Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
File: WPgwRPUQ5RX_XcTffgCO3fmmf50.mft (raw, json)
Hash identifier: //64QuUXcOakXPZ9gAc7aMgeA+15Zzx/aBrE/yP6Cdw=
Subject key identifier: 7E:19:E8:6F:EC:4E:F4:EA:76:76:7D:22:F9:5A:3D:47:4E:2C:F4:AF
Authority key identifier: 58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D
Certificate issuer: /CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d
Certificate serial: 019A7113633FC6A3E2EA25107118F0AEED92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 04:01:27 +0000
Manifest this update: Tue 11 Nov 2025 04:01:27 +0000
Manifest next update: Wed 12 Nov 2025 04:01:27 +0000
Files and hashes: 1: WPgwRPUQ5RX_XcTffgCO3fmmf50.crl (hash: 10EhH3L4+juBfUvy/08i/4txsJarlOXau+2Ab6KruqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:63:3f:c6:a3:e2:ea:25:10:71:18:f0:ae:ed:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d
Validity
Not Before: Nov 11 04:01:27 2025 GMT
Not After : Nov 12 04:01:27 2025 GMT
Subject: CN=7e19e86fec4ef4ea76767d22f95a3d474e2cf4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:0a:a6:7d:40:bd:a3:fa:a7:1b:56:8e:14:
ff:04:63:85:dd:d5:db:ef:b3:5d:f3:37:c7:19:4e:
12:bc:81:44:7d:ed:0e:45:02:aa:83:61:96:b9:e8:
28:51:0c:ea:15:dc:7c:d3:c4:67:61:cd:40:84:6b:
5c:eb:0e:f7:84:a1:b7:3d:f3:80:4a:02:3e:ee:9c:
9e:8b:ad:f4:f0:a8:a4:d3:5c:11:b9:24:88:8c:6e:
3d:a2:20:05:6b:33:c1:b9:7d:55:fd:69:cb:f9:18:
b8:bc:9d:bc:33:cb:fd:13:9b:9d:56:40:4d:6a:c0:
da:d4:df:45:b1:1e:b5:29:e9:eb:17:79:58:7b:6d:
7f:e9:59:bf:0a:5e:c5:57:8f:a2:b8:af:62:ea:4c:
9c:84:23:f3:94:d8:78:da:52:60:08:8d:5e:bf:f2:
ba:0d:e1:7e:07:17:6b:ab:b7:fc:29:95:cf:32:5a:
36:e9:1b:83:52:4e:d6:e8:1c:2b:62:b8:d0:79:3e:
a2:da:c4:5d:a0:8e:ba:ed:03:d3:64:01:d8:3d:71:
4c:2a:67:67:62:25:94:68:a4:6b:f0:8c:9c:50:d0:
a0:89:a9:18:27:c5:1c:17:19:33:aa:07:a1:ce:dc:
6e:ad:1b:e6:b2:e3:0e:c5:b2:c9:6d:2f:eb:9d:e0:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:19:E8:6F:EC:4E:F4:EA:76:76:7D:22:F9:5A:3D:47:4E:2C:F4:AF
X509v3 Authority Key Identifier:
keyid:58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f3:b1:c3:b8:7a:27:d3:e8:cb:10:40:de:74:0c:fd:69:ae:
9e:6b:6c:b7:da:03:ec:db:3d:3c:86:45:36:dc:2e:81:86:e9:
87:b1:a7:22:eb:31:68:eb:39:6a:2c:2a:10:06:a7:2d:f5:a7:
5a:62:56:fe:ea:e6:fb:e4:2b:df:da:4e:1d:00:be:27:9f:d9:
8a:bc:e4:e5:84:af:33:d6:90:55:ae:7e:97:a3:5a:39:bb:7e:
b8:c4:39:d2:e4:f3:58:92:95:8f:81:95:e0:b4:90:a6:69:6b:
b7:72:61:6a:53:12:eb:44:21:6c:7c:13:70:cf:28:05:82:1a:
af:de:1a:8f:33:7d:e6:b4:a2:a6:1b:e9:89:4b:1c:31:ef:bf:
d4:38:3f:04:fc:f2:e8:53:54:cc:61:70:ef:9a:fb:99:af:96:
a2:9e:63:65:33:45:3b:26:cd:43:88:d5:1d:db:9d:39:ee:32:
89:81:79:1d:54:d4:08:82:77:d3:1e:9f:d3:c9:a3:a7:d9:d4:
6a:1c:98:8c:b8:dc:62:7f:d9:91:6a:f8:81:19:2a:ea:de:47:
78:f9:8d:42:f7:59:38:5c:47:54:55:be:a1:c7:f1:4b:0a:2f:
19:12:55:c1:98:e1:58:a0:a8:74:de:f3:24:19:b4:c3:41:9a:
37:50:f2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:15 2025 by rpki-client