Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
File: WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json)
Hash identifier: 10a1SHf9GW8qUY+lOu9e/nUVWf0GhbC1DbVKDhW9MFo=
Subject key identifier: 2A:92:E3:49:C0:3C:A7:8B:B2:BD:26:42:7C:C5:6F:3D:4E:5C:D7:8D
Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
Certificate issuer: /CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Certificate serial: 019A183D2D45F2FA19E239FA7DCC548C073D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
Manifest number: 02F3
Signing time: Fri 24 Oct 2025 22:00:53 +0000
Manifest this update: Fri 24 Oct 2025 22:00:53 +0000
Manifest next update: Sat 25 Oct 2025 22:00:53 +0000
Files and hashes: 1: MzdQsDB1AACOG2EyiBlrqIPuVdY.roa (hash: nb+ptkiMxODpHnRgVbj2TaDnZ7JIdyQXT5CZFak+Qnc=)
2: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: PZ3qzUyCo8+mgXl5lhGR956ZcBUoB61gEgSLiaCAIWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:3d:2d:45:f2:fa:19:e2:39:fa:7d:cc:54:8c:07:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Validity
Not Before: Oct 24 22:00:53 2025 GMT
Not After : Oct 25 22:00:53 2025 GMT
Subject: CN=2a92e349c03ca78bb2bd26427cc56f3d4e5cd78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:12:53:87:ae:61:42:3c:10:5b:47:9f:2a:
d7:8c:c9:00:90:fa:83:f7:35:28:dc:0a:18:6e:23:
bd:c3:8d:b7:ce:4b:f1:fe:e3:22:94:01:3b:7b:91:
1c:f1:86:09:0d:68:08:b6:c3:13:65:a2:86:57:21:
eb:f2:7f:e1:d9:95:9e:e7:7e:ec:71:2e:1d:a9:f2:
22:c2:b4:84:0c:ed:59:01:88:ca:4e:a4:9d:3b:85:
3a:ad:d4:2e:0a:ae:22:80:a7:ef:55:33:cb:29:1a:
ad:9a:4c:f6:39:29:1d:3a:bc:dd:5c:b2:4e:e5:f7:
ea:9a:31:56:1a:ff:dc:a7:70:7a:b5:d4:29:af:ab:
55:de:d5:23:1d:4c:c4:51:19:02:e1:ba:0d:d7:80:
f3:64:3b:ae:5c:74:5a:4f:02:59:e3:ab:40:42:c8:
a4:a7:51:0c:c4:50:bd:57:7c:ef:66:bc:cd:a9:ae:
b3:7a:20:98:a2:f4:39:9b:7b:1d:8d:02:5f:28:28:
87:08:5e:35:98:2c:e6:24:39:e2:ee:09:c3:d4:de:
32:d9:81:27:3b:b3:5a:8d:70:7e:aa:17:af:2f:b9:
5a:fe:d6:9a:dc:63:a9:85:b8:f7:63:70:49:58:90:
2b:db:42:31:4c:aa:4e:d2:6a:9b:41:a0:69:63:05:
bb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:92:E3:49:C0:3C:A7:8B:B2:BD:26:42:7C:C5:6F:3D:4E:5C:D7:8D
X509v3 Authority Key Identifier:
keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:09:dd:9b:85:6a:71:22:96:48:cb:c7:27:55:c3:b4:75:3c:
0c:be:cd:fe:23:51:9b:ad:10:70:93:62:3b:91:00:f9:7e:bb:
21:3b:98:22:af:1b:9c:93:58:38:c9:72:bc:c9:24:bc:02:e6:
22:89:47:d4:80:23:d8:26:d1:45:92:6e:87:2e:f4:4c:67:cb:
87:47:15:76:45:c9:06:0f:b9:00:e2:53:68:9c:29:2f:f3:d9:
05:0e:42:a9:1c:af:a3:55:be:b4:b5:23:48:19:bd:b7:71:92:
ce:54:64:5b:44:a2:47:a9:a5:f6:34:0a:22:15:a8:7a:0e:af:
f2:48:d7:4e:f5:8a:80:97:e8:26:38:ee:64:ab:ce:ef:fb:57:
58:5f:08:d5:27:a4:e9:df:b4:4e:31:cc:c0:c0:33:9c:77:e9:
65:89:ac:c1:0a:ab:0a:84:14:ee:24:84:97:9c:b5:b4:04:93:
e2:4c:9f:5d:87:e4:91:08:9c:7b:98:e2:e8:8a:34:54:05:b5:
93:95:a1:28:fe:43:7a:b3:97:8c:b6:9d:ae:57:16:8a:2b:c8:
a1:92:62:c3:ec:b7:92:1c:85:17:ac:6f:12:c6:a8:1e:02:32:
fb:be:18:21:62:0b:03:5b:10:ab:1a:86:46:45:78:ad:98:e9:
89:d0:7b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:14:41 2025 by rpki-client