Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft
File: WP3E4ivstTWhxX9LjcRBtTMWd-M.mft (raw, json)
Hash identifier: A+rZLZR5MN+H1lcdlWG8617H8iEJO04cH8deflDxwH4=
Subject key identifier: 41:1F:7A:55:AF:D7:22:15:5D:22:BD:52:EE:5F:D8:36:D0:43:03:77
Authority key identifier: 58:FD:C4:E2:2B:EC:B5:35:A1:C5:7F:4B:8D:C4:41:B5:33:16:77:E3
Certificate issuer: /CN=58fdc4e22becb535a1c57f4b8dc441b5331677e3
Certificate serial: 019A70A56DDDC6322246B8FBA22864FD1EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft
Manifest number: 1461
Signing time: Tue 11 Nov 2025 02:01:21 +0000
Manifest this update: Tue 11 Nov 2025 02:01:21 +0000
Manifest next update: Wed 12 Nov 2025 02:01:21 +0000
Files and hashes: 1: WP3E4ivstTWhxX9LjcRBtTMWd-M.crl (hash: pc+YNEJI3JO5QCmhHGhAWpYxR9FCKUjzWaIpoUDl2v8=)
2: taQy9HpaIR-B5wNPU72M0d1f0co.roa (hash: GppUCw9ptPGs5O818rWaJoPW+Ulu8uS+JiuUV5bM6v4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:6d:dd:c6:32:22:46:b8:fb:a2:28:64:fd:1e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58fdc4e22becb535a1c57f4b8dc441b5331677e3
Validity
Not Before: Nov 11 02:01:21 2025 GMT
Not After : Nov 12 02:01:21 2025 GMT
Subject: CN=411f7a55afd722155d22bd52ee5fd836d0430377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:67:58:67:bf:05:fb:c3:bf:30:80:1b:c0:0f:
fa:71:79:b3:d2:17:2b:bf:28:d9:bd:90:2c:c8:87:
9e:8c:bb:5b:04:76:a5:9a:d8:f7:20:0f:f3:01:c9:
f5:fb:d6:a8:67:99:81:56:48:2e:6d:73:01:0c:71:
04:28:e1:a1:47:55:1b:94:0b:4a:f4:59:54:ff:d7:
00:d4:88:39:07:57:a3:e7:62:62:5e:b7:6c:83:03:
21:70:f2:b7:45:ce:b3:8c:05:b6:c9:46:65:39:7c:
10:67:21:14:aa:ba:0b:6b:c1:7d:8f:9f:17:c9:1a:
95:44:83:73:31:9c:6b:82:85:e7:d8:6a:8b:c3:e8:
a4:d8:72:ef:7f:a5:3f:46:d7:f0:99:3b:9d:29:2d:
67:73:f2:51:0d:c4:07:38:e0:8c:03:b5:1a:a6:2a:
4e:bb:33:62:e9:d8:e7:52:77:2b:d0:c0:a8:7d:c8:
be:93:9f:38:54:67:fe:b0:20:00:a0:6d:2d:4a:14:
b5:16:9b:70:d6:e7:97:43:47:5e:38:84:59:88:29:
d5:52:a8:ff:f7:70:b6:07:09:68:23:2f:d0:b3:fd:
30:42:b5:a8:35:69:8b:02:2e:22:ac:44:44:9b:4d:
6f:c5:58:6b:de:9e:68:13:5b:98:ef:3a:1f:56:3e:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1F:7A:55:AF:D7:22:15:5D:22:BD:52:EE:5F:D8:36:D0:43:03:77
X509v3 Authority Key Identifier:
keyid:58:FD:C4:E2:2B:EC:B5:35:A1:C5:7F:4B:8D:C4:41:B5:33:16:77:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0b:f5:95:c4:b3:60:40:c5:79:fb:e0:70:15:ce:2d:4d:cd:
