Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
File: WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft (raw, json)
Hash identifier: LhOiBK8Px2dfG73ECPPDfd1uNRG7SxyRr1V0HXF+B9I=
Subject key identifier: 8A:B7:4A:48:F3:4C:79:9B:66:3A:A7:25:2B:7D:39:A2:0F:00:E6:BC
Authority key identifier: 58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
Certificate issuer: /CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Certificate serial: 019A71B8B37BFC1A6AC0E1E8C51C56CE33F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
Manifest number: 0DA6
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl (hash: maEDN2S7pfctO+8bf9XWiYkEDMIWqQ5PMsP+qqfcyAE=)
2: yIEPYCgadoB6X07AnuVv3-Sl8cU.roa (hash: muswJ5Tpw03mqWebPMphb2rOsPv5OQmKFZxcXdUMf8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b3:7b:fc:1a:6a:c0:e1:e8:c5:1c:56:ce:33:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=8ab74a48f34c799b663aa7252b7d39a20f00e6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:bc:6e:57:4f:9c:94:d1:57:b5:60:2f:2d:
a9:ef:8e:85:3a:54:95:72:f7:35:a5:dd:d3:d1:09:
71:1d:90:49:49:2f:2f:14:bf:a9:ab:e6:7d:96:39:
7a:14:26:fd:df:2a:d3:3c:56:52:28:39:f1:74:55:
85:95:a5:2c:07:ee:c8:55:7b:fd:71:34:8a:93:46:
14:4f:53:13:6c:63:b4:d6:74:3e:fb:29:e3:c2:41:
55:37:d8:46:15:48:33:9b:0a:fc:79:31:18:d5:de:
32:d7:ac:45:3b:14:3e:5f:80:41:46:04:56:b2:77:
36:b3:bc:6a:82:01:5a:30:61:0b:6f:5d:af:f5:45:
44:f7:32:3c:8d:10:16:a8:34:f7:aa:09:0b:0b:77:
66:f2:d5:bc:08:51:a9:c9:f8:cc:c9:b3:f2:07:10:
4d:2f:a7:f7:f5:bf:54:88:f3:c1:09:55:94:be:d6:
29:f6:25:ac:ad:78:92:61:5c:a8:c5:a1:23:51:e9:
c2:57:23:48:8b:37:24:31:1c:26:1c:e8:f4:d4:9e:
83:6d:1c:ac:05:a6:01:85:e3:68:26:94:64:3e:60:
03:b0:e6:f4:b1:cf:25:be:03:cb:01:b9:96:0f:66:
bb:93:ce:72:94:6d:33:1e:32:1d:6d:fd:e6:c1:b4:
93:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B7:4A:48:F3:4C:79:9B:66:3A:A7:25:2B:7D:39:A2:0F:00:E6:BC
X509v3 Authority Key Identifier:
keyid:58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7e:26:a9:fd:63:3a:e1:18:00:3a:5d:e4:bd:7c:95:78:a0:
21:04:b4:50:12:d5:74:04:c6:1e:78:c1:be:3e:00:65:90:4b:
0f:46:5f:36:d2:22:03:55:da:3b:20:8d:f9:45:84:9f:64:a6:
a5:c4:f0:c8:56:b9:cb:f0:8d:e3:84:35:ff:95:e8:79:88:99:
bb:b3:97:73:e3:46:17:25:eb:6e:00:23:51:64:33:1b:89:f5:
da:73:78:90:d8:39:c8:9c:45:ab:c1:e1:19:b4:1a:c2:8e:93:
3f:42:9b:26:c8:2f:7b:ae:26:3f:ea:ed:38:e0:2a:78:07:c1:
18:1d:73:eb:3d:84:ea:de:04:fb:df:c0:33:c8:7c:92:ac:51:
eb:4a:03:c3:94:91:7f:ec:29:a4:56:f4:52:de:62:a5:19:de:
73:7b:73:59:bc:28:d4:41:74:30:38:6d:aa:4c:10:78:35:03:
b1:4f:96:53:1e:67:52:e7:11:10:83:fa:1e:5b:84:c7:06:c8:
91:d2:7a:52:e1:c4:0c:41:8e:56:14:0d:44:3e:82:bf:c7:99:
5c:a1:e0:33:b7:ca:dd:db:65:f4:c1:e5:af:88:8f:90:a1:70:
c2:6e:a3:aa:60:df:80:21:39:94:41:d8:58:92:41:d1:68:4d:
6b:f8:37:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:03 2025 by rpki-client