key Identifier:
keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ad:a8:54:83:17:60:e0:da:45:5b:9c:3e:da:9e:48:16:32:
03:75:c5:16:80:66:90:1f:c9:85:f0:a3:2f:60:d1:27:2b:65:
e4:b0:0d:7c:7f:41:af:bd:aa:a6:62:ee:27:c8:d2:9b:88:60:
68:eb:cb:aa:97:51:23:da:ae:4e:32:1f:ae:ad:bb:bd:8d:bc:
47:50:39:86:37:e2:55:5e:fc:fa:11:6a:1e:a3:94:a1:33:ae:
67:67:33:98:a0:dc:fb:cd:2f:76:d3:00:6f:e2:c0:6d:51:90:
9a:a7:e0:1e:0c:92:3d:95:44:c5:48:42:ff:ef:68:ec:98:e4:
54:4d:38:71:4b:37:1f:82:95:26:05:0e:e3:9b:a0:8b:06:84:
2c:80:7e:5f:8c:c8:62:1e:4b:f1:e6:29:57:55:7d:f1:c6:ec:
df:20:ba:73:d1:46:56:41:1d:0f:da:b7:50:9f:b6:28:93:76:
fe:77:2d:2a:24:35:c2:e8:a7:38:fe:bb:35:7c:2e:07:88:6a:
3c:cd:f5:2a:d5:f7:7b:8f:28:58:d1:da:b2:8e:03:f2:27:03:
fa:fb:ba:1f:8a:8c:bd:cf:6b:e8:8c:14:7a:94:d6:8b:3a:4e:
6d:88:c4:47:74:45:2b:b1:3a:00:0f:4d:38:7b:22:b8:de:c3:
a9:3e:7f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:07 2025 by rpki-client