df:4d:82:5b:59:62:36:93:87:27:37:43:fb:57:85:b2:40:42:
fe:1e:d5:71:ba:78:e0:4b:ca:23:ce:21:80:f1:c8:65:89:89:
9c:3c:8f:f3:09:80:ba:32:97:bf:3d:12:b8:61:6d:f1:d6:bb:
51:ec:92:41:08:9c:db:bf:3d:7d:40:90:c9:7b:8e:8c:5b:8c:
44:15:42:dc:63:2c:7f:f5:f0:28:6a:76:59:72:aa:4e:52:5b:
bd:1d:9e:68:e0:9c:90:13:5c:db:1d:a2:fc:5a:ce:c5:43:27:
f5:35:18:9e:1f:a5:ef:4a:8b:de:6a:a7:b5:7c:29:fe:3d:cb:
12:5a:77:ac:8a:9d:6f:03:a8:69:25:26:67:e8:56:c1:4c:c2:
64:53:31:43:85:a7:de:0b:3d:bf:cd:d0:f3:ad:18:b3:fa:5d:
68:d0:39:7c:c1:3e:b4:01:d8:a5:92:02:0a:24:11:39:6a:1d:
01:60:1a:b1:b5:85:f8:f6:6b:63:24:47:76:a8:bc:07:2a:6d:
a1:3a:0d:5d:11:47:b4:99:40:f3:16:7c:e6:83:b5:4a:9c:08:
dc:d2:ef:3a:84:6b:d3:30:87:94:97:d9:8c:f0:1f:b3:a3:5f:
ee:fb:cb:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpW3dxjIiRrj7oihk/R7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZmRjNGUyMmJlY2I1MzVhMWM1N2Y0YjhkYzQ0MWI1MzMx
Njc3ZTMwHhcNMjUxMTExMDIwMTIxWhcNMjUxMTEyMDIwMTIxWjAzMTEwLwYDVQQD
Eyg0MTFmN2E1NWFmZDcyMjE1NWQyMmJkNTJlZTVmZDgzNmQwNDMwMzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WdYZ78F+8O/MIAbwA/6cXmz0hcr
vyjZvZAsyIeejLtbBHalmtj3IA/zAcn1+9aoZ5mBVkgubXMBDHEEKOGhR1UblAtK
9FlU/9cA1Ig5B1ej52JiXrdsgwMhcPK3Rc6zjAW2yUZlOXwQZyEUqroLa8F9j58X
yRqVRINzMZxrgoXn2GqLw+ik2HLvf6U/RtfwmTudKS1nc/JRDcQHOOCMA7UapipO
uzNi6djnUncr0MCofci+k584VGf+sCAAoG0tShS1Fptw1ueXQ0deOIRZiCnVUqj/
93C2BwloIy/Qs/0wQrWoNWmLAi4irEREm01vxVhr3p5oE1uY7zofVj53NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEfelWv1yIVXSK9Uu5f2DbQQwN3MB8GA1UdIwQY
MBaAFFj9xOIr7LU1ocV/S43EQbUzFnfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1AzRTRpdnN0VFdoeFg5TGpjUkJ0VE1XZC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lZjA2MGMtYzcyNi00Yjk5LTgzNjAt
YjUzZjI3MTMwZDc4LzEvV1AzRTRpdnN0VFdoeFg5TGpjUkJ0VE1XZC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lZjA2MGMtYzcyNi00Yjk5LTgzNjAtYjUzZjI3MTMwZDc4
LzEvV1AzRTRpdnN0VFdoeFg5TGpjUkJ0VE1XZC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQv1lcSz
YEDFefvgcBXOLU3N302CW1liNpOHJzdD+1eFskBC/h7Vcbp44EvKI84hgPHIZYmJ
nDyP8wmAujKXvz0SuGFt8da7UeySQQic2789fUCQyXuOjFuMRBVC3GMsf/XwKGp2
WXKqTlJbvR2eaOCckBNc2x2i/FrOxUMn9TUYnh+l70qL3mqntXwp/j3LElp3rIqd
bwOoaSUmZ+hWwUzCZFMxQ4Wn3gs9v83Q860Ys/pdaNA5fME+tAHYpZICCiQROWod
AWAasbWF+PZrYyRHdqi8ByptoToNXRFHtJlA8xZ85oO1SpwI3NLvOoRr0zCHlJfZ
jPAfs6Nf7vvL2A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:55 2025 by rpki-client