Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
File: WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft (raw, json)
Hash identifier: OgUCSNxvJIGvKqQ+9ZI/euSC5Djw4a4Lj2PGPBMshpo=
Subject key identifier: DB:3F:B9:6C:DB:32:44:38:7C:48:D0:AB:4E:39:1F:4D:DD:56:B0:63
Authority key identifier: 59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
Certificate issuer: /CN=59fad388bea71da2f43f39a45e10141d6f29c428
Certificate serial: 019A71B905C0115BEE091DE6BE2A04B95772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
Manifest number: 1638
Signing time: Tue 11 Nov 2025 07:02:22 +0000
Manifest this update: Tue 11 Nov 2025 07:02:22 +0000
Manifest next update: Wed 12 Nov 2025 07:02:22 +0000
Files and hashes: 1: LYb-x1oBjYV986-WVWGm87nYs0w.roa (hash: Hdp26qwcmy9Rb38THuQbvn6WpSeZJ3xKyk1AFGilm9k=)
2: WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl (hash: ybA7OpEfUwSxsMRDw/f1Rx9gN7nr9LmH47n7fsUYGis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:05:c0:11:5b:ee:09:1d:e6:be:2a:04:b9:57:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fad388bea71da2f43f39a45e10141d6f29c428
Validity
Not Before: Nov 11 07:02:22 2025 GMT
Not After : Nov 12 07:02:22 2025 GMT
Subject: CN=db3fb96cdb3244387c48d0ab4e391f4ddd56b063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:52:d1:30:ae:bd:0e:b3:7e:18:52:31:46:
1b:50:88:89:e2:49:56:f2:ed:18:47:1f:95:f1:ea:
e5:68:61:d5:e5:b0:25:22:00:be:33:81:57:3e:49:
52:41:7d:31:ab:b8:f2:52:66:d0:f4:4c:61:8f:7d:
fd:11:83:45:4e:7e:32:3b:73:75:ab:ce:d8:76:d6:
3a:d1:d1:1d:e6:22:04:8d:b0:8c:af:ed:71:92:32:
3d:01:e7:ba:43:35:07:2f:b8:e6:41:02:74:00:a5:
9c:0d:78:45:6b:3c:ad:5d:93:bf:49:1a:d5:ee:f4:
bc:61:8e:56:d8:0a:29:89:41:13:ed:73:17:46:5a:
89:3d:5b:a4:4d:fa:b7:13:50:6a:72:4c:bd:5d:ab:
65:63:ae:93:d2:87:55:0c:f4:aa:0b:05:bc:3a:20:
f1:a9:64:0b:31:a0:fc:b6:8f:ed:0a:b9:b0:44:ce:
f9:2b:fd:b5:29:ab:1a:26:fd:1a:cd:9a:e0:0b:25:
ba:74:4a:85:15:89:f9:b0:61:a9:7f:e9:e4:11:2d:
51:42:82:3e:41:bf:bb:a6:b8:af:a0:88:47:0d:c2:
80:51:13:ed:94:b0:a9:37:31:28:c6:d4:fb:b3:1a:
93:6f:18:fe:d7:ef:55:51:eb:9d:5a:9c:ae:95:3e:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3F:B9:6C:DB:32:44:38:7C:48:D0:AB:4E:39:1F:4D:DD:56:B0:63
X509v3 Authority Key Identifier:
keyid:59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:29:b1:21:60:10:38:c0:ff:6c:69:4d:dd:e5:aa:e5:dc:4b:
5e:dc:cc:e2:af:8e:17:e1:b7:c4:97:74:0f:85:a8:1a:20:f5:
29:d1:57:85:60:46:10:34:1b:b9:74:3b:e9:70:e2:85:4f:14:
21:0e:82:81:31:26:a8:d8:4e:71:e5:90:ff:60:45:45:d0:e3:
51:48:52:19:d6:b6:52:e4:7a:91:ae:0a:74:24:c3:97:1a:fe:
2b:08:38:c6:a6:59:d0:47:2f:41:6a:e9:36:59:75:49:3b:5e:
b6:04:f1:e3:80:4d:0a:9c:ff:f5:4a:a3:6f:4d:e6:a1:74:93:
92:e6:d8:87:20:dc:2e:c3:35:0a:75:c6:d7:9b:a1:e3:a9:61:
5b:02:19:11:af:44:91:ee:bb:bf:fe:fd:d3:50:26:40:70:39:
4d:33:b0:55:dc:98:fe:48:96:91:a7:f0:fe:3e:87:70:fb:38:
7a:26:7b:36:1f:00:ac:4e:3d:dc:b2:44:e5:06:16:8e:0a:c6:
62:29:03:d2:e7:c8:2f:d3:77:15:ef:95:3f:c3:7a:cd:9c:f5:
f7:cc:d7:f7:3e:7d:62:65:81:42:0d:16:f0:d4:68:ce:91:05:
e0:15:82:fb:53:e0:9d:4a:78:77:12:05:2e:61:fc:0c:4f:e7:
22:a4:6d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:44 2025 by rpki-client