
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json)
Hash identifier: giHrghlZhJoAQqlQ/eNb/tNS1GmyzHo04CNIxktXMGw=
Subject key identifier: 21:68:02:14:60:E6:D4:A6:7D:0F:92:7E:E2:5A:F3:C1:4B:39:BA:C4
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 019A1C5052D511E8B631D86AB39F9080F799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
Manifest number: 12F9
Signing time: Sat 25 Oct 2025 17:00:17 +0000
Manifest this update: Sat 25 Oct 2025 17:00:17 +0000
Manifest next update: Sun 26 Oct 2025 17:00:17 +0000
Files and hashes: 1: 11dCD_28knpPV-7hcS46kYjhhGo.roa (hash: G83WGRUtYY3zSefbF+E2SJyXjgx9VV9MLKF3KXuZ9b4=)
2: 9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa (hash: +YZGQdKu0ilXXmu/2SQfsBtiwU0k+RevzvRnNOLKKVY=)
3: DegXTRl1hmKKB0Mh1bSk2jaGSSY.roa (hash: P0/pEuI8dZa73JAoWDu/sHcj9OENoxArpcgZt4vBGhI=)
4: JI9t4kgrMBA_tBUhI-9kJ9oaDjM.roa (hash: pXV1riHvzMfds44OsVlFwePE1iGGGsCCdHxPBZ6lGtc=)
5: L32db9IlGhNXOn7fmZbtThVRHKE.roa (hash: PLqdtHddsoMMcCLUD2Z7mL+OEyNt5x4sg5HQMNFgRIs=)
6: MT5zpHSMsU2F8b4CLHjl5wS-87Q.roa (hash: FPWkj13impOzSVuHerSdGs7kulcr2Jq4RDFnLt5lHdU=)
7: WARsgwxQht-4HvtCsqyvHUfR8mY.roa (hash: F6k/WM2s3wjSg8ngOVRdVBzF+PtOt/5xthj0b8Uh3dg=)
8: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: 0XkOtGvZMEXETOq6cLFs3g8BlP8lRhOh0YVnByIYj1Q=)
9: a3TYqNp6p83qAEF2bxpqvnCgoH8.roa (hash: y+uJpEm0cV8FP1xyfeDgAjsvGjvtnGx8w2peLpjD6EU=)
10: g_8J3LdgWlRMOHZvN_VHED_yTxY.roa (hash: Vdi+wDh3ZzsI3C2Itz+W70NugN9WwA/63BL9531gLg8=)
11: jGH0zuu46Tv1DGmxFrsiA-wH_ns.roa (hash: pzD5LkcY95jYgOd3J/To7SsZ3cs9FQTHeKJ7xcy8lLM=)
12: kbIKXfyrQieSTZCjNAsPSb_dgGY.roa (hash: gYFYIUtXaZJHM1/r08VSADCf+TGZjjkYv1FzaOId8qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:50:52:d5:11:e8:b6:31:d8:6a:b3:9f:90:80:f7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Oct 25 17:00:17 2025 GMT
Not After : Oct 26 17:00:17 2025 GMT
Subject: CN=2168021460e6d4a67d0f927ee25af3c14b39bac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:fa:84:a6:94:17:67:42:7d:34:06:99:4e:
98:cd:63:67:08:f4:11:0a:28:5e:9b:1d:0b:68:67:
b7:39:e3:8e:14:eb:4b:6d:cf:08:04:9d:a4:de:c9:
1c:1b:0e:a8:e7:82:d5:d1:d1:02:6f:94:d7:11:41:
7f:81:ac:3d:94:57:a3:13:91:86:0a:53:b4:8e:3f:
ea:7d:c7:26:bc:a0:48:79:40:d1:70:0d:e0:4b:23:
e3:44:37:58:2d:4a:a7:ee:35:ce:7f:8a:aa:3e:81:
46:bd:4a:8b:cd:79:18:b2:02:11:2f:3d:bf:e4:0b:
70:4a:c3:f1:af:a8:5f:1a:06:9a:65:91:07:ee:0d:
20:ad:33:8c:6c:e6:1c:f9:35:93:e0:5c:58:54:bd:
86:1d:f2:49:6d:7e:4b:d6:b5:3e:b4:0d:dd:32:4b:
f8:e8:ad:38:a5:5d:ae:1c:3e:fc:4b:6c:97:33:10:
80:75:35:03:8c:c1:13:22:08:8e:26:f2:5f:47:33:
7c:03:9c:e4:81:92:88:18:82:59:95:e2:00:08:97:
8a:f7:84:42:34:f6:d5:f6:ed:58:e8:33:b7:73:f6:
06:6a:95:63:cc:f8:45:7c:6a:2f:f6:fc:d2:da:c4:
fa:3d:df:3e:eb:33:a7:e8:cb:bf:a3:7f:3f:32:6a:
2d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:68:02:14:60:E6:D4:A6:7D:0F:92:7E:E2:5A:F3:C1:4B:39:BA:C4
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:eb:9d:f3:7b:ec:79:1c:11:0b:d1:be:92:22:17:29:39:11:
e2:e2:e0:58:8c:bf:b9:77:4e:a7:f3:5a:9a:2a:98:02:3f:63:
1c:ce:fd:eb:51:4e:02:13:26:ac:2b:32:10:6c:d8:24:19:23:
2a:cc:7a:de:68:6e:a8:72:37:5d:b6:69:79:86:e8:3c:f8:6c:
5a:fc:34:f0:8c:3f:f0:d1:a8:96:f5:ae:98:3b:df:bd:f4:cd:
3f:ae:98:d6:1a:56:bc:2f:be:5a:72:fb:b4:a9:91:f2:f9:8e:
e5:38:83:4c:31:e4:f0:23:72:c1:b4:e1:cf:9f:24:50:93:ca:
3f:2f:23:fc:87:ab:50:c8:96:64:5a:a6:66:8e:43:1c:6d:a0:
3d:8b:15:d8:b0:55:6b:73:07:9a:08:2b:ad:ad:f7:2d:f6:f8:
82:a5:4b:90:42:bc:23:c9:88:4d:92:6b:f2:49:4d:28:9a:0f:
90:99:0e:9d:0c:d6:ae:d4:d1:db:c8:b8:6c:4b:95:fd:76:d2:
7a:59:c8:1c:1c:7e:a5:2d:a6:8e:b5:9a:3d:18:e7:b6:c6:38:
97:5c:ba:03:97:f1:68:a4:ca:3a:2e:cd:37:38:93:dc:fb:ea:
a2:3a:54:60:ea:c5:74:72:a5:43:45:c6:ba:41:5f:23:2f:d1:
31:76:3b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:03:11 2025 by rpki-client