Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
File: WN0QF8U0V6ipIUGWh73oqLjrVhE.mft (raw, json)
Hash identifier: xrXFTGN6S3B+G2TrJsg9BHw3IidJbCDNgp9GbFMd4Hg=
Subject key identifier: 17:AF:B7:A8:5D:4C:83:FB:FC:0E:7B:A6:DB:D6:92:07:38:64:3A:D7
Authority key identifier: 58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11
Certificate issuer: /CN=58dd1017c53457a8a921419687bde8a8b8eb5611
Certificate serial: 019A71EE9420CDAECEC42A1800E24E225F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
Manifest number: 0DC2
Signing time: Tue 11 Nov 2025 08:00:52 +0000
Manifest this update: Tue 11 Nov 2025 08:00:52 +0000
Manifest next update: Wed 12 Nov 2025 08:00:52 +0000
Files and hashes: 1: WN0QF8U0V6ipIUGWh73oqLjrVhE.crl (hash: HieB2cHycU48vjoP4n9dy1JPtdqy5UBe4qc81rDoK3I=)
2: jywZ9UYkMiz97kwCY4FM3q95-aY.roa (hash: u66se+BAVSb1YHlBvMoU6Y/uC6cRzOafh9TsvAog2jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:94:20:cd:ae:ce:c4:2a:18:00:e2:4e:22:5f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dd1017c53457a8a921419687bde8a8b8eb5611
Validity
Not Before: Nov 11 08:00:52 2025 GMT
Not After : Nov 12 08:00:52 2025 GMT
Subject: CN=17afb7a85d4c83fbfc0e7ba6dbd6920738643ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:ee:f3:e4:d9:60:62:aa:37:7d:df:9f:94:
3e:d4:70:5b:44:94:5b:17:11:97:0f:46:c0:ac:3a:
63:8d:1e:ec:34:28:24:33:da:15:ab:1e:46:9a:03:
5a:1b:11:9a:6a:21:1b:bd:72:04:a9:a9:6e:d7:d9:
7f:fc:03:8f:f0:24:f0:4d:41:6d:47:91:05:32:81:
62:80:30:66:f4:e4:e2:cf:ea:4b:57:6d:8e:5a:1b:
01:94:37:e3:cf:ff:75:91:29:38:23:2f:ec:57:cc:
80:db:eb:8e:5f:d8:f1:63:fd:1d:ce:a0:ae:1c:a2:
df:08:f3:67:bd:81:48:44:52:c1:54:5f:11:71:0d:
80:27:47:df:f3:29:19:49:8e:2e:01:26:e1:fa:8b:
92:f7:1d:55:d8:d9:79:a6:e5:fb:8a:9d:31:75:7a:
0a:fa:4e:18:c5:52:c7:d6:11:a2:c2:9b:65:1f:de:
01:39:13:5b:96:8c:19:f2:1e:8f:49:b8:11:57:e1:
2e:14:ef:48:f4:d0:8e:f6:77:74:0b:86:57:3d:6f:
eb:14:00:b7:9b:c4:de:03:05:42:df:43:ef:d3:8c:
9e:5d:22:8b:23:13:47:05:60:90:c3:8a:5c:2e:34:
9b:79:ab:f0:fa:42:8b:f4:ca:f9:cb:aa:2a:a6:06:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AF:B7:A8:5D:4C:83:FB:FC:0E:7B:A6:DB:D6:92:07:38:64:3A:D7
X509v3 Authority Key Identifier:
keyid:58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:dc:e9:a9:62:aa:f5:4f:75:ad:fe:7f:41:38:32:23:f8:95:
59:6b:82:9a:84:e7:78:78:96:9a:8e:8a:50:89:7d:7f:09:1c:
2e:83:c0:49:27:7e:e7:3a:b5:d2:0a:cf:33:b1:3e:59:fd:5a:
4b:c9:2d:88:ea:37:8a:3f:29:96:35:79:6e:52:b3:57:51:70:
33:86:48:ae:63:b0:30:cc:3a:d6:1b:91:df:4c:c2:f6:76:84:
b5:2a:d5:c0:c6:4b:05:de:93:6c:ca:cf:e7:02:8a:3d:97:1f:
25:06:82:50:39:41:fa:9d:32:d3:fa:10:a9:18:f3:92:5f:fa:
28:23:77:2d:1c:fe:53:0d:2c:c3:fa:06:c6:41:1e:83:94:8b:
c8:30:83:2e:9f:ba:12:d2:09:81:ae:57:ce:2f:de:3f:57:f0:
f4:55:4e:09:10:87:e0:2e:90:bc:a3:a1:10:4b:c2:7a:69:0b:
f8:7e:79:e9:80:0e:01:6a:60:dc:7d:d6:8e:42:31:1b:43:3e:
4e:30:82:f3:76:02:eb:be:5a:3e:7b:d7:7e:d7:c4:de:a7:12:
dc:78:71:d9:b4:dc:89:63:a9:01:eb:35:cb:d3:32:84:f4:38:
07:79:13:bc:df:43:7c:7c:07:46:a4:16:2a:6f:e9:de:db:23:
32:0b:21:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:00 2025 by rpki-client