Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
File: WYjwhVxEeNG5Srio1tnZxRHzFCY.mft (raw, json)
Hash identifier: 4YPJl0R7K9i65DpsNy6/1oKWrHbQ8PE3DZLdTDZU00s=
Subject key identifier: 4A:70:21:29:4E:29:BC:79:3B:8D:C8:A0:87:D8:BD:7C:9A:27:A1:2B
Authority key identifier: 59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26
Certificate issuer: /CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426
Certificate serial: 019A71B8F40F14DC8AC5D6C6251C48914706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
Manifest number: 0DD5
Signing time: Tue 11 Nov 2025 07:02:17 +0000
Manifest this update: Tue 11 Nov 2025 07:02:17 +0000
Manifest next update: Wed 12 Nov 2025 07:02:17 +0000
Files and hashes: 1: WYjwhVxEeNG5Srio1tnZxRHzFCY.crl (hash: ib2VPaLRbzU8EFESaJ9M6upuFhfmQR+K8k9XBycRU9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f4:0f:14:dc:8a:c5:d6:c6:25:1c:48:91:47:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426
Validity
Not Before: Nov 11 07:02:17 2025 GMT
Not After : Nov 12 07:02:17 2025 GMT
Subject: CN=4a7021294e29bc793b8dc8a087d8bd7c9a27a12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:ea:96:16:a5:f4:f4:d3:95:04:3f:f7:4b:
ea:b3:4b:3d:40:42:16:54:ad:12:ee:62:95:4f:e5:
cf:84:44:04:5c:0c:69:80:2c:25:f6:6e:5a:6a:d2:
35:2c:2d:43:8e:e5:82:a9:07:3c:a2:fc:e3:b5:11:
d0:a5:13:a3:10:f7:2f:f4:b5:16:b6:81:9f:fb:61:
b5:11:f1:bb:c7:6b:94:66:da:48:75:e6:a6:14:c6:
10:ac:bf:c3:57:ad:6f:a5:c0:98:7e:69:59:e7:f8:
91:43:3d:b1:38:db:ad:57:88:c2:15:b8:64:81:a1:
6a:b2:20:aa:e2:b7:06:af:f3:06:1e:70:57:b8:43:
b7:2e:b6:ab:c4:8e:de:71:e1:73:3e:94:fc:78:b5:
53:20:6c:02:56:ef:52:f3:e9:fe:ec:24:0e:cc:73:
09:41:23:b7:57:ce:fc:a6:a1:d1:ad:d2:cd:1d:5d:
cf:af:29:05:d7:aa:7b:da:2c:7f:e7:40:84:ee:1c:
1d:ed:40:7f:bf:a8:92:ec:5b:31:e2:58:ed:00:dc:
5f:35:2e:fa:ea:80:89:03:52:8d:30:f2:c2:b1:74:
17:8f:2e:88:e0:e9:a4:0d:a0:17:8f:7e:93:b2:b7:
fa:b4:34:b5:80:ce:5d:84:86:a8:dc:bc:34:5c:16:
18:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:70:21:29:4E:29:BC:79:3B:8D:C8:A0:87:D8:BD:7C:9A:27:A1:2B
X509v3 Authority Key Identifier:
keyid:59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:95:e7:45:82:66:52:24:f1:3f:2b:58:44:c6:8f:be:cd:0c:
23:62:10:84:3d:71:d3:c5:70:87:f1:8f:6f:69:a0:62:76:74:
d0:a9:7b:65:04:3d:f4:e3:99:da:69:e7:b6:77:ff:ba:ab:7f:
a8:c5:ef:0e:61:7e:9f:b2:a5:5b:19:2e:46:e9:76:01:b3:2c:
e1:16:60:b5:56:77:0f:f9:3f:81:5c:06:9b:78:35:46:c2:56:
0f:e5:3c:d4:77:85:d4:15:00:84:f9:1d:13:1c:a0:e1:fb:79:
36:07:45:5e:14:b2:df:fc:38:83:33:2c:6d:8e:27:d8:ae:f6:
e5:31:66:10:5c:31:71:93:94:f1:4c:60:9a:77:b6:f6:97:df:
0f:41:32:b4:35:27:62:ce:db:d1:38:6c:9b:3a:01:64:32:f9:
a6:29:e7:bb:d6:95:fa:63:47:3e:fb:6c:57:42:2e:24:10:f3:
ab:cc:e7:e1:b6:4b:78:5f:80:1a:7e:b3:88:73:dd:97:f8:df:
f6:bd:8a:2a:9f:86:44:f2:ad:18:83:31:21:5e:f1:58:c5:8d:
dd:60:30:98:d1:b2:2b:60:e1:c6:18:4c:e9:d6:a0:ca:25:9f:
99:ef:c6:33:a9:4b:f8:b3:82:5b:53:c1:68:97:96:7c:2d:2c:
d8:bd:e7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:33 2025 by rpki-client