Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
File: WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json)
Hash identifier: tqD2jf0/TE6+mhC7nDY44pX4JmEFpbas3bbk1dTrlpU=
Subject key identifier: 6B:C0:3D:E4:7C:17:90:54:ED:D6:E6:1C:FF:16:1A:71:E1:28:75:77
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 019A71130CE767DD56F2DD2D0C99D08C9414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 04:01:05 +0000
Manifest this update: Tue 11 Nov 2025 04:01:05 +0000
Manifest next update: Wed 12 Nov 2025 04:01:05 +0000
Files and hashes: 1: 02c0qJQBaigaXqN3maDpONIFFAc.roa (hash: vlyVQJ8T6zqr0LECSkvXw3QlmL9Yjq/p8Uw6tjeUbr0=)
2: Pg2gOuPKcxedaD2sl59MmthUm3Y.roa (hash: WZc+oVHpNNLn5e9mOqx5XLubp1FGZ4dlKP4oaNZHVd8=)
3: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: CRZZC6LphOtEFGaiN8men5ntUvPB9v2o7F4/r5XlGag=)
4: ahTFb9S5fLEMmoyGHiPW-vefiaQ.roa (hash: zqpUKAyeaL36v8tPjx+vALU808R28L9YVhwRYuClrAU=)
5: ioEYoSKyEtfdiu8IAgBkdSDUxq0.roa (hash: CEmR3YzuPC7K/CwWVdeEu1K1wp1B5QCNbwR4nRi5bvI=)
6: nIj-C3WdkAFcA4_Ngvkfutdaf_s.roa (hash: yzlIgktfxTBSgISHGYHZ7rHc6AI8aMue2aaA1Dfkxmw=)
7: navET64WjDznMyZwQ_DOauhQ_9c.roa (hash: 0cyJx0VGxqHx5SG278Ye2Mukf1TTlmRpgV9pjTpL9aA=)
8: uQzeyhb_YH9D-fUCEABxF4wv1F8.roa (hash: 8/LP96pPXoanusy0qN7hBVY8daOytWMa0c+vNmNso88=)
9: yMil0VU9iMTJivoi_lPAt-4Ce_g.roa (hash: AOwv0RlV94x3NlTYd1oZANIiYY1kB3TCsu+XGZoajDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:0c:e7:67:dd:56:f2:dd:2d:0c:99:d0:8c:94:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Nov 11 04:01:05 2025 GMT
Not After : Nov 12 04:01:05 2025 GMT
Subject: CN=6bc03de47c179054edd6e61cff161a71e1287577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:3f:ef:80:a5:e4:70:5d:a2:43:c6:47:fb:
dd:c3:8e:ba:ac:12:68:2a:e5:b2:65:7e:72:76:3e:
ea:11:3e:06:87:c7:05:ce:74:47:a5:09:f0:ef:3b:
0f:2c:84:bf:e1:8f:58:c9:2c:96:56:e8:c6:2c:02:
1a:9d:b8:83:83:43:11:f5:fa:f9:c8:9c:bf:22:8c:
ee:a0:d1:3c:09:fa:36:e5:a9:38:12:4d:dc:c4:1f:
e3:f5:0d:ab:f4:af:9a:dd:78:64:e4:76:f7:6f:7c:
23:ff:47:3e:82:bb:e2:7e:60:9e:80:72:13:e5:69:
b6:80:d9:1d:6f:bd:c9:f6:6e:71:05:5b:96:78:01:
7c:57:54:a0:a0:02:04:8e:09:3a:e4:4e:5b:2a:e7:
5b:9a:e9:c4:17:f3:0e:24:af:c5:91:47:5d:6c:0d:
2d:30:0a:f8:d7:a9:25:d6:ce:aa:41:15:ca:4f:6b:
5f:34:b2:ea:7f:94:05:9e:05:64:f2:d0:b7:73:ee:
bb:f1:b0:95:4d:b4:31:ff:e0:ed:ef:7b:31:e9:dc:
11:d2:1b:af:c1:72:41:c4:16:82:95:59:12:9a:00:
00:71:51:b4:90:65:1a:28:06:dc:1c:6f:e8:2d:d9:
39:72:c6:43:00:c4:32:ad:cd:91:22:ea:42:da:bd:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C0:3D:E4:7C:17:90:54:ED:D6:E6:1C:FF:16:1A:71:E1:28:75:77
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9e:45:ae:7c:0c:86:16:b3:dc:ea:14:0b:ab:76:ee:b4:f0:
32:c2:6c:f8:ee:32:0e:03:ab:6e:97:4f:1e:ab:ff:f1:87:22:
02:d0:1f:14:17:e6:dc:54:8d:47:81:dd:11:06:47:8d:a4:ea:
72:c7:11:66:fa:0f:f3:c6:0b:18:b4:d4:42:c3:36:ca:af:48:
f4:ae:9f:e0:7d:b3:44:55:d5:1b:b4:04:59:99:73:2c:a8:6b:
92:ba:60:37:2b:87:4c:c7:fb:7d:43:e1:98:47:6b:11:37:2f:
70:19:83:01:9f:93:64:98:18:61:b8:5a:2d:64:2f:9c:b5:c8:
b5:be:27:20:f4:9d:38:10:a1:f0:63:ad:84:10:7d:47:92:48:
ed:2a:4d:11:4b:34:24:44:a8:4b:61:fa:9c:ee:7d:6c:4c:ab:
ec:ec:cb:c3:6f:1f:11:1c:20:a9:8c:88:75:48:69:89:9b:d5:
15:e3:ed:7e:be:9f:86:b2:72:22:d2:69:0e:9f:f0:28:c7:02:
de:7b:0f:e1:cb:cb:34:9e:d5:e9:9e:f9:32:ed:12:26:b5:b1:
36:48:57:db:59:48:96:2e:ef:37:c6:a9:22:25:60:89:ff:11:
45:e1:23:2d:71:8f:a0:12:d8:a3:f5:ca:bc:ed:d2:7e:4f:25:
99:2e:ec:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:43 2025 by rpki-client