Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
File: WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft (raw, json)
Hash identifier: PSl73k78udWIPG7qbiRGuOnilS86mcKZ6n7Cu1LJ1Uc=
Subject key identifier: DD:3F:7D:9D:8C:C2:1F:20:14:BE:96:34:25:50:D6:90:39:91:B4:94
Authority key identifier: 59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5
Certificate issuer: /CN=59641c0574f49a52512e6dd033b77bbf912cedc5
Certificate serial: 019A725CE1D402136E9FDC8F2005BD49F3AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
Manifest number: 06D9
Signing time: Tue 11 Nov 2025 10:01:20 +0000
Manifest this update: Tue 11 Nov 2025 10:01:20 +0000
Manifest next update: Wed 12 Nov 2025 10:01:20 +0000
Files and hashes: 1: WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl (hash: fvVs08kkdQgZfZF/mGVd+NNGSauScOvkTjosRWmwg4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e1:d4:02:13:6e:9f:dc:8f:20:05:bd:49:f3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59641c0574f49a52512e6dd033b77bbf912cedc5
Validity
Not Before: Nov 11 10:01:20 2025 GMT
Not After : Nov 12 10:01:20 2025 GMT
Subject: CN=dd3f7d9d8cc21f2014be96342550d6903991b494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0a:5c:85:18:16:09:8b:e0:e1:d9:c3:23:31:
87:19:ab:c0:73:73:88:ba:08:a6:99:8e:23:8f:3b:
ec:f1:8f:02:7c:a7:45:21:cc:38:fe:f9:20:36:53:
13:68:64:75:14:ff:f1:90:b6:9c:1f:79:c7:b3:3f:
86:bf:00:a0:b7:93:06:b5:b7:67:af:21:76:61:8e:
ad:bf:ae:c8:04:42:66:ea:f4:56:a9:03:aa:c3:2e:
59:0d:98:5e:27:69:43:2c:e2:c2:c2:e8:eb:e0:c2:
3e:c2:04:53:25:97:f5:bd:1b:ba:1f:68:e9:5d:3a:
a4:64:d8:fc:e1:1a:bc:e9:fe:10:07:e6:8e:a0:bb:
be:74:17:09:00:02:d9:f7:71:5d:5c:c8:66:73:c0:
e7:31:e3:b8:37:d5:38:fa:66:ec:83:2d:bb:d1:81:
39:37:d8:1d:ad:fe:e2:d0:ca:a9:03:5a:bf:74:73:
30:87:2c:17:f7:4b:f1:c7:2a:6c:65:4c:61:0b:3b:
80:49:7b:f7:87:d2:7b:6a:06:5d:53:49:3b:6b:f3:
6a:ba:40:ee:22:4c:b5:4a:c8:5a:aa:2a:5f:cd:34:
4a:12:42:9f:0c:2e:ab:d3:09:15:87:b4:8f:68:63:
3b:97:00:b5:20:4a:8d:99:2c:31:38:77:ab:8a:06:
6c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3F:7D:9D:8C:C2:1F:20:14:BE:96:34:25:50:D6:90:39:91:B4:94
X509v3 Authority Key Identifier:
keyid:59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:69:ab:44:21:03:ee:8d:ae:dc:e7:af:94:0b:2a:20:d9:10:
9c:09:72:74:fd:15:05:0d:44:56:a1:a1:87:e6:fb:b1:01:7d:
5a:f8:1d:0a:2e:b4:c0:3b:b0:16:51:d8:bb:0e:fd:f8:e5:64:
c0:33:eb:6e:5d:86:d6:35:ab:3f:f7:4b:e9:42:1f:1f:9b:6c:
45:c0:c1:2c:f8:52:9b:c5:35:2b:1c:7f:8d:1a:84:7e:17:b8:
49:da:79:ba:ac:62:84:c0:02:e1:9d:02:64:29:4b:83:4c:c1:
50:d0:2c:b2:73:85:6d:5e:4b:41:a8:80:69:b3:76:fb:9d:b5:
6e:6d:45:5f:64:4c:01:06:2f:a8:02:2f:b5:78:16:c0:62:79:
26:0c:46:69:d1:f5:f6:b9:8a:6e:b2:c8:f5:03:79:d5:7d:98:
b9:e6:61:2c:20:d1:bd:e9:8f:1e:11:80:73:bb:4f:65:87:04:
51:12:50:29:f9:9f:4d:24:4e:51:f1:16:58:e5:5c:b8:9d:1e:
45:0c:f3:b3:68:52:b5:f6:54:7a:9c:18:e0:a5:55:d6:14:1d:
38:24:5b:7e:f7:38:1c:41:08:00:a3:59:2c:cc:1d:30:4f:b6:
39:bb:5e:0b:e2:3f:f5:31:7d:6b:f1:52:b4:b9:55:46:0d:bd:
20:60:3e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:39 2025 by rpki-client