Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
File: WKaBxxvrRk4B1baOGcpWbamTDiM.mft (raw, json)
Hash identifier: /hBCH4cnoxbon+2IGMC0ZSUXfc+JJ8NhyUHLIO3r7rM=
Subject key identifier: 7D:09:70:73:7D:B8:15:A9:25:5D:22:A7:80:42:2E:CE:10:71:DB:F8
Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
Certificate issuer: /CN=58a681c71beb464e01d5b68e19ca566da9930e23
Certificate serial: 019A711344B64741B4A19D95A5D219FE7DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
Manifest number: 21
Signing time: Tue 11 Nov 2025 04:01:19 +0000
Manifest this update: Tue 11 Nov 2025 04:01:19 +0000
Manifest next update: Wed 12 Nov 2025 04:01:19 +0000
Files and hashes: 1: WKaBxxvrRk4B1baOGcpWbamTDiM.crl (hash: cwaI16FWRNKn4jgFunGmL3g6RjWBhVDBdf8SOcawafA=)
2: lN5HO-JNvGu4hGpY5gcTC4TiNiM.roa (hash: tVhecYMNj6vTa/xG0wc+2Ec2FDfRws1DmGu5dGnbsLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:44:b6:47:41:b4:a1:9d:95:a5:d2:19:fe:7d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23
Validity
Not Before: Nov 11 04:01:19 2025 GMT
Not After : Nov 12 04:01:19 2025 GMT
Subject: CN=7d0970737db815a9255d22a780422ece1071dbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cc:e0:f0:89:dd:c1:f9:62:6b:75:96:9c:d6:
31:bc:9a:0d:fb:96:13:f4:8c:06:8e:7d:7f:66:30:
48:ce:23:d5:96:86:55:3e:12:d8:0b:97:6d:32:9d:
14:80:cd:da:13:53:80:41:a6:bf:d0:39:6f:a1:50:
2c:74:ba:42:fd:9b:17:4b:f0:c0:91:5c:b1:52:cc:
15:1f:ae:de:fe:21:64:be:e3:47:78:be:6a:ac:cd:
cc:4c:30:4b:f5:03:12:13:5c:cc:88:3c:63:b1:19:
7d:65:75:79:93:47:0c:d4:5c:cb:9f:6e:d9:37:c5:
53:27:f5:e4:92:51:8b:38:4f:7e:4f:c7:59:6e:88:
ac:c9:72:3f:1f:6d:1b:71:34:dc:a3:35:12:2b:dc:
c4:30:49:87:0b:59:00:19:0d:1a:52:31:73:e0:32:
bb:04:0d:42:e5:7f:46:13:d2:da:4c:9e:fb:02:f7:
80:35:60:66:e9:4f:b8:6f:36:b0:37:d5:18:60:96:
8b:06:5a:d7:e8:dd:f2:ea:ef:15:17:6b:03:9d:be:
d9:43:d7:be:8a:30:09:e4:df:46:d4:36:0c:c9:b8:
05:9f:bd:ab:b4:85:8b:f5:37:c9:3a:bb:85:90:82:
22:8e:e2:bc:90:73:d4:c9:79:ac:59:f8:04:ca:34:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:09:70:73:7D:B8:15:A9:25:5D:22:A7:80:42:2E:CE:10:71:DB:F8
X509v3 Authority Key Identifier:
keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:cb:8b:74:83:3f:c6:fd:8c:2f:90:94:a5:27:71:01:bc:51:
55:15:06:e5:2f:2a:78:7f:2c:dc:bd:ba:79:7d:8a:2b:57:b7:
cd:1d:e6:d0:41:f2:d4:41:9e:27:4d:81:97:81:4c:35:21:a4:
bf:38:57:0f:69:5b:b4:59:ac:4e:53:87:aa:fe:08:d6:0f:14:
26:3f:a4:b1:8e:3b:5f:6a:bb:a4:fb:3a:e2:96:16:45:1e:d5:
7c:d1:ef:8f:b7:15:8a:ed:65:97:f5:27:1b:0c:19:20:88:d9:
66:2d:ef:5c:1a:74:ee:6e:82:69:a2:34:3e:fc:22:bb:ad:44:
4c:b4:4f:ea:96:b4:10:b4:36:e0:17:35:29:8b:7d:1a:1f:ed:
69:2a:dc:3a:4b:e3:f8:94:ac:9d:02:cf:7d:06:23:e3:01:54:
7d:04:01:3a:5e:d1:8e:db:90:90:bb:92:a1:fa:8e:38:ad:e7:
32:31:3c:3a:61:38:d1:6c:6f:eb:92:e7:8f:e6:15:88:58:2a:
65:cf:12:35:db:2e:c2:71:70:dc:2b:bb:04:2d:be:70:d3:86:
87:9b:f3:17:f3:36:83:46:bb:08:2a:de:af:0f:a0:af:59:bb:
91:b3:a9:c4:8a:a1:60:34:95:61:7e:29:b0:b3:d5:ee:ed:6f:
d1:c2:51:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:17 2025 by rpki-client