Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
File: WNz7D_Tyi4_61usN0p6ytq9immg.mft (raw, json)
Hash identifier: t3PnLIXLdz8e5xrOvag2LQQjxcrFyynroXSAyxuRTeA=
Subject key identifier: C3:F5:32:7A:4D:ED:F4:19:7F:1F:ED:6B:0A:A6:6A:56:06:FD:20:21
Authority key identifier: 58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68
Certificate issuer: /CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
Certificate serial: 019A71EE78EDED63D3C89C74040DAF9ACDC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
Manifest number: 097D
Signing time: Tue 11 Nov 2025 08:00:45 +0000
Manifest this update: Tue 11 Nov 2025 08:00:45 +0000
Manifest next update: Wed 12 Nov 2025 08:00:45 +0000
Files and hashes: 1: WNz7D_Tyi4_61usN0p6ytq9immg.crl (hash: ONxet2N5QMbTe6kJvzQ2T0nULUURDSwCJJzLaY5vPS4=)
2: lgaTADVYOse5jNoGc-hlR1iyQcM.roa (hash: whet4s5rWCX20O/tP+eDuVvdhz/p6dV5HSU07qsog2g=)
3: sauoJPH8ZCzsvjvGozwJzjKKcxA.roa (hash: B9f46JTfl/pBuc2yfO6KIqonaBN9SLGFTMzKnpf4wu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:78:ed:ed:63:d3:c8:9c:74:04:0d:af:9a:cd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
Validity
Not Before: Nov 11 08:00:45 2025 GMT
Not After : Nov 12 08:00:45 2025 GMT
Subject: CN=c3f5327a4dedf4197f1fed6b0aa66a5606fd2021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:d2:6c:30:e9:bf:b7:95:9a:92:15:63:9f:
a1:0b:c5:22:44:90:5e:9c:21:8d:6b:02:c0:16:c1:
41:6f:e7:e6:19:7c:b0:79:7f:e4:c3:fc:cb:55:ec:
33:3f:f2:b6:7a:49:8d:18:b6:d2:62:00:e2:b9:27:
0d:78:6d:cc:89:a7:fc:dc:4d:62:34:eb:38:a3:8c:
b1:14:0c:44:40:d0:cb:dd:00:de:e6:ea:42:ac:1d:
05:eb:b9:c6:2a:7b:a7:63:ac:2d:df:98:73:df:28:
39:2a:fb:0a:bb:90:4a:1e:cb:58:88:86:24:7d:3d:
bf:4e:d6:f4:0d:9b:08:f2:01:04:f3:b6:c5:6d:13:
2c:2e:ff:08:e5:7c:4f:58:f8:7b:3f:27:46:04:f6:
6d:a0:23:d6:c7:21:f3:c3:5c:8e:07:72:5a:d8:8e:
76:3a:ee:06:88:f8:1e:65:65:d0:a3:a4:85:14:52:
89:06:93:7b:8d:af:94:d0:35:a9:e5:e5:e4:c0:f1:
c2:07:f7:f0:68:f6:c4:87:74:dc:f6:6e:a7:5b:04:
c4:74:2f:9f:1d:49:92:dd:8b:b5:57:49:9b:00:7a:
e9:fd:51:3c:8f:5d:32:b8:20:e4:54:5a:d3:94:1d:
9b:3c:1c:cd:70:34:4b:30:94:f1:15:ac:36:f8:b4:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F5:32:7A:4D:ED:F4:19:7F:1F:ED:6B:0A:A6:6A:56:06:FD:20:21
X509v3 Authority Key Identifier:
keyid:58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d8:be:3c:c6:17:49:24:19:ef:70:81:3f:f2:1a:9d:77:63:
14:97:02:e8:3f:f5:af:7e:c7:83:e6:72:25:99:4c:dc:c7:01:
c0:8b:09:bf:4c:ca:2d:3d:ee:e0:54:b7:2e:f9:e6:3e:14:08:
92:8d:6f:76:78:73:82:28:c8:e9:31:1b:1b:62:1d:a0:09:50:
7c:6c:55:65:4f:6c:e5:db:67:6f:ac:57:55:64:a7:16:b2:ea:
a4:e0:22:85:68:91:18:16:2f:c3:bf:1e:de:61:51:d8:4e:90:
1e:4f:80:08:e5:a2:8a:44:65:10:09:e1:3b:e4:72:d4:6c:a7:
ef:70:67:7b:27:85:fd:37:ab:7d:7b:ad:85:1f:8a:cc:06:39:
ff:55:e0:8c:bd:de:c9:7c:1d:a9:11:ea:ce:a7:88:bf:e2:47:
38:14:1c:54:54:6c:ef:29:40:f0:ec:63:6b:e9:d0:df:d9:01:
49:ee:17:80:13:4f:c8:61:90:17:fe:48:7b:26:fb:1d:bb:f6:
2f:aa:66:16:53:e5:7c:aa:a7:40:07:03:05:02:73:1e:ff:6d:
c1:67:5a:06:09:39:11:4f:80:33:e0:98:fa:75:8a:96:3e:31:
db:b7:f3:40:92:55:ff:de:f8:56:c7:60:9c:ae:a3:04:76:3c:
fd:ef:21:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:36:19 2025 by rpki-client