Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
File: WoZV6_lEUAAlpfB1unveZBWE_aY.mft (raw, json)
Hash identifier: sX3ZZbnXyWfBrRusAHLxx6AksdrsM/yCIdG9TCuayJA=
Subject key identifier: AF:91:72:7B:BD:F8:40:17:37:BE:56:03:A3:CA:B2:EF:9F:15:3A:ED
Authority key identifier: 5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6
Certificate issuer: /CN=5a8655ebf944500025a5f075ba7bde641584fda6
Certificate serial: 019A7293C2BD2CF5ED359206C0BE14212C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
Manifest number: 11C9
Signing time: Tue 11 Nov 2025 11:01:17 +0000
Manifest this update: Tue 11 Nov 2025 11:01:17 +0000
Manifest next update: Wed 12 Nov 2025 11:01:17 +0000
Files and hashes: 1: WoZV6_lEUAAlpfB1unveZBWE_aY.crl (hash: EwPUPN9bKgtzT5hdQbJlFopzBzojVsY50Fq8RDY5SDM=)
2: whcvZpTpzvlbrJt7O3nmd0nRfXA.roa (hash: uHBrfBFZVuPLEmFMxJBXGMMbHMabPdSiEixhmy3o8Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:c2:bd:2c:f5:ed:35:92:06:c0:be:14:21:2c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8655ebf944500025a5f075ba7bde641584fda6
Validity
Not Before: Nov 11 11:01:17 2025 GMT
Not After : Nov 12 11:01:17 2025 GMT
Subject: CN=af91727bbdf8401737be5603a3cab2ef9f153aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:e2:d4:10:93:3c:7f:df:2c:86:60:02:aa:
25:aa:54:4c:d6:ae:b2:ec:fc:a0:3d:18:da:eb:54:
e8:4c:1b:95:67:a2:bc:9f:c5:0b:79:2d:b4:41:16:
e2:4f:3b:c8:d9:58:44:6c:d5:84:ba:df:b0:9c:fc:
85:57:07:48:b7:63:90:d5:36:dd:60:48:a6:a1:e5:
1b:ad:45:df:23:13:1d:f7:ba:b8:7c:00:a9:d3:2c:
af:e2:20:1a:ed:91:25:56:a8:f1:98:d7:c6:ea:50:
9f:4f:95:9b:2a:80:ae:8d:9b:7f:44:ea:8d:2a:1a:
41:b7:c7:cc:70:f4:15:61:ba:de:6d:4e:90:c7:9e:
68:d9:c0:33:68:14:29:c8:b5:e0:ff:44:e4:21:ca:
12:68:d9:9f:87:ff:a9:c1:de:11:a1:1b:64:a9:2b:
f3:87:1b:b5:6a:dd:79:c0:cd:0b:fc:e7:b8:38:52:
78:09:b5:2b:30:20:00:5f:c2:e0:b3:c5:82:20:5e:
93:11:2b:c6:be:f9:aa:d3:a2:2f:3f:1a:4e:16:be:
61:75:c2:cd:12:99:6d:03:3f:02:a7:33:8c:9d:34:
32:de:44:79:cc:cb:0d:ad:a0:bd:3b:30:61:1f:88:
d0:49:9e:be:bd:be:36:17:17:c3:04:32:43:d1:0f:
4d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:91:72:7B:BD:F8:40:17:37:BE:56:03:A3:CA:B2:EF:9F:15:3A:ED
X509v3 Authority Key Identifier:
keyid:5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:60:dc:81:59:7a:19:17:82:74:06:cb:97:10:6a:f0:8a:b2:
4d:bc:41:08:83:9a:12:b3:58:12:45:70:0a:42:07:1d:62:ea:
32:32:56:90:4e:27:78:d3:87:e7:4f:6d:e3:65:50:91:d7:cb:
db:fb:c6:cd:5f:01:a3:76:4b:27:be:8e:d5:38:6b:74:87:c4:
30:00:0e:6b:61:78:0a:96:7e:0e:e2:3a:4f:93:57:81:25:d6:
6f:da:25:46:e7:cf:af:36:b2:57:1e:65:5f:f2:7e:32:6b:c4:
5c:7e:8b:90:6e:b1:9e:80:1a:94:04:21:df:be:45:3e:9e:21:
85:ae:fa:45:81:3c:5f:e3:d8:ab:a2:16:2e:de:0e:d6:84:3d:
90:74:de:ca:47:a5:df:00:1d:c3:f8:b5:72:95:51:a9:41:20:
ac:6f:fc:0a:1a:9c:7c:b5:fd:1d:23:22:29:bb:c8:35:88:d8:
19:b8:fc:fc:eb:63:c7:68:d7:30:dd:90:84:eb:74:30:6d:f3:
43:42:60:ff:6a:ec:5d:c1:3a:dd:4e:9b:06:22:73:dd:fd:c4:
43:31:b7:75:89:e5:3a:f2:4f:0f:88:43:ee:98:c4:02:13:e2:
93:fd:05:d4:9f:5c:36:41:65:d0:b1:78:3c:fa:d5:49:cb:e4:
80:75:4b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:26 2025 by rpki-client