Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
File: WsRdmhoiQWgz3lml5hnRIJbQlp4.mft (raw, json)
Hash identifier: IwsDNq+clq5v392OvnMbdS4fWKd63AJpLH6wjDjgPHs=
Subject key identifier: BF:1D:E9:52:81:F3:6B:EC:C8:99:2C:05:48:07:0C:90:21:31:A1:A9
Authority key identifier: 5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E
Certificate issuer: /CN=5ac45d9a1a22416833de59a5e619d12096d0969e
Certificate serial: 019A70DBE962B8C9F5AFB504F504D7D60683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
Manifest number: 1072
Signing time: Tue 11 Nov 2025 03:00:51 +0000
Manifest this update: Tue 11 Nov 2025 03:00:51 +0000
Manifest next update: Wed 12 Nov 2025 03:00:51 +0000
Files and hashes: 1: WsRdmhoiQWgz3lml5hnRIJbQlp4.crl (hash: F1w5iVIOykZK0dkb8Lqb1JenZ/Gpqgs8fY0nvYo2N2Q=)
2: X2K16vfCCw5yGYZ35G284aX5j-w.roa (hash: 1LbHM2S0fWzRZr7mNPkcXGUnRUmoTc3QJQmvi/4U+L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:e9:62:b8:c9:f5:af:b5:04:f5:04:d7:d6:06:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac45d9a1a22416833de59a5e619d12096d0969e
Validity
Not Before: Nov 11 03:00:51 2025 GMT
Not After : Nov 12 03:00:51 2025 GMT
Subject: CN=bf1de95281f36becc8992c0548070c902131a1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:7f:6e:01:74:43:12:a7:27:e6:e6:d0:1f:
94:9f:0b:49:63:6d:2e:41:86:ca:51:13:0f:8a:cc:
20:f7:bb:73:a3:9e:4f:71:99:ea:70:21:e4:bb:94:
70:e7:0e:d7:1d:94:a1:cd:46:a0:2a:00:c0:80:98:
04:5e:14:a6:d4:6c:05:ea:02:d9:22:fb:4d:8d:8b:
51:a8:6b:fd:b5:e0:53:3e:f7:c7:f2:7f:1d:de:1c:
31:86:3a:a5:06:dd:82:e0:fb:fa:6a:3e:15:03:09:
cd:c4:71:98:eb:a0:76:57:28:a3:ee:2c:fa:67:13:
b1:93:df:c0:67:46:a6:4d:2a:da:6b:61:b1:46:3b:
41:94:f3:91:99:df:28:31:7b:3a:31:42:ec:7c:0a:
27:fe:d3:de:d8:d8:96:ca:a2:db:2f:03:7b:9d:51:
81:89:4a:c5:42:53:15:ce:d1:4a:57:ec:f0:62:c1:
86:ce:42:15:fe:7c:a2:1b:19:69:64:86:59:66:70:
79:bf:d8:00:5d:ce:c1:27:f5:af:f2:32:b8:9f:d6:
42:cc:91:2f:d1:ed:96:5c:a9:46:e5:ba:c5:5f:bc:
05:82:cf:74:00:99:06:b4:4a:17:f0:9d:8d:36:b3:
99:d0:14:66:f2:f1:3e:83:c5:c9:95:19:e7:e7:e4:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1D:E9:52:81:F3:6B:EC:C8:99:2C:05:48:07:0C:90:21:31:A1:A9
X509v3 Authority Key Identifier:
keyid:5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4f:70:3f:a6:f8:7b:38:ac:09:d2:c3:15:56:66:2b:48:20:
69:98:65:e5:c9:94:87:60:4f:b4:d0:c3:1a:bb:69:39:60:9c:
81:ae:4d:09:0b:5f:4f:67:34:23:33:8a:01:80:b7:8a:82:e3:
cf:2d:47:e7:2e:d1:43:ff:93:f9:0a:2b:10:41:be:f0:53:15:
bd:81:30:44:09:b9:76:d2:e7:d6:b4:3c:3b:63:fb:ac:25:a6:
dc:b8:56:0e:cb:cb:cd:d6:b5:54:0c:5e:a1:8a:81:21:42:2d:
22:e7:7f:07:d5:b8:62:a0:90:01:63:92:b7:24:bc:8b:bf:46:
fd:3b:53:b8:59:ac:db:22:da:12:7c:05:a2:1c:fc:df:b1:72:
c8:24:8d:5d:67:c3:d1:17:16:68:f0:5b:86:e2:70:5b:f0:30:
b2:e4:b4:06:1d:21:91:6a:91:2c:72:af:0f:4e:eb:da:34:87:
ff:4c:5c:b7:10:d3:a3:6d:39:56:85:32:5d:b9:e5:be:5d:ba:
56:fb:44:3b:25:9e:08:da:22:e7:eb:46:bb:1e:74:f3:df:7b:
f9:16:53:e4:7f:cf:77:96:53:77:3e:35:da:f5:55:fb:95:29:
f8:8c:94:41:7b:f0:ba:0f:d1:ab:c0:77:09:4b:68:c1:f3:d8:
c0:ef:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:26 2025 by rpki-client