Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
File: WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft (raw, json)
Hash identifier: ExTElG1nq2RPoP2kTDBpwiUF9hY2f+fCZqyFUb9pbME=
Subject key identifier: 00:FB:62:76:82:71:67:D2:0A:FC:2F:5A:7E:DA:CC:BD:41:B8:E6:33
Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
Certificate issuer: /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Certificate serial: 019A232DF5CA3B2F29FA7563E3C7B0901235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
Manifest number: 0E51
Signing time: Mon 27 Oct 2025 01:00:05 +0000
Manifest this update: Mon 27 Oct 2025 01:00:05 +0000
Manifest next update: Tue 28 Oct 2025 01:00:05 +0000
Files and hashes: 1: BnHPRpHVxUrrpd0IzvhYM9ZoVGA.roa (hash: k46oPjmA0dBoUS914bzbaVVF+WxzasmMO4gdexQM14I=)
2: WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl (hash: CibBYE/fSvo3Gj8xJ7jR2mlJc27dNPqXXEhpU6TVLEw=)
3: pXH9YpU9YJCA_rF2kD4sAq3Gb8A.roa (hash: T2ULJjjfs09CAUBnhR9VtzEhjC6fHO+cQ94xa8HkXMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2d:f5:ca:3b:2f:29:fa:75:63:e3:c7:b0:90:12:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Validity
Not Before: Oct 27 01:00:05 2025 GMT
Not After : Oct 28 01:00:05 2025 GMT
Subject: CN=00fb6276827167d20afc2f5a7edaccbd41b8e633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9d:07:5d:ee:fd:5c:6f:fd:82:10:8a:d6:d4:
94:b7:76:9e:73:1c:00:8c:bd:b0:d0:5c:a0:31:de:
fc:98:ce:6a:34:42:2f:a6:8f:7d:b8:5a:0c:29:46:
af:7c:a4:6a:69:ca:5f:d3:74:26:24:bd:00:0b:75:
fa:a2:63:ac:f2:a7:d7:81:4f:f9:30:47:06:da:d4:
52:1b:55:15:42:1f:a2:9c:bb:34:ad:95:4b:a1:c1:
0a:ba:d3:f5:73:00:bc:5d:c4:7d:8d:43:3e:87:b8:
17:4c:b5:8a:f6:81:e4:19:ae:96:9e:d5:88:af:91:
84:6a:34:24:af:f0:f6:67:7f:ff:28:96:b7:7c:ac:
86:9d:10:8a:5e:5b:e0:17:ce:28:6e:f4:ed:83:9e:
ba:a5:25:28:4a:80:a6:9c:71:af:78:e3:6b:29:76:
ff:7e:9f:2f:ff:36:03:c8:e3:74:0b:59:85:9e:e7:
97:2d:91:37:98:52:89:64:64:94:fd:b6:5a:6a:f6:
6d:6c:fa:3c:50:ad:c8:c3:ea:dc:bd:bf:4d:53:70:
53:77:15:ae:05:fe:c0:fc:46:39:8e:27:62:6e:5b:
e2:b1:8d:59:e6:82:a2:86:aa:d2:40:ac:3d:5d:b1:
df:cc:e8:f3:b0:84:f9:5d:0f:74:60:f7:0a:fe:5d:
13:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FB:62:76:82:71:67:D2:0A:FC:2F:5A:7E:DA:CC:BD:41:B8:E6:33
X509v3 Authority Key Identifier:
keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9b:ec:62:e9:b7:c3:62:05:19:ac:37:9e:a3:97:58:78:2a:
f1:79:7e:88:d5:58:68:e2:c6:b3:09:f1:76:bb:91:49:1a:aa:
59:e2:ea:ea:f4:a4:24:42:76:cd:ab:fc:89:90:ee:62:b6:69:
43:7d:09:a3:34:79:0a:fb:5e:d6:ea:ee:45:af:74:91:b4:c6:
5e:81:d1:e6:7e:86:08:b0:4d:00:46:aa:50:eb:5c:24:4b:73:
24:21:34:36:15:16:00:d9:44:7d:02:c8:97:49:6b:fe:8f:44:
78:d5:9f:1b:87:ee:71:77:9e:a5:1a:aa:e3:06:c9:77:6d:43:
7e:93:6e:9e:e5:16:dd:84:36:9d:30:73:00:c9:32:66:27:35:
d1:75:23:b0:9c:ff:a5:c3:8c:8c:8f:97:41:72:21:d5:36:2e:
68:4b:0a:e8:01:9d:a7:64:ec:69:cc:8d:5f:96:ea:d9:ac:f9:
04:51:cb:bb:24:4b:ac:cd:d0:8c:ae:4b:70:37:35:ae:42:e0:
57:7b:76:15:46:b8:58:c0:86:f8:09:38:23:01:3c:8a:b5:46:
50:8f:68:a5:95:a8:88:90:2d:74:27:a1:57:f8:7b:e6:39:a4:
e0:a4:79:29:85:bb:dd:ee:9c:2b:af:ed:92:69:6a:fe:01:20:
dc:fc:da:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:14 2025 by rpki-client