Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
File: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft (raw, json)
Hash identifier: w3yVN37Hi8zYlX4GmJ7k4puD5mAXFoVvrvS7MAdRF5Y=
Subject key identifier: 99:98:F7:D3:77:85:45:F5:B0:5D:DF:F5:27:99:5A:00:9D:C8:AC:55
Authority key identifier: 5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4
Certificate issuer: /CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
Certificate serial: 019A7225C9447867E0A9BD3C426187DBA777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
Manifest number: 15BD
Signing time: Tue 11 Nov 2025 09:01:10 +0000
Manifest this update: Tue 11 Nov 2025 09:01:10 +0000
Manifest next update: Wed 12 Nov 2025 09:01:10 +0000
Files and hashes: 1: 52gpXjI8Kd7Tv-YmaRlcfsM4RAk.roa (hash: mEm534ZT6ZgaZ/3v86vVc5+tMaW3MbmkjCPIio5FpX8=)
2: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl (hash: vVpnwIAV2cNkfWgMB7YBXA3LchvGsYCj/cPp4RCMkmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c9:44:78:67:e0:a9:bd:3c:42:61:87:db:a7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
Validity
Not Before: Nov 11 09:01:10 2025 GMT
Not After : Nov 12 09:01:10 2025 GMT
Subject: CN=9998f7d3778545f5b05ddff527995a009dc8ac55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8f:0f:f4:d4:ff:ad:59:1d:1a:96:5e:2d:51:
40:d4:c0:3f:3d:21:eb:9a:35:29:03:0b:30:2a:f9:
5c:00:ea:10:ca:73:8b:c9:42:cd:cd:3d:c1:0a:39:
88:17:94:40:d9:33:52:ae:e5:c4:10:f7:4d:df:ca:
aa:1a:32:68:63:76:ac:e0:24:3c:90:60:60:2f:d9:
2a:4a:d1:6f:8b:0f:df:c4:66:39:b3:ba:dc:26:f6:
e9:4f:83:64:9c:93:82:2b:4f:b7:33:8d:1a:e9:39:
24:d3:f0:1e:ca:6a:bf:39:e3:c4:20:87:69:f2:c8:
a4:36:cf:32:99:dc:7d:71:10:1d:75:a8:7c:39:21:
09:fc:f7:f1:29:03:93:75:d2:c5:95:11:09:28:a0:
41:27:47:93:4e:18:93:79:be:3b:9a:d6:5b:b5:d5:
b9:b2:35:8e:8d:af:e6:33:b4:1d:50:e8:ae:12:0a:
2e:6b:e6:db:d4:6e:e1:ca:25:ba:44:7a:94:07:55:
e3:b3:19:d0:66:de:e1:35:74:54:f5:f9:00:c1:73:
c8:f9:b3:56:0a:55:ef:1c:35:15:d0:55:7b:55:64:
aa:c0:12:37:a0:15:c1:95:78:14:2b:44:9c:11:59:
09:16:47:a6:53:bc:f2:29:b4:05:2b:08:4c:38:2f:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:98:F7:D3:77:85:45:F5:B0:5D:DF:F5:27:99:5A:00:9D:C8:AC:55
X509v3 Authority Key Identifier:
keyid:5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:34:1d:04:69:13:fe:f5:95:6b:3c:1e:43:6f:c7:c5:e9:c5:
58:98:8d:23:73:71:27:90:3f:c5:d4:b8:7c:c0:ed:37:2a:b1:
d7:9f:36:e2:1f:f6:c5:dc:7a:06:8f:b5:08:b6:7c:d0:5a:35:
89:54:3d:7d:dd:ad:49:95:4f:b9:bf:44:07:1a:e8:1d:a0:36:
9c:60:01:17:0d:11:87:95:7b:2d:33:f0:6e:1b:a2:67:3e:ed:
6a:ab:45:de:6e:d8:88:12:c6:f2:bc:ab:88:ea:ac:c7:0b:b3:
ed:2d:8c:af:8e:dd:e1:4e:14:ed:07:a4:ae:f7:f1:7f:9e:79:
79:c0:be:eb:f3:c3:40:3a:0a:e2:c8:68:f9:3b:ab:13:e8:3d:
77:26:33:15:7a:5a:5d:c4:39:cc:db:48:d4:a8:6d:06:86:dc:
2f:01:7b:f7:ec:e5:00:c5:01:d1:3f:92:10:a7:3c:f9:81:e1:
e5:d9:7e:d7:60:d1:83:2d:61:3a:77:96:ef:f7:a5:7d:31:87:
77:d6:78:1b:bf:59:03:44:9d:9b:64:4b:6e:86:e4:a2:ea:98:
f8:a1:3f:d0:f3:a9:b0:90:7d:8d:c3:71:f9:7a:ce:73:ac:e9:
5e:97:cc:4d:e3:0d:84:ff:79:b0:63:1c:ad:01:71:3b:f8:dc:
73:38:02:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:08 2025 by rpki-client