Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft
File: WMV8B555WnlrR6ftMvBysFipOm4.mft (raw, json)
Hash identifier: O2UjVP8weWqmLLVVH/iOyZlTFZYl6/rlu6ToPzzQiVo=
Subject key identifier: 35:FA:F4:5E:D8:DF:D4:53:3A:BF:DB:EE:64:CE:9D:E2:1E:4A:A5:29
Authority key identifier: 58:C5:7C:07:9E:79:5A:79:6B:47:A7:ED:32:F0:72:B0:58:A9:3A:6E
Certificate issuer: /CN=58c57c079e795a796b47a7ed32f072b058a93a6e
Certificate serial: 019A714A0249B967412AD9C4445818B8327C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMV8B555WnlrR6ftMvBysFipOm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft
Manifest number: 043C
Signing time: Tue 11 Nov 2025 05:01:06 +0000
Manifest this update: Tue 11 Nov 2025 05:01:06 +0000
Manifest next update: Wed 12 Nov 2025 05:01:06 +0000
Files and hashes: 1: 6Ih0znWdvPnsz1jxHZRvN_VDOZ0.roa (hash: 0+EXXpyshs7NPQdkK6MvrkAg2151xSHnQxOuUtZbYMA=)
2: WMV8B555WnlrR6ftMvBysFipOm4.crl (hash: su4S7MX36C888ChSML8K8ZcvdvZ5eeASK7RArgss7Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WMV8B555WnlrR6ftMvBysFipOm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:02:49:b9:67:41:2a:d9:c4:44:58:18:b8:32:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58c57c079e795a796b47a7ed32f072b058a93a6e
Validity
Not Before: Nov 11 05:01:06 2025 GMT
Not After : Nov 12 05:01:06 2025 GMT
Subject: CN=35faf45ed8dfd4533abfdbee64ce9de21e4aa529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:83:86:63:d2:a4:6f:d5:fa:07:f1:db:e9:
8c:83:66:43:3f:3b:c1:63:ea:0a:0e:32:bb:09:f6:
2b:99:3a:08:2d:42:c0:4c:15:88:45:60:e2:cc:d3:
c9:a7:1a:a6:ef:b0:2b:3e:61:3b:a8:11:0c:04:37:
48:3d:eb:84:ac:95:70:46:3a:17:4a:0c:e7:84:bb:
55:86:a3:1a:3d:14:c2:29:32:46:1d:b5:df:7d:2f:
bf:c1:38:c9:89:e1:6a:2b:33:32:e2:b5:d9:78:6c:
d4:b0:32:61:c7:bb:86:bf:ee:c1:a4:31:f3:2f:f9:
49:75:1d:63:c7:df:fd:b5:5e:9b:22:e5:a1:11:a5:
f9:0c:63:01:9f:dd:5e:da:0e:81:79:b8:b1:00:7a:
f1:b4:43:ae:28:65:49:cc:17:a9:42:19:6d:26:13:
7f:16:58:5f:a7:6b:af:b9:9b:57:38:81:07:4b:9e:
96:d4:89:25:90:23:77:0a:fa:3c:2e:26:cf:f5:d2:
4c:0e:70:51:2b:03:e7:47:46:bf:39:17:6a:da:6f:
5b:a4:a1:14:38:3a:ef:1c:d0:35:7c:63:92:f3:b5:
7f:a6:3b:9a:30:ef:80:c9:46:9e:b6:7b:f2:9f:19:
8c:47:d1:59:8d:e3:8b:65:98:50:b5:93:80:74:a3:
a4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FA:F4:5E:D8:DF:D4:53:3A:BF:DB:EE:64:CE:9D:E2:1E:4A:A5:29
X509v3 Authority Key Identifier:
keyid:58:C5:7C:07:9E:79:5A:79:6B:47:A7:ED:32:F0:72:B0:58:A9:3A:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMV8B555WnlrR6ftMvBysFipOm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:17:a2:89:35:06:5a:76:cf:c7:13:6b:c4:a9:1e:cf:12:af:
e0:36:a9:15:35:0a:07:9f:e1:6b:77:c1:a4:e2:08:e6:9c:59:
65:76:5b:cd:e2:fd:12:34:df:74:0d:ba:03:7f:e8:8b:de:1a:
7e:19:56:2b:59:ba:da:bf:6b:54:04:d4:48:24:37:2d:76:56:
e7:a2:0d:79:87:ac:c0:20:b2:a1:84:2a:8d:33:0c:22:99:a2:
fc:cd:0f:f5:b4:30:84:46:4f:68:4d:cf:17:2c:ee:b1:be:4f:
2a:c8:85:fe:36:d4:5c:01:3e:c5:53:7e:d6:4e:18:47:93:59:
2a:18:d2:34:f9:fc:da:a2:d2:38:9d:7a:eb:de:5a:10:e3:9e:
7a:ae:31:d7:e3:53:83:8c:19:17:27:17:7b:c0:05:1f:b2:e7:
2d:78:33:f3:db:be:1e:ac:9e:24:f1:a2:9b:b3:ed:d4:54:55:
36:28:ec:ea:b2:33:05:8e:74:a9:5c:bb:3e:94:7c:11:91:0a:
05:f0:f3:25:94:db:9f:e4:9b:57:e3:3d:73:90:d2:0c:4b:f5:
3f:4b:a1:95:21:df:26:f9:f6:f2:67:51:da:2b:94:1a:f7:ab:
ed:2d:f0:25:c8:b6:d3:a6:de:3c:bc:a8:2a:92:33:6c:49:64:
f0:b1:1b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:59 2025 by rpki-client