Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
File: WkxPlqpaAsrag9S4jUnmpzq9JfA.mft (raw, json)
Hash identifier: ku+OcjdtanE8x7QmcPUh/mmnnMbjir6IoeYl93+s7g0=
Subject key identifier: 0E:45:52:A3:DA:97:E0:9F:5E:D6:83:C8:89:1F:03:9C:08:51:71:37
Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
Certificate issuer: /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Certificate serial: 0199233156BA1E8D6CE8330158682B660389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
Manifest number: 0E11
Signing time: Sun 07 Sep 2025 08:00:59 +0000
Manifest this update: Sun 07 Sep 2025 08:00:59 +0000
Manifest next update: Mon 08 Sep 2025 08:00:59 +0000
Files and hashes: 1: Qlh9bFiBiZDJ7E4bJ6Qm7U8cfpk.roa (hash: 6OpDkd4to1irtWv8vpsm2jxisQw9dR70exo6gT09Ccs=)
2: WkxPlqpaAsrag9S4jUnmpzq9JfA.crl (hash: nAIC/ZQkkFO3uuNdNTjxJqsmP7V0AVgtiAedRt4VXBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:56:ba:1e:8d:6c:e8:33:01:58:68:2b:66:03:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Validity
Not Before: Sep 7 08:00:59 2025 GMT
Not After : Sep 8 08:00:59 2025 GMT
Subject: CN=0e4552a3da97e09f5ed683c8891f039c08517137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:28:44:6a:82:a9:dd:92:f9:f5:d4:b6:b1:
c7:7b:28:85:fb:f8:22:4a:94:6d:16:e3:03:cc:cb:
ea:04:85:d5:5d:a0:7b:52:e8:09:d2:3f:d0:37:66:
4f:ff:2a:6e:2a:5a:18:c3:ce:b9:96:ea:59:20:56:
cc:7c:af:c0:fd:9b:d1:7e:61:89:f6:77:2f:c7:91:
8e:21:e2:b9:09:0d:89:f0:b8:50:4b:0e:e5:a5:b9:
ab:6b:63:9f:0c:2a:86:eb:b9:17:c6:14:02:13:b3:
d5:10:e0:7d:97:91:a8:ca:22:ea:48:41:52:5e:0a:
43:b0:e5:1b:e1:7c:83:be:b1:39:90:12:e9:b0:8a:
85:f0:5b:1b:c4:cf:13:ca:71:f1:3c:ba:9f:b8:f8:
37:11:30:6d:4f:f7:06:3f:cc:d6:c0:56:f2:7c:41:
c2:21:15:c5:d5:6a:88:50:71:31:be:74:4e:65:58:
be:e6:9b:01:0c:ef:46:95:5a:86:bf:41:49:1a:39:
2d:3c:a8:c1:b4:b1:55:06:5a:8e:6a:5a:a4:85:ff:
57:06:d9:d6:5a:27:31:14:35:1c:e4:8b:2e:c0:ff:
46:47:20:d0:29:3e:8c:b6:6d:e1:d1:4a:fd:1f:6c:
20:21:96:2b:91:07:35:80:89:c6:4f:44:fb:32:09:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:45:52:A3:DA:97:E0:9F:5E:D6:83:C8:89:1F:03:9C:08:51:71:37
X509v3 Authority Key Identifier:
keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:64:3a:01:51:46:bc:89:f8:f7:07:65:aa:cd:0f:4b:bc:d6:
de:d8:4d:aa:e0:73:0f:a7:67:78:06:95:e3:7d:5a:42:7b:39:
b9:3a:b2:b8:ee:93:28:36:9e:bf:aa:94:49:97:69:fe:1d:11:
cb:e3:f3:81:98:b1:5f:d2:ec:1d:42:16:ab:b0:12:58:21:f1:
55:a2:82:fd:d2:c4:70:e4:f1:8b:7c:d2:5d:47:11:ce:c0:68:
32:4b:ad:59:13:25:d2:d8:b9:c9:61:90:4e:ca:35:f8:73:4e:
39:ff:0f:6f:9c:d7:7e:0d:6e:c6:29:42:54:57:dc:7c:6a:44:
80:c3:e1:ac:f7:13:e3:5d:2a:f3:39:70:b9:39:3f:e7:59:35:
8c:d2:69:15:fd:8d:ee:da:b9:4a:7d:92:18:69:69:64:c5:fa:
cb:96:87:66:9e:d7:d4:ac:69:fd:8b:ee:bb:75:34:63:49:fc:
15:09:00:53:75:97:0c:26:e5:ca:69:93:d1:86:f7:0e:82:5e:
56:f0:25:43:be:87:f7:27:76:eb:4d:31:38:33:17:ee:ec:9a:
8d:ca:a0:76:98:6a:36:f6:2f:c3:68:7a:ce:2c:58:d0:12:f4:
d6:86:0c:d2:26:4c:34:95:2d:ca:82:0d:fd:d1:ef:32:39:73:
0c:46:22:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:13 2025 by rpki-client