Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
File: WOAvLKgauAKTlTAVbpYxsY9RWEA.mft (raw, json)
Hash identifier: En3/xhBajclFVZ0QCFXe8vTR9UI+BvRD0I/RZlyg6oY=
Subject key identifier: A5:31:F6:A8:B3:B3:34:50:18:8E:F1:B8:79:12:71:32:CE:E3:9A:EE
Authority key identifier: 58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40
Certificate issuer: /CN=58e02f2ca81ab802939530156e9631b18f515840
Certificate serial: 019A725C47F1BE40D2C02E3AEA5138FFD585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
Manifest number: 0250
Signing time: Tue 11 Nov 2025 10:00:41 +0000
Manifest this update: Tue 11 Nov 2025 10:00:41 +0000
Manifest next update: Wed 12 Nov 2025 10:00:41 +0000
Files and hashes: 1: WOAvLKgauAKTlTAVbpYxsY9RWEA.crl (hash: sn2Ttr2tED2nW1W9MvCQXn0lOwcJ7I9FA+b1+ysORaE=)
2: wKFImUWqJAZ63I73CUY6kU8vkUQ.roa (hash: 6TgnMHnPVKyV4LoYC0bcNEIls6efji/PtDzWQK1yR8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:47:f1:be:40:d2:c0:2e:3a:ea:51:38:ff:d5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e02f2ca81ab802939530156e9631b18f515840
Validity
Not Before: Nov 11 10:00:41 2025 GMT
Not After : Nov 12 10:00:41 2025 GMT
Subject: CN=a531f6a8b3b33450188ef1b879127132cee39aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:2e:b6:3e:eb:1c:07:6f:c8:19:2d:51:dc:
9f:b6:0a:c6:48:f9:51:27:6e:af:04:aa:8a:64:e6:
94:7c:0c:87:f8:a1:50:7a:f2:df:1f:07:e0:1b:7a:
eb:09:63:16:27:4f:30:4a:60:d2:b5:8c:f4:4a:93:
a7:5b:a5:38:43:2e:3b:20:db:27:d5:ec:be:11:0f:
17:ff:8a:d2:5c:64:0d:79:a1:36:d5:80:39:63:8d:
b3:e7:53:a9:2b:b2:35:06:e0:29:15:07:8e:76:d7:
cd:1a:3e:2e:31:a4:e2:5c:3a:da:2e:6b:ff:e1:68:
68:d7:df:56:bb:b1:9d:bf:93:10:7d:13:98:04:ad:
1c:48:37:d9:2e:72:e1:8a:82:a0:f1:f6:a0:7d:4e:
af:3c:91:a9:3b:1d:a9:9d:64:2a:8f:e1:9d:3a:50:
cd:7e:ad:b1:0d:1c:c6:a6:7b:c7:30:f0:d8:9a:0b:
eb:d9:ad:10:8a:60:6f:25:38:ae:f7:ca:be:65:55:
94:21:80:e1:ff:f1:70:44:05:1d:89:28:ee:9e:08:
ae:33:c9:1d:9d:c7:1f:7d:ec:db:a2:7f:da:54:13:
f1:3d:ee:f1:ad:50:eb:ef:94:d9:34:5b:00:9a:a4:
86:76:f2:51:73:0a:87:18:20:45:6f:29:00:89:60:
17:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:31:F6:A8:B3:B3:34:50:18:8E:F1:B8:79:12:71:32:CE:E3:9A:EE
X509v3 Authority Key Identifier:
keyid:58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:07:82:22:3b:1c:b1:46:67:bd:44:ef:4d:77:88:93:24:22:
35:6d:a8:d9:b7:48:71:e5:0c:7b:15:71:08:89:b4:d2:9e:ef:
ac:84:77:39:f4:bc:06:08:24:ee:3b:16:9d:11:a7:95:88:28:
ab:e4:da:03:6c:79:74:70:d6:77:1e:df:13:59:95:c9:23:8b:
b7:b8:da:ef:86:0b:3b:7b:3b:13:6d:d7:7e:b7:43:45:40:75:
a5:c9:7a:89:92:f7:0f:dd:24:3d:93:5a:14:1e:f0:a6:7e:8d:
fa:92:e2:3a:03:bf:64:7d:58:aa:96:91:86:6e:5d:c2:d4:d2:
e4:e6:8f:4f:d0:23:82:a5:3c:6e:f0:80:f2:7c:65:5f:6f:4c:
d1:c9:ab:27:1c:45:93:2a:52:67:6f:98:08:6a:5d:8d:1d:7e:
54:78:68:1d:10:8e:43:bb:ed:f0:9d:85:6c:e2:29:2e:fa:b5:
68:89:dc:8b:25:5c:22:8a:63:d4:ed:13:bb:1d:26:fc:35:1e:
a9:34:63:94:30:56:59:55:40:89:e3:52:42:68:26:6f:61:26:
8f:99:09:82:d2:e7:5f:a7:4e:d6:54:05:9e:d6:96:5c:b3:fb:
93:2a:ec:e7:51:d8:88:69:92:b3:39:83:df:7c:d3:85:cc:07:
8a:84:09:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:16 2025 by rpki-client