Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
File: WwrDjepqcErbq6k4HB3AI1bTqpA.mft (raw, json)
Hash identifier: NLycMCsbeC66vo0QkArENdgKi1OxcWtAvw2kSskb2UU=
Subject key identifier: 7D:E5:BA:39:0C:23:ED:D9:7E:1F:8C:A7:10:64:AD:5A:20:3D:B8:E5
Authority key identifier: 5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
Certificate issuer: /CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Certificate serial: 019A72258D6DE31866409A3560858EC02ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
Manifest number: 0A7B
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: WwrDjepqcErbq6k4HB3AI1bTqpA.crl (hash: tpJzg/KcbnXbpKRJGv+OgQSB4EA1up7AGkXuKKhtW2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8d:6d:e3:18:66:40:9a:35:60:85:8e:c0:2e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=7de5ba390c23edd97e1f8ca71064ad5a203db8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:d1:fd:62:a9:db:7a:46:c9:14:72:d2:1b:
be:f2:fb:c6:b2:9c:36:94:51:0c:f9:d8:d7:67:6e:
76:9d:d5:c2:7c:9c:01:15:54:f9:11:36:00:40:cb:
0f:e4:bc:73:c3:ab:ed:5d:af:62:8e:46:c1:6d:de:
72:06:8a:dc:f6:08:10:ea:47:e2:2a:e7:f4:a5:bb:
0e:06:b8:7c:a6:5a:dd:27:02:af:7a:87:88:f3:ed:
5f:35:8a:2e:58:7b:ff:b0:22:1f:b5:46:80:7e:10:
f2:58:eb:45:fd:c0:15:2d:f6:af:9f:6e:56:9c:e1:
0b:f7:fc:11:2f:68:2a:fd:d7:9a:cf:fb:3b:ef:a7:
b0:a0:ba:1d:da:45:eb:ec:8e:3e:aa:d7:8d:3b:0f:
48:3a:88:bf:0d:3c:28:3b:07:42:ec:e5:2f:29:1d:
58:0b:5c:07:22:ad:74:72:07:08:96:c9:2d:2a:29:
74:ef:df:cb:2d:cb:7e:58:c9:27:ff:da:e0:7e:b0:
da:71:63:a3:3e:3f:21:a5:b7:11:a8:1d:86:24:08:
b0:ad:ae:98:35:4f:00:ac:97:f3:d9:9a:4c:3a:df:
b3:20:60:29:f9:88:3a:52:f1:2e:53:38:3c:0b:7e:
71:a3:25:d8:3c:60:d1:3e:e3:df:55:39:c7:33:92:
22:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E5:BA:39:0C:23:ED:D9:7E:1F:8C:A7:10:64:AD:5A:20:3D:B8:E5
X509v3 Authority Key Identifier:
keyid:5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b3:a6:35:3c:b0:a5:c2:b2:af:79:28:40:12:23:c9:8c:b0:
46:28:5d:bc:a5:29:a2:88:75:17:e3:25:a1:53:bb:35:7c:6f:
c0:8f:cd:1f:f6:2f:83:c5:3e:f4:fa:de:ea:80:ec:1d:d3:e4:
f6:98:7d:0e:3d:5a:76:b8:2d:4c:30:e5:49:ff:f2:4f:e8:07:
43:01:a9:6d:b1:95:f6:dd:59:77:72:db:62:84:ed:93:88:b4:
c6:f9:3d:d6:27:63:19:a3:79:4e:4b:03:25:29:5a:3a:64:ad:
69:f0:2c:18:72:a6:4b:49:72:5f:ba:bb:7a:80:48:ac:d2:60:
7b:e2:28:29:80:28:66:68:1f:d8:03:f0:a4:9d:f9:df:fe:e5:
b3:ed:53:82:31:77:79:cc:36:c5:41:88:99:4a:98:fe:bc:b1:
d7:ca:f0:12:03:24:b0:2f:ee:a2:63:ae:47:67:fe:e3:03:16:
0f:33:09:5a:9f:b0:b8:4d:dd:27:9a:82:a2:7f:15:52:8f:d2:
74:81:f0:c5:f1:e0:13:52:b2:0b:32:75:a3:ea:0c:91:f8:a8:
20:cc:58:70:41:cf:f4:79:1f:92:b3:17:ed:91:17:cb:68:44:
89:0b:d1:44:90:6c:ca:42:d9:0d:44:df:cd:76:b3:e0:74:3a:
cb:c6:8a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:14 2025 by rpki-client