Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
File: wessYB-m0HUHlzCB-qEyX-GQsnY.mft (raw, json)
Hash identifier: jJE7i5Uf60lfT91gnJLaFZH3K0nmmV8JtqGzlIyEn54=
Subject key identifier: FA:F6:47:05:86:7C:3D:DD:7A:4E:A2:90:13:5D:AD:1D:D1:2F:82:21
Authority key identifier: C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
Certificate issuer: /CN=c1eb2c601fa6d07507973081faa1325fe190b276
Certificate serial: 019A7293365FFA54252C01041C8FB6A160F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
Manifest number: 059C
Signing time: Tue 11 Nov 2025 11:00:41 +0000
Manifest this update: Tue 11 Nov 2025 11:00:41 +0000
Manifest next update: Wed 12 Nov 2025 11:00:41 +0000
Files and hashes: 1: 9VIpFT_uZfwTVVoxe7PNJO0XppE.roa (hash: dBqoAsOTvzrDylULyUsZPwgLS85TPwI2yvXP5iugyTk=)
2: v1vDCS3zEydWpnAi830GA_yQEHw.roa (hash: 3xFB/pduxsTBOKVMWYRZZ5LgXgY+cAqxpBeMHy8oimw=)
3: wessYB-m0HUHlzCB-qEyX-GQsnY.crl (hash: E3jxQIb95FQEPM8BTTy+hxfSfbLt2uji2JI3pj/vL+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:36:5f:fa:54:25:2c:01:04:1c:8f:b6:a1:60:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eb2c601fa6d07507973081faa1325fe190b276
Validity
Not Before: Nov 11 11:00:41 2025 GMT
Not After : Nov 12 11:00:41 2025 GMT
Subject: CN=faf64705867c3ddd7a4ea290135dad1dd12f8221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:99:bb:0d:0f:b7:ce:73:a4:f6:ad:38:c1:
61:c4:ce:01:d0:94:e4:ff:ac:d5:a6:46:14:1b:5a:
d7:f3:6f:63:ed:94:86:bb:0f:69:57:b7:4a:63:9d:
42:43:34:69:ec:58:c4:09:d7:f4:6b:59:6b:af:bc:
0b:fd:ab:bf:6f:a4:ee:0e:94:67:70:43:a7:d6:f1:
e6:e1:fa:de:42:9f:d3:a0:26:a9:e0:4a:12:18:20:
3d:05:d5:1b:cd:73:77:2a:1d:38:d1:2f:e4:25:f6:
ae:47:bb:58:81:bc:3c:f0:71:48:8b:5a:c0:6c:28:
0d:73:29:3d:46:7d:15:bd:3d:0a:b5:57:5e:6c:84:
91:23:fd:bf:14:30:9a:1b:b7:99:77:69:d4:a6:88:
ee:bb:ec:23:c5:af:bd:25:12:be:f4:77:29:82:0e:
bb:8c:6b:0a:34:07:b8:8b:89:bb:ad:9d:f5:f1:1e:
e7:e6:b0:f1:7e:e5:f6:9c:87:44:18:3e:f5:ec:1c:
02:3f:4f:2e:f0:4f:2e:65:0a:f3:df:d4:62:62:80:
40:0c:ae:b4:78:32:90:d9:f5:21:1e:c7:9a:16:cd:
aa:48:4e:72:e6:f1:1d:68:75:f5:7c:43:f9:8e:0d:
fd:5f:89:4c:83:e8:9f:8c:bd:78:48:e9:4e:d8:cd:
81:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F6:47:05:86:7C:3D:DD:7A:4E:A2:90:13:5D:AD:1D:D1:2F:82:21
X509v3 Authority Key Identifier:
keyid:C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cd:ae:44:a8:e3:aa:72:9e:1b:2b:85:87:59:08:55:95:63:
cc:5b:c2:cb:66:f1:0f:c7:d4:a7:45:12:f2:13:12:e2:95:06:
cd:17:53:b3:05:66:df:23:66:d3:60:00:3c:66:09:26:bc:84:
bc:9e:da:49:c7:0a:78:bc:2c:04:a0:88:c4:40:e0:b3:1b:95:
94:17:53:e2:8c:a1:61:a9:21:bc:6b:5c:df:31:35:aa:56:7e:
00:87:d5:18:d7:cb:02:f8:01:b5:ab:07:e0:04:d1:aa:af:bc:
e9:3f:0c:21:94:18:4c:80:d9:fd:6f:46:43:e5:1a:7f:ce:3f:
2d:ed:be:a9:b8:21:f4:57:1e:26:82:1d:b3:86:80:46:d1:69:
e9:24:2d:23:bf:24:60:14:f2:c9:19:9a:8f:1f:06:fa:8d:70:
3b:17:9f:30:94:69:20:09:46:ae:5d:44:9a:59:41:f3:ed:44:
2f:cd:23:bd:a4:a2:09:75:9d:69:a4:75:4f:e8:32:b6:cd:5c:
23:eb:8a:ae:43:91:c2:59:76:94:72:59:69:65:ab:6d:bd:3b:
7b:cd:17:b3:78:96:ad:e7:8a:b6:e7:6b:71:0d:97:e4:06:ac:
83:f4:e5:35:f0:de:b9:f3:ac:d9:c5:bd:1c:9c:05:2a:1e:2a:
cd:c4:7e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:10 2025 by rpki-client