Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
File: Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft (raw, json)
Hash identifier: xqXCznHfGfQhhXPTweoyOX5IacbtI3l5rXMqtnh/cj4=
Subject key identifier: 04:E7:81:5B:52:45:0F:92:68:A2:71:D6:5C:87:71:44:C8:2F:37:39
Authority key identifier: 5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
Certificate issuer: /CN=5a3b1dddab33e45506ad977040924720417d5688
Certificate serial: 019A7112BCCFEC3354DB7A1EA24B27DB9E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
Manifest number: 0C67
Signing time: Tue 11 Nov 2025 04:00:44 +0000
Manifest this update: Tue 11 Nov 2025 04:00:44 +0000
Manifest next update: Wed 12 Nov 2025 04:00:44 +0000
Files and hashes: 1: Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl (hash: 9ecKfDhxPA2k03HWCsllvbMI/yJD6D3b6O+dSMhnZD8=)
2: y0QD6cVeHITeOOUrewdmduPjNyw.roa (hash: d578B+uX2xF03DWPlSDJU4G4ivlMPauq0XylCe7obdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:bc:cf:ec:33:54:db:7a:1e:a2:4b:27:db:9e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a3b1dddab33e45506ad977040924720417d5688
Validity
Not Before: Nov 11 04:00:44 2025 GMT
Not After : Nov 12 04:00:44 2025 GMT
Subject: CN=04e7815b52450f9268a271d65c877144c82f3739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:32:d0:db:43:13:22:22:b2:74:92:a2:a1:ea:
78:3e:cd:33:22:d7:0a:77:a4:66:74:9d:a8:34:f7:
95:83:eb:48:64:39:af:ff:0d:f3:79:68:99:9b:5a:
75:f9:7e:14:c5:03:3e:3d:cc:dd:9c:74:03:13:5f:
09:9c:d9:cf:f4:6c:fe:34:b7:4a:79:3d:ea:32:0c:
49:3d:e6:24:d5:5d:18:8a:36:d1:26:57:c5:36:dc:
f4:82:d2:40:fa:cc:ba:e7:7e:0a:b4:04:56:2c:3b:
6c:60:ee:66:c9:a8:36:09:e0:57:50:00:31:88:00:
d6:0b:aa:73:1f:50:cd:65:70:4e:86:bc:50:d6:e5:
7b:ad:79:57:f5:a4:3a:47:af:de:05:3b:90:66:16:
a3:cc:5f:a7:d7:d1:1c:ef:01:cd:44:05:d2:4a:5c:
4f:ed:0b:20:c3:b6:78:56:87:a2:c9:99:0e:34:cb:
d0:2d:ee:b9:70:a3:11:30:bf:64:4e:f5:03:f4:d5:
de:40:5e:61:20:88:63:0e:f4:e9:74:68:4c:d2:55:
05:17:e5:a4:fe:6b:50:c5:45:76:10:05:e6:81:38:
37:f8:dc:b8:a4:3f:b5:b1:49:d1:ff:76:cd:97:07:
7e:a5:96:dd:2d:74:36:dd:a4:cb:3c:64:7c:ff:d5:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E7:81:5B:52:45:0F:92:68:A2:71:D6:5C:87:71:44:C8:2F:37:39
X509v3 Authority Key Identifier:
keyid:5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0d:88:4c:68:1e:5c:1f:96:80:6d:eb:2f:24:e1:02:c9:10:
bd:f9:33:7b:c5:fa:04:07:f8:7e:c5:52:ae:57:67:df:e6:f9:
47:10:23:4b:71:04:8d:23:fc:1f:7a:63:53:88:2d:f4:49:d5:
3f:bf:79:84:99:8f:32:7e:56:a0:40:af:ec:60:e6:e3:7c:20:
cb:73:85:1b:90:5a:3e:54:7e:73:0d:74:9c:38:4d:47:39:3f:
07:71:51:ee:5e:2a:1b:b1:c1:cb:67:08:25:e9:13:d2:1f:bd:
2a:24:7a:0c:61:ae:81:ce:d9:c5:4d:c0:44:92:c6:ed:64:7c:
2a:cf:85:65:57:52:11:b2:0e:dd:59:65:63:4d:16:1b:2e:63:
5b:d6:58:c5:78:09:31:77:a8:9c:f3:6c:8c:36:cd:9d:f8:21:
99:56:3e:f5:60:49:7a:37:bc:67:72:1d:97:af:cd:b4:54:ff:
d1:f9:93:50:5e:f2:11:3b:35:19:53:f1:45:ca:a8:c6:71:4d:
4d:6f:36:63:5b:2f:f6:5b:1d:2d:5f:04:be:03:b4:de:ad:a2:
4c:99:26:ca:fd:05:5e:2f:66:e1:00:0f:18:83:66:0a:e5:7b:
ab:d9:ca:e1:21:8d:65:66:e9:50:f3:63:82:9e:69:b2:6a:30:
32:ba:84:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:29 2025 by rpki-client