Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
File: WWXGLxDCXnp-8YNWgzqk-bmELGo.mft (raw, json)
Hash identifier: fTTs3N30r1Z6oV3XtPWz5bv63I0c1PX4DYEsFZ+Eiqo=
Subject key identifier: D0:14:78:AA:0C:77:6B:E8:40:AA:FB:D1:65:5B:8B:74:F9:26:FC:57
Authority key identifier: 59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
Certificate issuer: /CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Certificate serial: 019A4EF53D3B3A5BB34E941D41DDAC0D91AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
Manifest number: 10CF
Signing time: Tue 04 Nov 2025 13:01:26 +0000
Manifest this update: Tue 04 Nov 2025 13:01:26 +0000
Manifest next update: Wed 05 Nov 2025 13:01:26 +0000
Files and hashes: 1: 7UOjyf-6bS8r8zJDoqOo76_7Llk.roa (hash: M/fakT1uObMb7UW5IWYfhtUN1rDOGMnXTsxFWM6dOkk=)
2: WWXGLxDCXnp-8YNWgzqk-bmELGo.crl (hash: Sw08NZeuLX6E2coi/DJYpFfgrQ4SLHdjO3R5rTzOIs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:3d:3b:3a:5b:b3:4e:94:1d:41:dd:ac:0d:91:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Validity
Not Before: Nov 4 13:01:26 2025 GMT
Not After : Nov 5 13:01:26 2025 GMT
Subject: CN=d01478aa0c776be840aafbd1655b8b74f926fc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:15:fb:10:04:3e:c9:23:90:92:1a:a2:9b:
04:08:a5:cf:5e:7e:1e:88:fa:8c:e4:c6:2a:d2:b2:
43:e1:30:be:df:04:63:d6:62:34:96:79:a0:f8:6c:
df:18:ae:ff:00:3a:0e:83:21:a2:ee:4b:55:03:6a:
78:59:05:fd:f0:e6:b3:6b:bd:01:91:10:f7:4c:19:
34:f0:72:bd:82:1c:95:50:76:d3:0f:b4:b5:cc:5a:
53:5f:9f:b1:99:bb:78:06:fc:9a:3a:15:37:77:44:
3d:ec:8c:50:2e:5e:be:09:2a:e6:a4:01:2d:4d:c0:
68:7a:0c:27:27:b7:ad:73:b7:7f:64:cd:52:28:e3:
ce:85:98:f2:bc:3b:27:d9:ee:ea:48:ef:41:34:00:
a1:56:b8:52:d6:d1:b6:9b:08:72:f9:39:a9:2d:1c:
4a:73:5c:d9:57:22:0c:d0:9d:28:fe:f1:7a:48:33:
f0:2d:8d:85:f2:7c:a7:68:fc:7c:9d:29:b3:c1:2c:
e3:40:86:49:cc:a6:49:99:53:99:df:ab:95:86:cf:
f4:a1:6f:e7:5e:12:52:0f:fc:18:1c:97:bc:24:84:
96:9d:52:8f:f1:7a:a0:67:1f:c4:e8:04:63:ae:a4:
45:63:18:bd:7b:aa:13:90:da:b4:27:84:39:89:5e:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:14:78:AA:0C:77:6B:E8:40:AA:FB:D1:65:5B:8B:74:F9:26:FC:57
X509v3 Authority Key Identifier:
keyid:59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:bb:81:76:7c:38:04:79:f9:8a:2e:07:4d:47:b2:0e:31:4e:
49:cd:f9:6e:5d:6c:13:9f:8f:1c:52:cf:54:0c:08:72:e0:e0:
68:0d:fb:2e:dc:ef:b9:d6:c7:d8:34:8a:00:ea:c9:50:b5:6b:
61:d9:49:d9:ef:0e:36:8e:df:09:df:fe:2c:c2:3b:df:b0:7e:
1a:10:48:ca:0e:ad:ed:97:ed:d8:8a:08:ac:75:37:58:5e:59:
a4:b0:c3:d4:9e:e9:76:ca:8c:72:9b:14:3e:04:fd:d3:cf:64:
bd:3e:70:93:09:11:27:0e:39:73:b6:bc:5d:55:7b:7b:e4:12:
8c:9d:78:2f:cb:d5:4a:fb:fd:e7:4e:8c:8f:c1:48:79:a8:0e:
7e:4d:9f:51:e2:6d:18:60:3b:be:f8:c7:04:b6:5d:19:fd:a9:
37:a8:9d:5e:1b:77:98:99:b1:e3:ae:8a:d1:5f:cb:22:dc:79:
c1:65:83:06:dd:15:b4:b5:3a:28:0e:24:ea:92:85:3f:84:de:
33:07:11:1d:fd:b2:70:57:7e:de:57:67:da:00:1f:ad:f6:af:
04:f6:af:06:1e:50:a2:04:59:b4:1e:15:76:01:ed:e9:d8:ec:
00:8c:1d:79:be:f2:c9:76:88:d0:d4:6e:86:22:7e:f5:a0:d7:
7a:b0:29:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:02:47 2025 by rpki-client