Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
File: WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft (raw, json)
Hash identifier: Zhea8XdEiRkL4MK09HXxHIcd5xvg3a6vdss4Y0eee40=
Subject key identifier: 9A:26:12:67:66:0C:1C:77:3D:3F:79:0F:D0:EC:6D:99:F0:CD:55:F6
Authority key identifier: 59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74
Certificate issuer: /CN=596a5fee9345fcd48010348877b7853afccc6474
Certificate serial: 019A71EECAFE20D06B49D52AEB86D8ADEF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
Manifest number: 05CA
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl (hash: NAqDGGp9gfAe/MrMKw2tR+e+G0RM9CNz5GO5vP090Lg=)
2: _dX4f78r8ar055s65dZPENw-y4Y.roa (hash: YAHCWNUUSCjGUaMNs/qPZDcoPmc5Fkj8HR1jTR9dAy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ca:fe:20:d0:6b:49:d5:2a:eb:86:d8:ad:ef:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=596a5fee9345fcd48010348877b7853afccc6474
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=9a261267660c1c773d3f790fd0ec6d99f0cd55f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:1c:31:d9:19:dc:58:c3:5e:a8:a3:6e:65:
b0:c7:7a:0b:1e:92:d5:8e:2d:f3:4e:c5:fe:60:84:
07:7c:5d:5f:f8:ef:32:4a:bf:c1:83:7d:2c:05:60:
8e:a9:ce:76:df:7d:38:4c:d9:82:8d:c1:39:92:50:
96:23:86:5a:0a:16:1e:1d:36:7a:f6:35:cd:1b:a6:
55:c8:65:c4:51:08:67:fd:93:79:65:68:70:1d:4e:
51:ed:e9:08:9f:dc:7d:29:99:c6:ea:0d:7d:2e:7d:
6c:70:47:c4:33:c0:2a:23:07:c0:73:43:e5:77:9c:
86:c8:ef:af:de:62:76:ae:51:db:aa:24:c1:66:46:
f4:de:ca:c4:1a:70:ac:6d:90:d9:d7:64:53:62:ad:
95:4f:3d:76:21:59:97:e9:38:ca:df:84:2e:6a:8d:
36:65:18:d8:86:e1:9f:5b:50:2e:2a:7b:17:35:e2:
7a:c0:59:be:dc:f8:eb:45:bd:35:f2:f0:c7:d4:f9:
de:77:3b:58:05:dc:e4:29:6e:a4:22:df:47:cf:b0:
fc:b7:0e:0f:b9:dd:a2:d3:75:8b:4c:fb:c4:4e:43:
2e:b7:71:1f:83:4f:66:ca:72:93:0d:9b:a0:cb:4c:
eb:cb:02:fb:5f:0e:af:aa:64:f5:95:3a:86:7c:4b:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:26:12:67:66:0C:1C:77:3D:3F:79:0F:D0:EC:6D:99:F0:CD:55:F6
X509v3 Authority Key Identifier:
keyid:59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:7c:28:fb:6c:c9:89:ef:17:69:07:a2:78:e9:bc:1d:a8:cd:
48:75:09:f9:eb:a7:02:cd:7e:3d:4b:7e:ed:d1:f1:73:f4:9c:
3a:52:d0:15:32:1e:07:18:d5:3f:16:7e:2a:1b:d8:9e:5b:e4:
42:cf:b3:2d:f8:02:68:ad:a8:5c:c1:cc:0c:d7:e6:1c:5a:eb:
e5:48:e2:0e:0a:47:ca:00:ac:eb:32:53:ca:a8:81:3b:45:6e:
55:0f:aa:85:96:36:8a:2b:8c:8e:8c:30:5d:4c:b4:c2:f6:46:
f9:49:f1:ce:e6:06:8c:41:dd:37:92:99:17:1e:3c:fa:c3:52:
02:38:c9:41:ca:dd:72:a0:5d:ac:99:2f:5e:6e:4a:53:0c:5d:
71:f7:15:68:d9:00:21:2c:32:d0:41:45:08:ab:fc:41:93:26:
87:6b:a9:95:8f:e5:ef:e0:58:64:74:45:40:ca:db:8a:09:74:
39:85:7f:3f:67:0e:03:4c:71:2c:60:fd:80:3a:52:b1:26:4a:
56:3e:92:f4:55:b1:b5:8b:9c:79:93:a0:48:88:e5:08:cc:d1:
25:2a:0e:9f:c0:18:6c:35:d6:c4:24:6a:1e:9f:d5:da:fd:79:
19:20:14:a9:f6:74:e6:19:00:1e:f1:74:a4:0a:48:ff:2f:64:
56:49:a6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:30 2025 by rpki-client