Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
File: WGesaYXMCz_qIWlFyS6y6TIYlAM.mft (raw, json)
Hash identifier: SEl0ueWHkq2Slmfj24tR+teIl0NsnVmKmQtnmyAa6IU=
Subject key identifier: CD:74:9D:4D:44:40:69:C8:25:3A:91:C0:04:56:3B:00:F4:CB:65:C4
Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
Certificate issuer: /CN=5867ac6985cc0b3fea216945c92eb2e932189403
Certificate serial: 019A706DFE1AEA96C1246B6910441BE66402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
Manifest number: 08FD
Signing time: Tue 11 Nov 2025 01:00:47 +0000
Manifest this update: Tue 11 Nov 2025 01:00:47 +0000
Manifest next update: Wed 12 Nov 2025 01:00:47 +0000
Files and hashes: 1: WGesaYXMCz_qIWlFyS6y6TIYlAM.crl (hash: HiLEEgpuutA/hLJYcwPIrrcjpzw8YGbARkwPa5+KKFs=)
2: bnhhztuxFibvur8FNpe0Q4uP7wo.roa (hash: KQsITvPg/PJVER0mAbZoTouNCOSRyBSHFqtg7Z3silI=)
3: hPuuxvG6wf_iyGajLZm0PrPRNTE.roa (hash: SqhFWrnGhewNDVxVRZLbY/mjVnrnZ6zHK448/hSwl8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:fe:1a:ea:96:c1:24:6b:69:10:44:1b:e6:64:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403
Validity
Not Before: Nov 11 01:00:47 2025 GMT
Not After : Nov 12 01:00:47 2025 GMT
Subject: CN=cd749d4d444069c8253a91c004563b00f4cb65c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:3d:c0:b2:25:61:a8:d1:5e:48:f2:d3:9e:
ed:a3:7d:6c:f6:34:bd:e7:1a:31:93:4e:95:d6:89:
a3:f9:bf:27:8b:ef:28:76:83:a1:9c:c8:99:f3:7a:
dc:68:2a:2f:aa:23:04:fa:bb:0f:63:4f:2f:2b:79:
78:e2:b9:1d:f4:a2:00:1f:b9:d3:a8:ed:5b:f7:bb:
e3:c0:8f:d1:dc:f9:0e:5d:8c:9a:80:ee:89:fe:e3:
89:29:85:57:f7:b4:05:28:39:8d:97:e9:89:3c:0a:
15:04:4c:45:c1:a3:c8:db:5a:73:d9:d0:c5:9e:9c:
4d:d1:d5:f5:3a:1c:02:c5:d2:16:20:ea:fb:23:00:
fc:1a:31:ec:7b:a5:82:5e:bb:6b:31:5b:e7:89:48:
d0:51:87:da:26:aa:25:27:2c:2e:42:3c:9d:48:5a:
39:d0:f0:ad:ac:69:63:eb:47:5c:b7:41:16:7e:91:
05:c6:87:7e:ec:91:19:36:1e:89:f5:02:7e:5b:9a:
e6:73:33:ab:f7:ee:f1:de:7f:40:08:7d:45:c2:50:
86:8b:42:24:19:05:5e:d0:dd:7d:a1:a0:8b:68:73:
26:be:04:85:a9:ba:98:85:1d:8a:70:cb:3e:d0:ed:
86:38:d4:2c:bf:58:20:9e:d6:d3:ea:44:8a:09:66:
59:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:74:9D:4D:44:40:69:C8:25:3A:91:C0:04:56:3B:00:F4:CB:65:C4
X509v3 Authority Key Identifier:
keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a2:9f:75:cc:f5:b4:e9:c3:ee:28:e2:d2:ee:5d:c2:b5:21:
fa:ad:14:e0:aa:39:c0:30:03:96:83:f9:5a:e6:65:44:50:ac:
68:ac:5b:5c:a3:ad:e5:be:0b:bf:e9:ab:d5:68:55:f6:a7:66:
3d:db:ed:a3:f8:5a:69:af:2f:f8:70:68:51:12:3a:eb:95:8e:
e2:ee:4c:e6:f0:b5:dc:b1:5d:55:ca:90:2e:c2:23:67:03:03:
82:3c:be:22:b8:a8:95:5d:73:f4:d1:77:49:46:ef:e4:b0:fe:
7c:27:85:fd:80:c0:a3:db:36:76:17:bb:69:cd:70:c4:9c:f6:
54:72:d7:a7:81:d1:6f:d5:f2:2a:89:94:4d:79:ad:1b:b0:ef:
c0:a1:10:13:eb:57:1f:de:d4:a0:b7:0f:99:af:b6:76:6a:17:
79:20:f4:a9:68:64:86:2a:10:bc:59:74:2e:21:52:7d:3a:93:
7c:4c:f2:59:ac:2e:a4:45:bb:4a:59:68:a9:48:59:29:db:93:
34:db:60:54:f7:39:69:1c:79:3c:6b:d2:e2:fd:10:f1:31:eb:
d2:9a:f9:97:24:55:d3:db:d4:69:c5:e9:5c:2c:fc:de:d9:27:
3d:4f:aa:b5:d4:c1:e4:56:03:80:0a:ac:d2:5f:c9:f7:25:66:
5b:27:11:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:45 2025 by rpki-client