Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
File: WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft (raw, json)
Hash identifier: kfRvJL3Pnok/SSOypWMs8U6PQI8zphXDeUcFuS/9GFY=
Subject key identifier: 81:93:05:70:E7:60:06:A4:E4:1C:BD:D4:A0:21:37:FD:A0:74:FE:5A
Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
Certificate issuer: /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Certificate serial: 019A71B7F060DA5C3B0E71789DE838051781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
Manifest number: 1508
Signing time: Tue 11 Nov 2025 07:01:11 +0000
Manifest this update: Tue 11 Nov 2025 07:01:11 +0000
Manifest next update: Wed 12 Nov 2025 07:01:11 +0000
Files and hashes: 1: IAWEnryJVpaK2PC1i1p1gzyA5aM.roa (hash: V8zeqHEXmBXDf+5VLnGO8LhbeOvdCzFQOaNucWQFdJs=)
2: IxvoZc4F3Qaa5ur1q1XhsdbIwYI.roa (hash: uBXV07kX7Q7HlXXY9czyil+ZyCPUWCh5XY0q2xGQk9E=)
3: WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl (hash: J0bt+8l9rUN1wFyIwfQBn0tJIoqILGE3cXPqH2MHV3c=)
4: gcLYIM7NGFOjlEOaeCFYBSRJsQU.roa (hash: Gb37A8lctlHsApBbJF+wFlN+wBQgxlqZQzSQ9DIxfCE=)
5: tMFph9cmJacY9_6pBYOFi0X8qxI.roa (hash: yN3wCBUXrF4u5FVJmYsnf0p7F7khnudzz4ntTOuoOuA=)
6: tYYSCJCFza29RNke_2EcrZu7XHo.roa (hash: lB4PFBQhaKp43hqTQ3cMQhuQr2bCAaP0ut24A/mZGfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f0:60:da:5c:3b:0e:71:78:9d:e8:38:05:17:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Validity
Not Before: Nov 11 07:01:11 2025 GMT
Not After : Nov 12 07:01:11 2025 GMT
Subject: CN=81930570e76006a4e41cbdd4a02137fda074fe5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:66:0c:13:e9:29:d4:f6:c7:e1:8f:e6:db:c4:
f3:ac:9f:f2:64:69:8e:06:dd:34:ab:19:f5:c9:14:
dd:fc:e4:2e:6b:ce:e8:f2:7e:a9:5b:e8:2e:5b:4f:
7d:f8:46:29:51:17:fa:da:16:81:96:08:e2:7d:2a:
25:ad:55:f3:39:75:6a:3e:b2:c4:4e:02:dd:aa:18:
25:b9:3c:75:02:00:a2:81:2b:11:89:db:fc:d9:34:
b3:82:0d:02:86:b0:b9:73:59:71:3f:0a:14:37:40:
19:ed:85:b4:df:e3:e1:4b:d8:3e:21:e4:27:d9:f5:
e0:43:fe:ed:25:09:4a:c1:6a:0d:5a:ca:3e:7c:e4:
4b:4c:7d:9f:4b:33:93:15:c3:be:03:4c:ff:30:d0:
78:91:c0:ba:f6:38:4d:07:5d:ff:b5:c0:32:00:b1:
98:07:73:8c:25:27:60:ea:1a:cb:81:f5:02:d0:25:
f8:a7:fe:d0:2c:7a:9f:d3:0a:98:8b:3f:d5:d0:a7:
a9:85:09:e7:ca:ea:11:d7:4c:c5:5f:9b:eb:48:00:
89:f7:4a:ab:0c:b9:21:59:97:79:cf:31:01:22:9d:
0a:77:e9:d2:2a:ed:67:29:a2:ab:03:2f:33:62:7c:
2b:64:bc:65:79:b1:6e:c7:aa:9e:df:f4:4a:45:29:
cb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:93:05:70:E7:60:06:A4:E4:1C:BD:D4:A0:21:37:FD:A0:74:FE:5A
X509v3 Authority Key Identifier:
keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4f:d8:ed:46:26:b6:93:e0:fd:07:2f:ed:1e:b8:f4:8e:83:
af:38:03:ed:20:df:93:ee:f2:9f:0c:8e:01:fd:1d:29:47:1e:
61:93:3e:0d:fc:5d:e8:eb:9c:db:10:05:a2:82:b9:02:c6:0d:
57:b5:81:70:28:0b:a5:8b:27:5c:56:f8:e4:d2:08:d5:90:bf:
6a:48:12:ae:12:e7:f5:1c:2a:cc:52:8b:63:e7:23:de:ec:7c:
25:38:2d:6d:51:37:9b:69:8a:1f:a7:bd:30:59:9a:db:6a:f5:
7b:cf:e3:73:29:28:11:17:e6:d9:34:8f:76:a8:65:19:13:0d:
df:02:88:7c:5b:48:74:79:18:5e:d4:e8:b9:7b:34:25:ee:36:
75:a6:66:b8:b2:2d:31:e8:66:c6:a1:b7:b5:a4:7d:a5:5a:f2:
a2:e1:0a:92:59:4e:f9:b6:b9:e6:60:da:31:3c:a5:41:dd:f6:
31:2a:bc:3b:a7:35:e3:47:db:0b:9b:47:05:c2:8b:60:07:0c:
ce:88:14:25:64:88:a1:84:fa:35:c6:96:33:3c:db:44:64:b3:
02:eb:40:10:b2:38:46:12:fc:2f:91:be:0b:ea:48:2b:6f:49:
6c:0c:17:c7:21:42:f7:5c:38:28:9a:bc:d9:dd:01:92:c4:ae:
46:d7:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:17 2025 by rpki-client