Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
File: WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft (raw, json)
Hash identifier: EsReWuK97Wfg9Yaqeuf+zCiP4c5ft46183XvNo6s8qc=
Subject key identifier: 47:B1:4E:01:73:C2:A4:6F:D2:90:98:9C:37:C2:85:BA:D4:79:31:0D
Authority key identifier: 58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
Certificate issuer: /CN=58dd42ab3460279709c134b570f76e34e4d95b91
Certificate serial: 019A7293EBECAD0996468E0D0E75E232931C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
Manifest number: 1444
Signing time: Tue 11 Nov 2025 11:01:28 +0000
Manifest this update: Tue 11 Nov 2025 11:01:28 +0000
Manifest next update: Wed 12 Nov 2025 11:01:28 +0000
Files and hashes: 1: WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl (hash: fpmubjRQ7FZYPYAK6S9eLZH4p9Mnj3FI54E68EM9SQY=)
2: fyfyl5NsL0BWisw7TSdl5mH8Mlw.roa (hash: /XQvoo54R4s6GryMB7e6F8gsZAvkqlu3TTwYzBkmBbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:eb:ec:ad:09:96:46:8e:0d:0e:75:e2:32:93:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dd42ab3460279709c134b570f76e34e4d95b91
Validity
Not Before: Nov 11 11:01:28 2025 GMT
Not After : Nov 12 11:01:28 2025 GMT
Subject: CN=47b14e0173c2a46fd290989c37c285bad479310d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:61:cf:02:df:5e:17:78:9e:a0:0d:b1:d3:
25:29:27:90:32:45:6f:86:0d:55:bb:89:75:ed:ab:
56:2e:ff:61:fc:15:6b:85:b2:cb:30:ae:fa:92:25:
2a:a2:87:01:dc:e1:2c:6e:7d:5e:73:b3:54:5a:a1:
85:79:1e:5f:8f:6a:36:10:ef:af:6e:5d:6b:96:8d:
32:23:94:d3:a9:65:5b:0f:a1:df:77:ac:85:a7:77:
1b:34:52:a5:c9:3d:1a:70:4a:0d:33:27:dd:8f:9b:
68:59:73:57:50:a2:9b:e9:57:91:ef:54:69:01:eb:
cf:ef:9e:e4:dc:c0:bf:33:1e:1e:ba:a1:26:bf:ed:
6f:c8:bf:6c:aa:55:87:47:6f:40:9a:b5:fc:7f:fb:
02:8b:52:ba:47:a5:99:78:8d:7c:d6:74:35:39:20:
8c:48:34:fa:37:54:c6:a7:a3:7b:8d:de:a7:02:a8:
11:e5:7c:6f:49:7a:13:cd:d6:32:9b:78:cb:70:6a:
ac:14:68:7f:e0:45:c5:9e:86:18:f1:e3:90:c6:98:
47:8b:38:1b:ca:a7:86:85:5d:15:58:1f:3e:c1:f9:
9f:a7:bc:10:e0:83:27:c1:aa:c0:8f:73:20:c8:68:
56:b2:de:9e:47:36:04:19:7e:ad:0c:27:1f:90:84:
4b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B1:4E:01:73:C2:A4:6F:D2:90:98:9C:37:C2:85:BA:D4:79:31:0D
X509v3 Authority Key Identifier:
keyid:58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:84:c8:58:16:d6:4c:34:e3:59:96:c1:f0:5c:56:01:49:66:
77:10:8e:12:e3:e0:56:0d:e3:3a:b5:7a:45:1e:9a:99:50:6c:
9c:4c:ad:68:35:9f:89:12:f5:55:42:a5:1b:70:72:0e:f8:9c:
3c:30:13:15:31:1b:17:16:75:c5:54:c8:6e:c5:de:bc:dd:d6:
78:1a:88:81:75:c9:c9:f2:6d:74:d7:09:7d:69:85:a4:a5:42:
9f:a1:ed:2d:37:c6:0d:d4:f0:82:4a:0d:d0:fe:24:2c:86:2e:
a1:c7:ab:1b:fd:b7:cc:5e:52:8a:4b:32:c7:f6:21:bd:57:23:
0d:8b:07:01:ac:0b:09:fa:f6:34:9e:bf:cc:66:8a:01:76:a7:
3c:e3:70:63:a6:36:10:09:92:12:2b:d8:5c:1c:e7:1b:ca:74:
79:67:f7:94:ef:92:6e:36:e4:6f:41:91:66:4e:ac:05:1b:e9:
6c:f8:2d:4a:c1:c0:e4:15:56:68:8b:ff:6d:71:b6:54:87:5f:
a2:73:27:76:ff:44:fa:8a:4e:7b:54:59:c9:60:ca:6d:11:9a:
cd:d0:93:3a:ca:d5:cd:34:e3:ee:6c:62:e1:ca:c7:53:c2:34:
1d:65:c8:4b:2e:dd:c2:93:49:57:85:75:ce:6b:b6:c7:01:cb:
61:74:ea:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:48 2025 by rpki-client