Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
File: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft (raw, json)
Hash identifier: c5c+0dkrMfyiO0MWfevcAS4lpVSc0uWqgPnQiAWbU7U=
Subject key identifier: 44:0D:20:54:05:67:6D:D6:55:75:32:35:65:DA:CE:86:4E:A1:18:41
Authority key identifier: 58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
Certificate issuer: /CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Certificate serial: 019A73A6458BE4C765F386E11E71017F0891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
Manifest number: 03B9
Signing time: Tue 11 Nov 2025 16:01:07 +0000
Manifest this update: Tue 11 Nov 2025 16:01:07 +0000
Manifest next update: Wed 12 Nov 2025 16:01:07 +0000
Files and hashes: 1: CqZAFiIzp-k21bzGsuj1395ZHTc.roa (hash: gXssHvpvQonpjegaCBTMeVVsQnPbWqrgEQgoKWzts44=)
2: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl (hash: M6IP6SeXD1xg55plNN7obONPY7oicYOdjrAFuG1cIr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:45:8b:e4:c7:65:f3:86:e1:1e:71:01:7f:08:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Validity
Not Before: Nov 11 16:01:07 2025 GMT
Not After : Nov 12 16:01:07 2025 GMT
Subject: CN=440d205405676dd65575323565dace864ea11841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:6c:61:a0:64:94:66:aa:14:c5:a4:86:0a:
4b:0c:14:3f:e6:c6:b8:e1:6e:ff:f7:d2:3d:48:d8:
aa:94:47:74:5a:4f:29:48:8b:58:8d:68:43:fe:7c:
89:0e:f1:78:d0:24:58:a4:9f:12:d0:ec:53:78:a6:
51:72:49:28:45:69:92:b1:fa:4e:06:cb:3d:25:89:
37:01:5b:d9:b0:71:d9:dd:71:93:af:2c:2a:ac:82:
19:eb:44:18:60:a2:d7:07:bc:e7:05:0e:b7:89:95:
07:17:df:ce:02:df:2f:ee:00:9c:74:63:9e:28:b8:
78:21:c8:42:40:8a:d1:1b:6f:1e:14:1c:e0:a9:68:
da:31:de:7d:6c:d8:12:b9:2b:aa:db:8d:30:cc:c0:
d0:bd:fc:f9:6e:64:2d:14:86:d1:5c:8c:ab:28:4e:
b1:7d:62:dd:28:71:4c:66:0c:27:e7:3c:00:55:34:
d0:06:05:75:6e:20:d3:86:49:97:f2:11:17:f9:2b:
8a:db:68:6e:10:34:13:a4:31:bb:c7:ae:26:81:07:
b4:14:56:bd:5c:d8:21:86:f4:5b:55:68:da:a8:ba:
6c:ca:b4:c9:8e:4d:02:7c:c7:9d:21:dc:cd:aa:58:
d9:6b:43:31:f6:1a:59:c2:08:f9:68:b7:15:b6:37:
43:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0D:20:54:05:67:6D:D6:55:75:32:35:65:DA:CE:86:4E:A1:18:41
X509v3 Authority Key Identifier:
keyid:58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c0:22:f6:6e:f8:30:30:ea:7a:ee:f8:cb:6c:55:46:51:93:
e3:0c:6a:26:ea:fb:2e:9d:14:2f:8f:2f:b4:d5:3d:a3:d0:c6:
d1:2e:3a:fe:32:e4:b5:0b:34:33:cb:27:fc:2a:43:9d:5f:55:
da:f6:b3:26:46:a2:03:52:88:0e:93:fa:57:cb:ef:ef:73:53:
50:6c:c6:4c:14:5a:3c:2c:fd:3d:a5:a3:28:0a:90:c0:b9:57:
36:f8:cc:ac:40:b8:e0:17:c6:4f:0e:75:41:99:3a:f0:61:8e:
80:ed:81:c0:85:33:54:c3:63:19:02:c2:98:c8:a9:7d:34:e4:
5d:7e:c4:79:25:15:54:48:cb:00:cd:89:11:50:44:57:04:26:
42:be:4f:b9:43:f8:48:25:76:0e:e6:6e:88:20:e2:c1:8c:20:
fd:26:46:b0:4f:0d:30:0b:d9:48:0e:b5:c6:09:22:93:23:5c:
65:04:bf:97:e3:83:49:af:7d:a7:0d:29:d8:ac:26:d2:9d:a6:
2b:1a:5a:78:11:97:d8:8a:82:25:8a:46:a1:39:87:34:57:46:
88:1b:b1:54:23:03:98:fd:ca:c8:35:7e:53:85:e4:36:03:29:
60:af:8f:6a:7c:79:5b:e9:f8:3b:30:f9:b4:9d:90:67:f2:e9:
64:7b:5f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:34:20 2025 by rpki-client