Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
File: WROOPbd2QL6t8dpbFRlLk4ShRE4.mft (raw, json)
Hash identifier: lD5VN03afustrbZpL3E7Rgva6DyzbmeCfbgQHkP7Shk=
Subject key identifier: 2A:E1:89:29:26:93:AB:9E:FF:35:AF:C8:56:B9:9D:9F:5E:A3:03:32
Authority key identifier: 59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E
Certificate issuer: /CN=59138e3db77640beadf1da5b15194b9384a1444e
Certificate serial: 019A73387232FCAE63672A1D82EAD74475DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
Manifest number: 0B82
Signing time: Tue 11 Nov 2025 14:01:10 +0000
Manifest this update: Tue 11 Nov 2025 14:01:10 +0000
Manifest next update: Wed 12 Nov 2025 14:01:10 +0000
Files and hashes: 1: WROOPbd2QL6t8dpbFRlLk4ShRE4.crl (hash: glcwwxc1bQYX/Tc1c7Xpl3HH4ek4BxQyb/wlSNI3Ifo=)
2: XxQYUuyDfDmvEH-_h4xcYdCTTls.roa (hash: sOyHTNSLK1nXbLPuDkiUpZ37v4YFW/N/3OvLA+CjJUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:72:32:fc:ae:63:67:2a:1d:82:ea:d7:44:75:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59138e3db77640beadf1da5b15194b9384a1444e
Validity
Not Before: Nov 11 14:01:10 2025 GMT
Not After : Nov 12 14:01:10 2025 GMT
Subject: CN=2ae189292693ab9eff35afc856b99d9f5ea30332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:bc:9d:6d:d7:1a:da:d9:86:e5:1a:eb:d8:
d6:76:d5:df:ed:86:82:5d:3a:85:b8:b1:f4:90:9c:
8b:05:21:e0:94:47:3d:57:a6:23:6d:7f:2d:08:12:
ab:48:a9:8e:ee:da:47:b8:a0:71:ee:6e:4b:03:3b:
6d:f3:b1:6a:e3:71:06:c8:2e:b4:85:cb:8c:5f:20:
52:35:ef:55:3b:1a:d1:54:4d:00:94:e6:3f:eb:ba:
8c:71:d4:94:38:fa:ae:8d:7b:98:97:44:80:b1:fa:
15:52:59:71:13:47:19:e2:9e:ba:06:da:0e:a7:f9:
d2:d9:b6:b7:fd:1c:99:08:5e:91:4a:d2:22:ef:29:
a6:04:f9:33:da:2d:59:c7:56:d9:f5:ef:ce:d8:0e:
74:af:f7:02:bf:f7:ac:7d:85:9b:4e:bf:eb:1d:ea:
33:d4:31:90:75:02:0c:e3:e3:99:d5:37:e4:7b:a9:
0e:1e:c7:73:f7:25:7f:eb:36:e6:f6:e1:56:9c:9e:
2c:3a:73:6e:a3:2c:32:5b:40:1a:4c:db:9f:e0:a6:
24:46:81:3a:24:05:ba:61:92:44:d3:e0:09:ea:67:
2c:86:6b:5b:4f:8a:47:6c:15:9c:8d:2c:69:34:fe:
05:68:04:fe:fa:a3:c8:8a:7c:47:8e:11:40:39:19:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E1:89:29:26:93:AB:9E:FF:35:AF:C8:56:B9:9D:9F:5E:A3:03:32
X509v3 Authority Key Identifier:
keyid:59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a0:a5:01:5f:10:f3:47:f8:da:52:43:8c:3f:82:f3:4b:4c:
a3:62:26:4a:29:0a:79:f9:e3:e8:be:62:49:9f:63:b0:b7:8f:
e8:8e:69:7e:d3:ab:e6:e5:be:7d:4e:33:36:f5:7f:79:46:8c:
4e:e6:38:26:2f:2a:6f:aa:5d:64:0f:17:c9:62:1d:11:13:87:
5e:8b:52:c7:c2:54:b9:94:e1:cb:18:00:35:46:da:8c:54:ae:
cc:79:e6:86:52:04:05:62:e7:64:ba:ef:3b:21:50:35:2c:5c:
c6:a0:c1:42:6f:e0:4f:13:ba:f1:f9:08:ca:6f:e2:7e:ce:da:
f8:d5:84:ed:2a:7b:ae:d7:dc:d9:d0:35:26:38:fc:99:09:c0:
84:8f:d5:c5:24:a9:cb:7f:26:95:98:9c:b7:2d:f4:ac:7a:06:
8d:25:ff:d0:6a:7f:40:eb:2c:7f:02:64:4c:76:88:17:da:e5:
a8:bc:8d:21:c0:2f:f2:06:9d:a0:28:de:71:e7:46:52:4f:a1:
70:ee:85:20:b4:59:f7:8f:79:50:a8:8c:45:9d:82:c5:b0:b2:
cf:94:42:55:f8:31:51:1a:8a:39:2a:24:4d:e7:04:59:6e:f4:
5a:bc:21:92:e1:89:cd:e9:f7:1a:47:d7:8e:cf:de:8d:5d:b7:
72:05:c9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:51 2025 by rpki-client