Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
File: WIM97GVeGohzOhei3z2gmFq2YNU.mft (raw, json)
Hash identifier: VS0lvL4CeQW20lcl2cY6JJ1AjBvzfCF5WXD1zFCGLq0=
Subject key identifier: B1:5E:76:C7:3D:91:E7:B7:B7:B0:22:BC:1D:3B:D9:2F:4D:61:0C:D9
Authority key identifier: 58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5
Certificate issuer: /CN=58833dec655e1a88733a17a2df3da0985ab660d5
Certificate serial: 019A71130788E2A7F35BB91271709637D489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:01:03 +0000
Manifest this update: Tue 11 Nov 2025 04:01:03 +0000
Manifest next update: Wed 12 Nov 2025 04:01:03 +0000
Files and hashes: 1: B7Qe81-ujU6G37VntbWN3M7mmsU.roa (hash: HF+QNapcX0mnNM1QFFRETe22RTTFyu/iH5tzGUEdttU=)
2: WIM97GVeGohzOhei3z2gmFq2YNU.crl (hash: hCWyTnopLlHZpXvGRbFUXlfbZlJ7uhgn0RIFTuO57yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:07:88:e2:a7:f3:5b:b9:12:71:70:96:37:d4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58833dec655e1a88733a17a2df3da0985ab660d5
Validity
Not Before: Nov 11 04:01:03 2025 GMT
Not After : Nov 12 04:01:03 2025 GMT
Subject: CN=b15e76c73d91e7b7b7b022bc1d3bd92f4d610cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:15:e9:06:8e:6f:d7:49:54:73:f3:3f:59:
14:54:cf:d8:44:cc:15:c5:98:0e:0a:59:27:79:4b:
76:26:7d:b8:9f:dd:1d:e8:3d:75:0b:14:05:3b:81:
6d:3c:d4:b7:4e:fe:b7:b8:b2:fe:8a:fa:25:cf:00:
73:5d:d0:42:1d:1f:5d:7b:66:b3:f6:9f:97:28:6d:
10:b1:78:d7:fd:7e:e9:3a:8e:94:7d:1a:d4:ce:94:
91:87:bc:a9:b0:e6:4c:58:0b:70:82:c3:29:e4:04:
50:cc:cc:38:0d:f4:53:d3:d1:ad:14:2e:e4:c0:6d:
b6:d0:88:c4:f2:3e:e0:a4:9a:0e:d6:eb:34:ad:1a:
a9:a4:c4:89:36:9f:f0:c8:25:d7:36:13:23:a0:c9:
2e:c4:f7:9b:57:f4:31:2f:4c:c4:cb:b2:80:1f:cb:
ad:40:ca:8c:5d:94:49:15:cc:37:3e:31:21:32:46:
1c:8a:c9:f8:7c:c1:38:e9:36:1d:49:46:80:9a:fd:
c2:dc:db:71:fc:1c:df:c7:55:00:54:39:ce:49:18:
09:89:9e:6c:42:60:6a:a9:aa:43:51:e6:79:eb:95:
11:5b:c3:4c:82:52:50:0a:0a:6d:ab:34:81:ad:16:
f0:de:3b:55:b2:99:36:93:09:36:87:14:c7:b8:16:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5E:76:C7:3D:91:E7:B7:B7:B0:22:BC:1D:3B:D9:2F:4D:61:0C:D9
X509v3 Authority Key Identifier:
keyid:58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b6:3a:b2:7c:d7:d9:ed:29:78:fd:e4:3e:aa:bd:f8:3b:14:
0d:81:c8:76:16:10:80:ab:1f:7c:0f:b1:b5:91:76:cf:16:41:
bb:21:e1:34:66:93:fa:3f:1c:8a:c9:ee:a6:b6:8d:22:7c:c9:
6b:39:8b:f2:d6:06:c7:f8:f6:28:ba:bf:e7:96:1a:2f:3c:d3:
31:bd:e6:3e:87:6a:96:59:b8:ee:7b:0e:21:92:b9:8c:6e:53:
98:57:b7:37:88:85:8a:ff:4e:5d:27:12:e8:12:6f:60:16:2b:
b3:c9:4c:72:8d:63:c1:7b:ca:36:e1:91:44:e9:60:0a:bb:7d:
ed:39:3e:ad:8b:67:24:85:a4:71:e0:54:d2:96:f0:82:bb:73:
43:91:37:fd:7a:92:fb:f5:f4:da:11:41:44:08:5d:69:98:fa:
6b:3b:83:49:d2:a2:45:ab:31:7b:ae:09:fd:34:54:8d:35:36:
a9:de:de:4e:8e:92:ee:c5:4d:41:7a:61:c8:57:4f:82:ba:3f:
f7:59:73:4c:63:bb:7c:d4:a6:b4:2d:9c:90:dd:7b:09:a1:9d:
ba:c9:f3:ed:be:18:11:bb:90:36:0b:ce:50:d6:c2:85:be:b0:
c7:60:a9:92:53:bd:4a:0a:0e:9a:72:02:a4:18:3a:af:76:2f:
52:e5:fb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:51 2025 by rpki-client