Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
File: WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft (raw, json)
Hash identifier: waxFRXAp04NksXsrSWW7iEWaHh1p3vF6wj/Msqn3A38=
Subject key identifier: A6:FF:9B:1B:BA:97:AB:90:89:AF:00:BB:40:25:FA:6D:4E:09:96:01
Authority key identifier: 5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
Certificate issuer: /CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Certificate serial: 019A725CD225B74029089305DDB1A841B4B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
Manifest number: 0B97
Signing time: Tue 11 Nov 2025 10:01:16 +0000
Manifest this update: Tue 11 Nov 2025 10:01:16 +0000
Manifest next update: Wed 12 Nov 2025 10:01:16 +0000
Files and hashes: 1: WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl (hash: 6+54UZgtYXu4/U5kwwLdIbKLP8MWbWMI1SGK5ne4saA=)
2: euH012EDGUcPvCsGZK3_XSPmReQ.roa (hash: 4a2YJ6UV9i6dy+y4QlBQdoAoRR/Frnfv0MzkbXJqY/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d2:25:b7:40:29:08:93:05:dd:b1:a8:41:b4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Validity
Not Before: Nov 11 10:01:16 2025 GMT
Not After : Nov 12 10:01:16 2025 GMT
Subject: CN=a6ff9b1bba97ab9089af00bb4025fa6d4e099601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:52:67:2c:36:1e:20:ad:d5:ad:39:c5:54:
b4:5e:2c:0e:12:f6:e9:d2:0d:4c:43:e7:48:22:34:
3e:1c:d0:7e:c2:2e:dc:da:35:fa:02:13:a5:47:b6:
37:9e:f1:e8:e8:ae:eb:ab:37:ae:ac:60:d2:a1:4f:
81:63:06:ac:5f:4c:44:58:65:df:1d:c6:1c:83:8f:
88:b5:bb:04:1a:6a:93:e9:98:88:2f:3c:b8:a4:f5:
a7:fb:16:7f:25:2b:74:d2:31:50:ee:76:30:0d:6e:
7a:4e:63:79:6d:af:99:0d:12:c6:d2:99:41:37:bc:
ab:57:2b:1d:9f:84:49:2b:6d:b9:eb:96:33:7f:4b:
c8:b4:25:e6:95:6f:29:e9:10:46:0c:24:52:c8:40:
e7:cc:dd:8d:95:fa:0c:80:3b:24:da:75:d3:6a:fa:
a4:4e:d6:1d:0b:1d:18:43:8a:c5:66:7b:ab:6d:bb:
a9:f1:ad:b1:0e:89:94:ac:cb:e2:a0:11:0b:fc:16:
5a:1e:db:c7:d3:bc:fd:4b:86:b3:b2:cc:02:2b:58:
23:6a:39:47:a7:6e:17:60:3f:8d:7d:ed:41:c0:01:
3b:be:ba:3b:22:52:19:9c:32:ee:ed:ef:c2:4e:63:
32:5d:2f:08:f4:58:f1:d9:c9:2f:0b:ef:7f:3f:a0:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FF:9B:1B:BA:97:AB:90:89:AF:00:BB:40:25:FA:6D:4E:09:96:01
X509v3 Authority Key Identifier:
keyid:5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9b:a3:4b:d8:7f:d0:9c:89:c6:60:6e:6a:80:4d:85:a3:46:
6d:64:f4:5a:e3:49:64:f3:e7:97:56:f2:ec:81:fb:94:45:ca:
3b:45:62:e2:71:a3:8d:c0:8c:96:11:35:49:0b:64:c5:b5:c1:
30:8d:ca:e0:4f:2c:c4:25:64:57:97:c8:20:da:3f:d5:cb:4e:
85:d7:b6:db:ba:15:5a:a8:57:04:f1:44:e6:f5:7e:0e:35:aa:
80:61:05:c8:47:27:45:70:4f:d7:c2:09:a0:a5:35:1e:ea:88:
7c:fa:95:82:6e:1f:aa:84:4f:57:2f:4a:9a:91:64:e3:d3:3c:
f2:e5:8f:1a:ae:51:b1:2f:30:98:72:2f:31:50:70:60:71:a6:
1a:00:c1:c0:ec:77:ac:d2:01:8f:20:cb:bd:30:3a:55:b4:2a:
f0:da:b2:a0:dd:b0:d0:7c:0f:6c:b0:70:6e:a8:34:03:34:0e:
50:13:2b:76:d7:83:89:df:eb:2c:86:62:0e:79:b6:a7:b0:67:
f1:6c:0b:80:fd:3b:df:81:56:4b:c1:98:d7:c5:a8:fd:90:1b:
ae:46:ce:59:a5:fc:07:1f:38:e7:f2:fb:ea:ad:6c:7c:40:f8:
eb:85:e4:f6:18:48:3d:5d:30:14:11:4e:a5:ab:aa:61:be:35:
35:29:80:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:45:10 2025 by rpki-client