Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
File: WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json)
Hash identifier: jLKZJZKnky2xoGh//WcSFqPvlDzfN1N34daZhczdNug=
Subject key identifier: 94:20:63:C6:EC:F0:94:C2:BB:64:96:39:3C:B7:CC:D6:44:AD:16:8E
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Certificate issuer: /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial: 019A71EE8A0AAA3609CD697E0248C00DCB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:00:49 +0000
Manifest this update: Tue 11 Nov 2025 08:00:49 +0000
Manifest next update: Wed 12 Nov 2025 08:00:49 +0000
Files and hashes: 1: 8Z3aUD_PAmXD6dv52YsOghcqB84.roa (hash: yqXiM+cGXnQH3xEwReOpDqFoSkq0y2lHcTn04sbV7Go=)
2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: oHixivS67sTchHBS0gMo0nsJE7ZWH7e3bWqUnWtwfs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8a:0a:aa:36:09:cd:69:7e:02:48:c0:0d:cb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Validity
Not Before: Nov 11 08:00:49 2025 GMT
Not After : Nov 12 08:00:49 2025 GMT
Subject: CN=942063c6ecf094c2bb6496393cb7ccd644ad168e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:07:40:da:5f:41:cd:ca:aa:7b:66:51:b4:
71:b4:5b:ef:6f:d7:42:07:5d:ae:32:7c:08:a8:5f:
80:dd:3e:b2:d6:c1:b0:c8:1c:1e:05:3d:aa:c5:da:
d2:14:bf:fd:b6:50:83:ac:a8:91:c9:9b:36:2e:18:
fa:7a:fe:74:d4:b9:c6:95:ff:87:01:1f:83:47:27:
af:7e:a6:c2:72:ac:79:a4:75:11:2b:db:25:dc:60:
25:9a:d9:43:6e:ed:53:d4:db:ed:18:ea:1f:1d:62:
5c:a3:39:21:13:3b:59:e7:6d:27:19:37:f2:a7:0f:
e9:fe:90:09:70:da:44:a8:f5:02:cb:95:43:80:12:
0c:99:eb:4d:83:03:73:9a:68:0f:22:4d:0c:23:04:
56:f8:28:f4:ad:5f:46:57:84:98:53:2a:ab:c3:0f:
e3:eb:bf:89:c0:29:d8:79:02:3e:44:dc:66:fd:6c:
d2:e6:84:dc:4a:47:56:b1:2f:3d:0d:f7:19:ba:63:
70:c1:d8:34:e2:08:13:d6:ba:0d:76:eb:fe:68:56:
c9:66:9c:43:4e:03:c0:8e:c5:2b:d4:3d:69:8e:04:
18:37:69:ee:de:ed:84:66:1a:23:60:d7:87:58:c4:
4d:8a:00:0c:84:76:f4:a0:a4:62:56:df:f3:3a:4c:
58:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:20:63:C6:EC:F0:94:C2:BB:64:96:39:3C:B7:CC:D6:44:AD:16:8E
X509v3 Authority Key Identifier:
keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ae:f2:17:c7:df:e5:90:a9:9d:a3:c6:8c:71:ea:88:5e:b2:
92:0f:ef:f4:aa:46:3f:4c:a0:8a:b5:fe:13:18:c1:69:bf:29:
cb:55:ae:97:48:73:95:80:cc:bb:fc:3c:6f:8a:16:b9:7d:ea:
72:a0:31:6e:1d:17:1d:b2:76:25:79:37:fb:dc:ef:dd:08:b8:
0f:69:74:e6:97:df:20:d7:15:bd:19:0d:e5:29:09:e8:b2:ac:
73:fc:7f:ff:d2:9a:81:46:01:18:0e:91:c3:05:29:4e:d9:8c:
18:09:7e:53:dd:03:90:57:99:5c:b3:3f:dc:de:53:71:69:80:
9c:8d:41:89:14:ff:04:8c:fe:0c:0e:9f:96:10:f5:c7:0b:ca:
87:8b:ba:44:f1:0a:0c:be:58:98:02:a7:b0:37:c2:65:c3:45:
54:6d:a1:24:ef:90:60:16:45:d1:01:7d:a9:2e:18:5c:4e:cd:
10:d8:3e:6e:a8:92:a0:f0:61:ba:9a:3d:57:ea:d7:f5:68:10:
e7:ea:0c:dd:e2:bc:ff:f8:41:82:f4:56:33:83:41:d7:b6:73:
ca:22:c1:3c:30:bc:60:1f:a9:8a:de:c5:3f:dc:e9:c0:87:88:
b1:aa:fc:5a:c8:0b:80:23:fb:d4:b9:98:96:47:13:62:b7:23:
41:f2:c0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:59 2025 by rpki-client