Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
File: WpMlkBT1t2SEcHLDc07LUoByIY0.mft (raw, json)
Hash identifier: XCFKsObF8ivQYl0VqUXyaLv+DEu7RrqKssxJunanV70=
Subject key identifier: 5F:06:C5:EC:71:6D:DA:50:DA:B0:B1:F8:A1:DA:72:A9:B2:0D:43:91
Authority key identifier: 5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D
Certificate issuer: /CN=5a93259014f5b764847072c3734ecb528072218d
Certificate serial: 019A7301BAF69ED7FCFB3F3C04590E9E64DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 13:01:24 +0000
Manifest this update: Tue 11 Nov 2025 13:01:24 +0000
Manifest next update: Wed 12 Nov 2025 13:01:24 +0000
Files and hashes: 1: WpMlkBT1t2SEcHLDc07LUoByIY0.crl (hash: HuNIGuNcugax7gr4iLmeWONcHZ5iW0ZQF1TOQCrEMMo=)
2: xrn9wGcZNgBUBClFEOmA1ETirQc.roa (hash: pd4BjALDo2lB/niA3gPglIgN5zsXIWGcWxmGYdPS/DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:ba:f6:9e:d7:fc:fb:3f:3c:04:59:0e:9e:64:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a93259014f5b764847072c3734ecb528072218d
Validity
Not Before: Nov 11 13:01:24 2025 GMT
Not After : Nov 12 13:01:24 2025 GMT
Subject: CN=5f06c5ec716dda50dab0b1f8a1da72a9b20d4391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:29:72:79:d1:7e:50:5f:d3:fc:1b:f0:f8:
6f:71:1b:4f:64:a8:c4:06:1d:e4:86:d4:b9:0a:3a:
9a:24:76:55:ae:51:f6:fe:0d:04:38:dd:f1:c3:5d:
a4:a0:a9:70:7a:e5:f5:e8:92:73:ca:b4:6a:68:38:
ea:ad:5a:b9:87:62:f5:ed:d7:d6:bb:3a:78:67:44:
68:9b:6a:b4:9e:cf:fc:61:30:3e:ec:4b:d6:be:8a:
82:06:eb:c9:26:2e:a3:d8:71:24:4e:6c:72:ab:80:
62:64:7e:b2:78:dd:c3:b9:be:f2:0c:64:24:25:c6:
86:65:72:d0:ad:c2:70:cc:65:ca:d6:ef:15:7e:bc:
31:fb:be:2d:69:04:45:fd:1e:0d:e0:ca:6b:e2:ea:
81:71:87:db:d1:e5:46:c3:a8:a0:14:03:5a:fd:d5:
07:46:ef:bd:56:34:ee:e1:6e:14:49:75:51:49:7d:
a5:f8:f4:a5:aa:a9:14:75:aa:6e:e4:5e:32:15:bd:
2b:81:ed:b7:6c:d8:6d:e3:6e:21:e9:4b:38:61:82:
87:91:26:26:61:4d:2d:e6:5f:38:4e:90:73:38:d6:
41:b3:6e:46:66:ea:67:c0:ef:c8:ee:82:12:52:50:
3e:13:1f:18:3b:89:8c:9a:bc:c3:cb:b2:df:8b:84:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:06:C5:EC:71:6D:DA:50:DA:B0:B1:F8:A1:DA:72:A9:B2:0D:43:91
X509v3 Authority Key Identifier:
keyid:5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ba:65:f7:1e:ba:12:13:0f:f6:b9:6d:cc:fe:00:ca:30:af:
92:6a:3c:3c:5b:9d:26:80:2c:38:2c:5c:51:5b:08:e4:ac:3b:
63:b4:42:c9:2b:62:cc:0d:f8:84:cb:b5:f9:e0:2e:74:1c:92:
3b:7b:91:c6:af:bc:70:08:fc:5c:72:6d:af:84:32:c0:48:da:
22:5f:b4:e4:a3:07:e4:2a:41:54:43:55:ab:89:39:d3:96:d5:
fc:2c:31:b9:53:57:7f:3a:bf:af:88:74:7a:13:13:84:7c:69:
31:d7:84:9a:b8:b8:fe:d9:38:c2:96:6c:77:94:f8:3b:cc:7d:
de:cd:93:77:25:45:9b:e3:78:84:96:e5:5e:28:38:73:c9:af:
61:7c:d1:cd:13:d6:f3:2f:04:a8:b9:75:03:60:99:04:0b:f1:
52:fc:3c:87:04:a8:51:35:89:2a:a6:fa:c1:25:64:70:49:21:
68:f5:5c:b3:e2:07:59:59:f6:9a:8b:eb:dd:e9:4e:98:7e:12:
dc:d1:d3:35:45:8e:89:31:d9:89:16:04:32:e5:d7:2f:04:ba:
6f:d8:19:7d:85:6b:d8:bc:c6:c3:60:44:33:d3:67:e3:b3:f9:
b7:3f:26:4a:9c:1a:d0:c2:d4:5a:43:70:97:69:99:66:5a:66:
93:57:6b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:54 2025 by rpki-client