Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
File: wmsHYHZubMcjnCdVotDTn74U7Xg.mft (raw, json)
Hash identifier: fL1IC+1OwPNfywAUssNkQ1KoZFWlzygYKGSr35EIR4E=
Subject key identifier: 14:80:9C:2A:50:25:CE:A8:92:87:E9:FB:2A:B8:C4:0F:66:62:15:3B
Authority key identifier: C2:6B:07:60:76:6E:6C:C7:23:9C:27:55:A2:D0:D3:9F:BE:14:ED:78
Certificate issuer: /CN=c26b0760766e6cc7239c2755a2d0d39fbe14ed78
Certificate serial: 019A71B78281FE3F18ACE3AD938D61B7609B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
Manifest number: 0AD9
Signing time: Tue 11 Nov 2025 07:00:43 +0000
Manifest this update: Tue 11 Nov 2025 07:00:43 +0000
Manifest next update: Wed 12 Nov 2025 07:00:43 +0000
Files and hashes: 1: wmsHYHZubMcjnCdVotDTn74U7Xg.crl (hash: GqwEaYszq5KL0GTjQqQV72Ncm/5MAGz/G8b+vDJo6g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:82:81:fe:3f:18:ac:e3:ad:93:8d:61:b7:60:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c26b0760766e6cc7239c2755a2d0d39fbe14ed78
Validity
Not Before: Nov 11 07:00:43 2025 GMT
Not After : Nov 12 07:00:43 2025 GMT
Subject: CN=14809c2a5025cea89287e9fb2ab8c40f6662153b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:af:1b:4e:02:8e:e2:59:c3:0c:19:81:cd:
e5:3b:8b:7a:3a:d9:6b:a3:1f:a2:ca:71:45:95:ea:
b4:f4:2f:78:7a:3f:68:05:ac:2a:82:29:26:88:86:
69:c5:59:94:f0:c2:a8:2c:0d:e4:3b:38:00:e0:cf:
cb:b7:d3:91:68:e8:1a:40:ec:8b:8c:a0:25:47:9b:
37:4b:23:17:b7:4f:c5:d2:c2:fb:35:2c:32:3f:ec:
f4:72:05:3a:ea:8f:e9:47:23:b8:17:6f:c4:d9:57:
1c:26:01:96:69:80:78:d4:49:bc:59:66:fd:0b:90:
12:e4:01:93:65:ef:b4:07:a4:eb:7b:e8:98:26:07:
51:d9:2d:47:3f:cd:e6:18:f0:63:90:35:d3:78:46:
14:9a:1c:33:66:1d:ac:a1:d3:9d:94:ee:fd:1b:a9:
8b:2b:27:42:3f:cc:58:b7:11:48:51:ac:89:75:ab:
e3:e3:45:ca:b1:f5:02:f9:ef:7b:c9:d1:d9:a2:2d:
d2:2c:98:74:07:5c:7a:58:29:38:f0:6a:44:58:97:
6b:17:ed:99:5b:f3:6a:6a:f2:1b:aa:bc:1f:ab:26:
8f:17:9e:d5:70:e5:f5:57:94:c7:de:c4:13:8d:59:
ec:46:d3:23:f0:60:af:71:49:7e:23:0d:3d:ce:2e:
b2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:80:9C:2A:50:25:CE:A8:92:87:E9:FB:2A:B8:C4:0F:66:62:15:3B
X509v3 Authority Key Identifier:
keyid:C2:6B:07:60:76:6E:6C:C7:23:9C:27:55:A2:D0:D3:9F:BE:14:ED:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f2:ac:f3:d6:e1:8b:6d:df:0f:73:3a:61:53:6a:fc:25:26:
3d:09:e5:87:e7:1e:8a:5f:43:6f:25:5a:a0:7c:bc:f7:17:50:
8a:dc:28:bb:b2:c5:84:ae:72:f5:3f:af:fe:a5:5e:22:83:7f:
bc:a3:fd:6e:62:bb:35:5d:fe:8b:ee:86:15:1a:ea:28:10:f8:
e2:fc:ca:3d:f6:e7:c1:01:21:81:d8:7f:93:61:49:c9:dc:c6:
f5:4c:c6:86:d4:c5:fe:80:95:03:f3:0b:db:ca:52:9a:c9:87:
27:e3:57:87:a9:64:4e:26:7e:4e:22:f7:aa:70:3c:78:a9:9d:
a6:47:57:8e:68:e5:e8:73:13:04:bc:03:e5:e1:d0:db:18:a9:
a3:95:6f:3e:ae:22:64:79:88:cf:0a:07:e6:37:bc:38:ea:d5:
c7:d6:64:19:46:f4:aa:72:75:99:b6:13:c8:26:66:19:1e:0f:
7e:5a:da:9a:d2:fb:7f:77:58:7a:25:53:d7:27:78:3e:3e:85:
68:7e:af:e9:9b:55:93:f5:5f:fd:0c:60:0b:62:63:b1:3f:91:
4d:6e:3f:9a:fe:5b:42:e9:e9:a9:b1:fb:6f:6a:83:87:04:9c:
70:26:36:1b:0e:df:ef:0e:d7:38:06:19:d5:05:ff:b3:eb:0d:
7c:17:73:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:24 2025 by rpki-client