Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
File: WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json)
Hash identifier: Wyq9oNKqIGr/o1321c/yvwXcqKBXn4xAdJVrCEpoFPg=
Subject key identifier: 1F:21:69:EB:C0:E8:B4:47:B0:FC:C6:46:7C:FE:05:0E:90:5C:94:F1
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Certificate issuer: /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial: 019A72262EC1115308030B71BBB35A0A6C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
Manifest number: 0B9F
Signing time: Tue 11 Nov 2025 09:01:35 +0000
Manifest this update: Tue 11 Nov 2025 09:01:35 +0000
Manifest next update: Wed 12 Nov 2025 09:01:35 +0000
Files and hashes: 1: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: kVr72DvbP+hHSokuhwDbEmQu2TQ6jWWrVFNDaXsuFtI=)
2: ozGik-9_sBnUMoYXrZRViJEmIeY.roa (hash: 3AnFoieE3CjYtQiFDGskoD5Nyb6r911fFXwGIZ9/+iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2e:c1:11:53:08:03:0b:71:bb:b3:5a:0a:6c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Validity
Not Before: Nov 11 09:01:35 2025 GMT
Not After : Nov 12 09:01:35 2025 GMT
Subject: CN=1f2169ebc0e8b447b0fcc6467cfe050e905c94f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c6:33:2e:b5:9e:63:a9:a0:c9:5f:6e:9a:01:
a3:8b:92:8b:a6:aa:1c:05:9d:5b:f2:b3:99:42:2f:
55:b9:4d:a4:91:8d:96:b7:33:02:f5:94:49:77:a5:
32:15:95:63:48:5f:cb:79:31:49:b8:29:3c:e4:97:
c7:e1:89:78:ee:31:09:61:7a:9c:8b:07:fc:37:0b:
c4:c6:8f:06:2b:10:c8:84:76:44:1f:54:95:94:00:
6c:91:5b:b5:c1:14:20:bf:50:f5:21:e5:0e:01:c7:
6b:1d:7e:ca:b5:69:e0:e1:0f:c6:ad:c5:a4:bd:30:
ac:43:b9:a8:6e:5f:e3:36:fb:3a:ed:b4:1a:03:85:
ae:a7:bc:88:d1:7d:29:a3:94:a5:10:ce:1a:08:ba:
b6:72:42:db:14:06:15:1b:45:ed:61:21:46:4f:7a:
91:64:f4:da:8f:cb:d0:ff:ef:8b:f5:a1:e3:1c:6a:
e7:3c:20:4b:49:fe:c3:1c:cd:9c:86:85:28:92:98:
42:45:f3:46:8d:7d:32:cf:e7:36:08:8a:78:6d:67:
d7:74:3d:1c:6d:37:81:b1:06:77:d8:82:71:3c:fa:
02:82:84:99:a0:87:0c:bc:b7:b9:2c:3d:04:d0:13:
f5:83:a8:52:ea:79:c4:dd:61:5c:5f:80:f7:81:55:
c6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:21:69:EB:C0:E8:B4:47:B0:FC:C6:46:7C:FE:05:0E:90:5C:94:F1
X509v3 Authority Key Identifier:
keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ae:2c:67:47:ab:b1:3e:2d:3b:d2:34:a5:7d:88:79:c4:f6:
ea:34:d0:72:9f:22:bd:73:35:d8:22:bc:a2:54:d5:bd:7a:10:
9c:3b:fb:6d:54:81:8d:b9:d4:f4:89:ca:d9:00:1f:c7:77:68:
97:cd:19:bd:a0:e3:68:ed:43:55:97:57:59:5c:b9:cd:ce:90:
d8:1d:b7:d4:52:4c:2c:21:7f:f3:ea:83:c4:e8:4e:dd:3c:4e:
4c:89:5c:16:f8:c8:d1:85:ce:7c:8d:4c:80:37:41:3b:f8:28:
da:72:72:24:2e:de:65:54:51:77:a9:8a:f1:6e:f8:03:1d:52:
02:94:e6:e8:00:50:6b:79:6e:23:4d:a3:2f:3b:ef:da:3d:3d:
3d:cc:1c:8c:fb:b7:d7:91:45:9c:db:2b:7b:eb:cf:e5:d1:44:
5b:fc:ee:d9:a4:9c:dc:b0:fb:91:9f:69:2b:14:05:e7:98:fc:
50:df:74:88:45:68:6d:3e:37:ae:0a:23:8c:30:16:28:87:d0:
47:95:1f:28:2a:59:a4:18:a3:5f:11:a9:ba:ae:54:a1:ee:43:
55:ad:2d:5e:ff:0f:ce:4c:1c:3c:9b:36:38:bd:c8:40:ca:a0:
cd:7f:0a:c6:d4:86:c9:fd:d1:96:ce:3a:96:42:a9:4a:0a:84:
34:ad:be:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:28 2025 by rpki-client