Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
File: WbYCCZDrELBT1WtH4sg0paYmtdM.mft (raw, json)
Hash identifier: Cr9MOEsCWlRltf+YhZCYhrhRg3nQMk3IY2fL1Jtu3bM=
Subject key identifier: 29:99:4D:C7:89:E3:7A:14:3A:53:42:33:E0:04:7D:24:DD:BC:86:B9
Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
Certificate issuer: /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Certificate serial: 019A71B8EC1F1208FF829B017A33C591BE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
Manifest number: 06A2
Signing time: Tue 11 Nov 2025 07:02:15 +0000
Manifest this update: Tue 11 Nov 2025 07:02:15 +0000
Manifest next update: Wed 12 Nov 2025 07:02:15 +0000
Files and hashes: 1: WbYCCZDrELBT1WtH4sg0paYmtdM.crl (hash: +56WUKKbeOM94zLl3fFVwuq+WSYZwtB/khu8YHB9Dk4=)
2: ibsagXyULK6_yzLYa3pXOko3XKU.roa (hash: 03/iKlKS42XpS4t49YCxIL0w2I8iyQ6yxzMTAdH/Ztc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ec:1f:12:08:ff:82:9b:01:7a:33:c5:91:be:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Validity
Not Before: Nov 11 07:02:15 2025 GMT
Not After : Nov 12 07:02:15 2025 GMT
Subject: CN=29994dc789e37a143a534233e0047d24ddbc86b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:7b:13:54:3b:54:25:18:1b:96:a4:c7:32:
52:0b:92:08:2c:0b:3f:96:a6:c6:7e:12:64:d1:f0:
f6:bb:05:a3:07:30:74:f0:13:3e:06:86:1a:25:e0:
ce:fa:3a:e8:93:55:43:d3:11:02:5f:8a:de:06:06:
a5:0b:d1:79:62:c3:95:72:39:1c:c4:d9:fc:ed:4c:
3a:2d:bb:f7:a2:d6:0e:95:09:37:a2:49:3d:d7:e5:
37:2d:27:47:1c:48:26:7e:1b:58:3f:b1:66:c6:97:
a5:e4:2a:c2:e5:64:64:d6:61:95:4d:13:5f:9d:7f:
f6:50:64:8a:1a:2f:7b:b2:b3:75:d9:5f:43:9f:5a:
77:be:45:64:68:12:cc:58:b4:d2:75:c9:52:28:0d:
d0:22:e2:27:a5:46:b4:f6:c8:a5:49:13:65:68:d4:
e1:15:19:98:9e:50:e7:93:38:69:89:ea:49:af:48:
17:8f:10:f4:5f:53:46:b1:10:6d:7d:07:47:2f:9c:
1d:7f:d7:e6:79:7f:97:86:43:5d:54:35:4a:68:31:
8f:a6:14:51:8e:59:08:4b:7b:69:42:f2:5b:2c:bf:
03:f6:91:0a:41:3e:51:f7:33:7b:0c:e7:69:fe:60:
e7:e4:3a:61:bb:c6:c1:d3:e4:ea:0d:03:b0:bb:54:
d4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:99:4D:C7:89:E3:7A:14:3A:53:42:33:E0:04:7D:24:DD:BC:86:B9
X509v3 Authority Key Identifier:
keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0a:98:53:1a:18:e0:32:9e:8e:45:2c:25:50:ca:0a:22:8d:
0a:d7:5f:da:50:6f:24:4f:29:31:15:59:e2:c5:47:c2:f4:38:
ad:09:fe:74:45:e0:be:36:d2:7d:c9:36:29:b5:60:f5:95:30:
1f:7c:81:72:e8:5a:61:b8:b7:6a:85:86:aa:23:79:8b:95:01:
7a:9d:6e:82:1b:23:02:0a:60:b6:53:b4:30:f7:0c:c9:cb:7a:
ed:1a:15:e8:cc:07:74:69:dc:48:d8:46:ec:48:2c:43:63:de:
7b:b2:ac:55:f6:86:d6:46:d5:89:d1:01:ba:2d:2e:2e:87:1a:
f4:4b:43:42:1d:50:88:28:78:f5:3a:0f:7f:d9:42:c2:2c:da:
34:d4:d1:27:bd:ba:df:54:d8:bb:19:d5:df:3b:84:f5:19:b6:
1c:4f:bd:0a:eb:da:01:98:94:4e:a4:cc:71:ad:28:64:fe:ff:
5c:68:d1:56:21:59:54:61:c4:8a:da:4c:99:b5:b1:d2:4f:3b:
ac:4f:af:fc:fc:4e:5f:35:ab:4a:8b:58:b0:7a:3d:c2:59:73:
39:bd:13:c9:7e:5a:ef:11:4b:86:07:a4:6f:c0:b4:42:36:66:
11:f5:7a:14:a3:95:a7:f6:c7:6d:a7:a4:e5:3a:62:51:e4:9c:
ac:23:94:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:38 2025 by rpki-client