Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
File: Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft (raw, json)
Hash identifier: Iq3h4dCBQmbVUPYorVsW1K+9YvBlejm4bmwf0PvSDNQ=
Subject key identifier: E5:08:8D:08:9D:DE:4A:DB:87:BC:88:F7:37:30:FE:0D:C1:1F:B0:38
Authority key identifier: 5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
Certificate issuer: /CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Certificate serial: 019A7149D2AB14FB160A26F6F56F534725AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
Manifest number: 0679
Signing time: Tue 11 Nov 2025 05:00:54 +0000
Manifest this update: Tue 11 Nov 2025 05:00:54 +0000
Manifest next update: Wed 12 Nov 2025 05:00:54 +0000
Files and hashes: 1: 9u-rsDWtE_83E-zt9uyk1Tmhx_c.roa (hash: e8hWv5F2Yw7MHTSO7w0icoPmtLInDJiNFNJcyngC6B0=)
2: Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl (hash: MjArNfRQsR4u6Zam4FczbLU0S2yfe/CqfIrzQFEYsHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d2:ab:14:fb:16:0a:26:f6:f5:6f:53:47:25:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Validity
Not Before: Nov 11 05:00:54 2025 GMT
Not After : Nov 12 05:00:54 2025 GMT
Subject: CN=e5088d089dde4adb87bc88f73730fe0dc11fb038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:13:18:98:3f:73:f4:c2:99:7c:85:31:e0:
60:b2:34:de:ae:5f:7a:1e:dc:52:f9:15:7e:b1:e1:
ac:a9:da:5f:77:27:88:94:d4:70:7b:4a:d5:61:1e:
7a:87:04:88:0d:5a:46:6a:33:bf:df:14:c5:f1:48:
d7:61:56:91:72:fc:9d:2d:2a:37:d7:23:2c:21:33:
64:21:b8:03:df:91:a2:af:df:e7:b1:9a:b2:03:23:
a2:69:20:d2:dc:78:36:7e:a5:3e:e9:48:cd:8f:d9:
92:28:87:b1:8f:a3:dd:b5:30:56:4c:c2:51:72:79:
6c:d7:e8:e5:25:d4:0c:67:af:d1:c3:2e:d4:e0:8e:
37:5d:d8:ce:c1:79:e8:3f:08:5d:f4:f7:67:fa:eb:
55:2b:ab:f5:8b:ef:4f:a8:a9:9a:33:8c:5e:88:da:
f8:d9:82:14:42:6f:a1:fd:54:97:64:81:01:e7:4a:
9f:2c:0a:71:9c:f2:02:0c:eb:15:9a:2e:c3:e6:d4:
16:a0:2e:c6:2d:61:23:26:82:52:59:c1:8b:39:77:
9e:b6:3b:95:89:96:10:ae:eb:de:af:ce:e9:08:a9:
18:92:f2:15:d9:e6:26:9d:4e:0a:d1:36:1d:29:f5:
b3:c7:ed:a6:25:74:66:e4:d3:b9:e5:15:9f:64:96:
d1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:08:8D:08:9D:DE:4A:DB:87:BC:88:F7:37:30:FE:0D:C1:1F:B0:38
X509v3 Authority Key Identifier:
keyid:5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:24:bb:8e:67:73:fe:46:f1:6c:d1:02:27:1a:0c:f9:6b:11:
d9:74:e8:32:b7:23:e3:0c:60:0d:0d:96:08:06:b4:1d:4e:04:
04:94:3f:eb:d3:c0:0c:44:82:80:1e:5d:65:59:72:09:5a:a8:
0a:bb:31:2f:41:42:a7:83:fd:cf:af:9a:8b:b9:e2:55:a3:25:
7e:3e:d9:fe:82:e0:fc:01:c6:2f:9e:c5:7c:c9:b0:74:26:c1:
48:60:ed:ad:48:b6:76:7b:f1:69:19:6e:86:69:36:f8:ba:82:
45:19:e7:7e:88:10:42:73:f3:31:61:54:cd:b4:8a:71:f4:e4:
30:a7:82:af:28:5f:38:cc:dd:71:04:ed:da:00:19:88:ea:50:
06:e7:04:b0:1d:3a:fc:96:49:4a:02:50:3a:3d:fc:47:5a:8b:
6c:01:3c:fc:9a:cf:a0:ac:92:ea:62:2f:b2:a2:cd:7b:0e:50:
73:f8:2c:26:0a:c0:75:3a:e2:47:6e:79:ea:b5:3f:c4:ee:c2:
06:2b:dc:2e:b1:1d:ad:f1:48:c4:19:fc:4b:fa:9c:16:35:17:
60:29:da:75:a1:9a:65:a6:64:be:e8:fa:b0:7b:60:34:19:b9:
7e:b3:86:27:05:84:24:41:66:a4:67:d4:5b:4e:36:2e:fb:e5:
87:13:a1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:16 2025 by rpki-client