Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
File: WP-hTfKonLZwljbysLVwq8z4uEs.mft (raw, json)
Hash identifier: OaORhsqFXzsjH5fuSwXzFEVHe09dhbT5Oxs7epyVUf0=
Subject key identifier: B9:1B:BC:56:19:A1:2F:42:4F:96:F2:05:65:9D:C6:5A:EC:AF:2D:01
Authority key identifier: 58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B
Certificate issuer: /CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
Certificate serial: 019A70DBEC0366665604BFC7AEA779B1E54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
Manifest number: 0D1B
Signing time: Tue 11 Nov 2025 03:00:52 +0000
Manifest this update: Tue 11 Nov 2025 03:00:52 +0000
Manifest next update: Wed 12 Nov 2025 03:00:52 +0000
Files and hashes: 1: WP-hTfKonLZwljbysLVwq8z4uEs.crl (hash: P5+PrelYfxfJIxt5iOMhA0pyZuu/VFjvK+Xno1svUFQ=)
2: veLJ4L5EYT10h17WiouBEd9ghYg.roa (hash: SL3KXjVWHmfowaZ8673tndrXHNHka8vX7pXlSqc5uVs=)
3: yWqbv8m78zRPBYHcRQrpHDhQyj8.roa (hash: SfVZhow6dDvaY/ddg+fEVIx1y/Hb6m65rBhEpqp4rjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:ec:03:66:66:56:04:bf:c7:ae:a7:79:b1:e5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
Validity
Not Before: Nov 11 03:00:52 2025 GMT
Not After : Nov 12 03:00:52 2025 GMT
Subject: CN=b91bbc5619a12f424f96f205659dc65aecaf2d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:84:06:aa:9b:0b:4f:de:06:44:f3:a5:bf:
dc:6e:4b:a9:a3:0d:37:71:27:59:35:e5:fe:f9:c6:
b0:ae:1e:ba:a1:2e:f6:bf:84:b4:e6:3f:95:ad:55:
82:a0:c1:d7:f2:25:37:e4:bb:a2:73:d5:48:5c:c2:
e9:26:c5:7e:9e:a5:60:a0:6d:0f:b7:51:df:40:79:
ef:c5:e7:8f:fb:27:0a:cf:32:9a:64:e4:c7:f2:2c:
72:f1:37:88:c5:f6:0a:7f:dc:2e:69:f7:4e:82:57:
11:f0:62:cf:83:1b:ec:8f:08:58:09:13:c9:9a:28:
94:55:ca:22:ef:7a:ca:0c:52:fc:52:f6:a6:05:12:
2f:52:88:21:77:fb:03:b8:f0:1f:54:85:42:88:0e:
a2:16:5d:77:2a:20:cc:54:2b:5c:31:00:60:d3:ce:
85:f9:ed:93:04:1a:73:b0:37:3f:f6:b1:89:32:bb:
5c:85:a2:d8:e9:9e:7a:bf:45:02:11:02:7b:50:cc:
d9:65:b1:2f:94:0d:db:dc:8e:a4:eb:56:ee:85:fd:
3b:9f:a5:82:4d:fc:3e:31:97:93:c4:65:29:e8:35:
df:c5:a6:3f:06:53:c7:77:fb:11:20:f9:ee:8e:91:
53:16:d3:57:eb:af:ad:aa:90:99:16:ed:90:72:72:
b4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1B:BC:56:19:A1:2F:42:4F:96:F2:05:65:9D:C6:5A:EC:AF:2D:01
X509v3 Authority Key Identifier:
keyid:58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:64:5a:2b:62:34:d0:d2:26:34:51:28:9d:c3:71:64:a8:16:
8f:4a:6a:5e:7f:bd:d5:27:5a:e5:a1:55:92:48:b8:bf:0b:88:
4d:18:2e:aa:aa:46:ba:a9:77:19:ff:f0:45:a0:0d:25:a6:d9:
ab:1f:3f:e6:04:e3:4f:30:c8:e6:89:62:ac:0f:cc:18:be:cf:
a4:f0:63:47:de:06:f4:fd:53:7a:fe:15:35:e9:11:52:d5:f1:
33:eb:9f:cb:48:47:45:61:43:b0:0b:7c:c4:68:24:8f:9d:9f:
d6:a2:4b:47:40:86:08:ff:9a:aa:0a:ae:22:e5:9a:73:22:f3:
bc:ea:86:31:74:7c:42:02:1c:d6:da:8d:c7:1a:e7:03:8a:0f:
fb:94:61:4c:b4:c0:86:f5:7c:04:25:b1:10:f2:cd:02:24:5e:
e2:b0:cd:1f:4d:ad:06:77:65:a1:02:2e:a7:f9:5d:cf:de:bc:
84:c3:e0:f9:da:c9:58:91:77:c0:54:3f:e7:9d:00:47:ee:2d:
b9:6c:75:2b:c2:31:b7:af:3c:8a:b2:18:69:47:3c:d6:12:28:
af:5d:62:77:4a:c7:7d:00:91:eb:66:ea:03:c2:c4:fa:1e:ae:
20:d6:b9:cb:ff:b7:ea:22:54:b1:d4:58:39:9a:d0:22:0c:01:
65:42:57:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:02 2025 by rpki-client