Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
File: WmEQLtTWbc2VLeATBOCv4ThNAL8.mft (raw, json)
Hash identifier: d7sr+FmafI2G3q7HP9CWaNWd891T6U/jrmoZXY8PMUA=
Subject key identifier: 05:F5:26:54:F0:C9:0F:40:6E:3D:37:60:2F:EC:C8:40:5C:65:94:E1
Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
Certificate issuer: /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Certificate serial: 019A0FDEE3ED9CD00C7321C3F8D723AB9A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
Manifest number: 11E4
Signing time: Thu 23 Oct 2025 07:00:56 +0000
Manifest this update: Thu 23 Oct 2025 07:00:56 +0000
Manifest next update: Fri 24 Oct 2025 07:00:56 +0000
Files and hashes: 1: WmEQLtTWbc2VLeATBOCv4ThNAL8.crl (hash: ZG+luuFUjyphaUhbT8qEydcjWhainunafsqDfO5Lag8=)
2: aq4ogcfzZpEnM-qzTShzrKkmLVI.roa (hash: lrZqdOLgogubh9kYu+yXTtvdVJVSGrLVk+ZXNc+U3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:de:e3:ed:9c:d0:0c:73:21:c3:f8:d7:23:ab:9a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Validity
Not Before: Oct 23 07:00:56 2025 GMT
Not After : Oct 24 07:00:56 2025 GMT
Subject: CN=05f52654f0c90f406e3d37602fecc8405c6594e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:84:5b:d7:4e:f3:b3:af:21:85:d3:d5:54:
7a:e4:b5:d0:d3:17:44:57:93:b2:a7:94:8f:5c:be:
62:06:6b:60:56:db:31:31:2a:80:9c:9d:03:06:e4:
d4:a7:1f:6e:5c:b3:99:83:f5:69:13:b5:9c:4f:7b:
ec:9f:52:50:3f:d3:ad:19:e7:32:32:0e:dc:fa:6c:
8f:81:d1:59:55:03:9f:2b:40:4c:c5:7c:0e:90:b8:
df:b0:ec:d1:21:9b:d2:4b:e7:6e:78:92:27:3c:8c:
3c:38:a1:63:3f:43:3d:ab:d8:c6:dc:55:4e:51:49:
42:de:42:f5:89:b7:83:51:be:f3:82:37:6d:56:f6:
b9:c5:64:9d:1d:4f:89:4f:1e:b6:0a:6b:40:88:d6:
62:13:b2:94:ea:80:7d:29:29:c4:d1:f3:32:03:56:
f9:22:ba:20:19:c2:ae:91:3a:48:41:85:21:12:84:
e1:94:8c:a3:66:f6:76:65:31:bf:9f:8a:5c:26:9d:
29:82:fc:73:67:df:99:b4:23:a7:26:7f:f4:e2:a5:
bb:35:1c:01:83:e1:52:f3:ac:43:c8:77:56:e6:53:
fe:78:02:e8:62:4a:ff:f3:f8:2f:86:d5:1b:4a:a2:
1b:f8:3c:48:25:18:c5:90:db:dd:81:c4:17:7d:b2:
bc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F5:26:54:F0:C9:0F:40:6E:3D:37:60:2F:EC:C8:40:5C:65:94:E1
X509v3 Authority Key Identifier:
keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fb:53:b6:36:1c:70:ce:14:d8:1c:d1:78:dc:ce:84:24:41:
22:7d:dc:47:d4:c7:2e:1e:48:76:15:ff:4e:64:4f:49:6f:73:
00:18:09:2e:00:97:71:4c:6b:3f:b0:0c:a0:5d:f7:e8:ec:45:
cd:88:f5:b5:1f:88:cd:be:02:63:7d:92:a4:52:08:2c:92:f9:
fc:30:35:54:67:47:09:33:60:1f:cd:3c:5c:80:4d:77:7e:56:
21:e4:d8:3b:b0:09:f6:82:83:5c:53:4c:b0:5a:84:97:07:d2:
e6:9b:18:ab:96:0d:d2:3d:1b:ae:a1:4c:22:35:a5:34:2f:13:
c3:aa:51:10:3f:03:92:73:bc:06:e8:28:f9:4a:6e:79:21:c5:
6b:41:ee:40:e5:44:d5:c1:f3:18:b1:0f:b9:7d:42:3b:97:00:
15:75:ce:d6:97:3f:40:68:b5:89:03:eb:c3:ed:8f:b8:96:43:
93:36:60:ea:2e:49:6e:4d:98:85:98:87:70:48:08:00:e3:39:
a5:32:27:eb:f4:4c:f7:f2:f2:2a:36:85:b9:38:e2:e2:b8:61:
8f:7c:44:b8:09:b3:8e:eb:78:20:ee:b5:42:69:ac:14:4c:ba:
6e:61:db:5a:53:7c:54:3f:91:7f:f0:28:df:ad:2b:88:43:87:
8d:28:d5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 16:41:36 2025 by rpki-client