
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
File: WpMlkBT1t2SEcHLDc07LUoByIY0.mft (raw, json)
Hash identifier: hPKr3334pUw+Y9YjsLtirm6FojEcj0YbtVTFXhIsfcI=
Subject key identifier: EA:5F:52:C3:07:71:1C:D6:E4:AF:29:D3:FE:45:82:63:5A:7F:E5:E8
Authority key identifier: 5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D
Certificate issuer: /CN=5a93259014f5b764847072c3734ecb528072218d
Certificate serial: 019922FA3355DDF00C4BFDB4DE7D4AAFE499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 07:00:46 +0000
Manifest this update: Sun 07 Sep 2025 07:00:46 +0000
Manifest next update: Mon 08 Sep 2025 07:00:46 +0000
Files and hashes: 1: WpMlkBT1t2SEcHLDc07LUoByIY0.crl (hash: jaKLeBHw/5OVUwzeY6TPYcWw4kBVnZxjWfbTrcJmodA=)
2: xrn9wGcZNgBUBClFEOmA1ETirQc.roa (hash: pd4BjALDo2lB/niA3gPglIgN5zsXIWGcWxmGYdPS/DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:33:55:dd:f0:0c:4b:fd:b4:de:7d:4a:af:e4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a93259014f5b764847072c3734ecb528072218d
Validity
Not Before: Sep 7 07:00:46 2025 GMT
Not After : Sep 8 07:00:46 2025 GMT
Subject: CN=ea5f52c307711cd6e4af29d3fe4582635a7fe5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:9e:97:02:3d:22:83:2b:1e:7c:e6:03:fc:
1c:8b:53:4d:ad:f7:eb:a7:13:4b:1e:ad:20:a3:81:
ba:7b:7e:51:8c:ee:44:8d:e2:69:df:60:39:91:70:
d5:f8:69:f8:d0:5f:50:72:6d:ac:77:5c:ad:d6:f5:
44:b7:7b:2a:09:c4:00:a2:7a:07:8b:27:57:90:9d:
7f:06:17:c9:df:62:c3:f1:3a:24:4b:6b:8b:aa:66:
6b:99:5e:18:b4:9e:99:79:db:55:19:06:a3:8a:39:
d8:f8:71:02:22:1c:5b:ec:20:db:33:bd:62:c0:f9:
11:0d:fb:ee:06:52:aa:c1:39:ff:0b:8b:f8:f4:71:
dd:8a:ec:8b:a4:d9:d6:2a:23:c6:c1:33:c1:0a:c0:
21:8c:18:28:34:5f:2d:25:83:9f:a5:2c:45:9f:78:
a3:46:ca:8d:5d:7f:47:6f:02:22:79:cd:06:8e:1f:
75:d0:bc:f4:d5:7a:ae:88:89:93:a6:6c:d8:66:c9:
6e:8b:77:82:bf:70:bd:f5:4d:be:fc:8a:41:db:61:
48:b3:a0:f8:d4:93:bd:46:c9:26:bd:e3:76:11:40:
37:40:ae:2c:03:e9:46:c0:0b:0e:ae:50:95:d3:61:
9e:75:64:59:44:ee:27:17:fd:c4:44:5d:1b:6c:5d:
80:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5F:52:C3:07:71:1C:D6:E4:AF:29:D3:FE:45:82:63:5A:7F:E5:E8
X509v3 Authority Key Identifier:
keyid:5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4c:e0:57:b1:38:58:21:55:fc:19:74:af:00:fc:bf:1f:f7:
8c:ae:db:c4:ca:45:d8:4f:92:99:31:5a:2e:37:0b:4d:83:75:
62:1d:ce:3f:e7:e7:c2:d3:78:9b:8d:18:8b:2c:55:70:85:0d:
e7:fc:a7:12:45:f2:b5:5f:77:39:ea:39:f6:7b:fe:e6:6f:6c:
33:d2:03:71:40:27:24:ee:7c:b3:a8:e1:70:0e:4a:66:ea:15:
c1:f6:89:85:c6:9e:2e:13:d0:b0:bc:b2:6e:66:31:17:4d:c4:
65:39:4b:6f:71:6a:db:95:eb:e6:2f:1b:08:bd:f9:a2:65:07:
7d:ea:55:2a:94:04:01:40:b4:8a:4f:ad:86:5c:c9:68:2d:ae:
6c:54:b4:95:00:8c:87:8d:96:29:c3:dd:23:6b:ed:32:b6:99:
3e:fe:b5:72:04:23:b5:b4:0f:7a:e3:a8:6e:14:61:ac:84:97:
d9:75:ad:20:27:66:b2:4d:d2:c7:7d:4c:14:86:c2:24:45:6f:
2f:be:45:df:4c:c9:f5:08:a0:2c:50:5f:f4:0b:b3:d7:71:a4:
e4:48:f2:d6:ab:34:db:98:34:23:37:3f:48:a4:c7:5c:16:dc:
ea:fa:07:ca:66:5e:3f:af:63:a3:ba:34:5a:ed:64:c0:be:71:
63:05:2d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:02 2025 by rpki-client