Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
File: WvZis_PcgxKxtryRfwrwBiJ3U1U.mft (raw, json)
Hash identifier: wzKodZ1eE5gMjMHu22JQw7xYX5/Xud4PXhMD4CNeKRo=
Subject key identifier: A5:11:50:5A:51:01:43:6E:B6:1D:AB:2B:BF:98:57:4F:5D:19:17:21
Authority key identifier: 5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55
Certificate issuer: /CN=5af662b3f3dc8312b1b6bc917f0af00622775355
Certificate serial: 019A7225BB5935D7DC01F8DCC7D2374E53A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:06 +0000
Manifest this update: Tue 11 Nov 2025 09:01:06 +0000
Manifest next update: Wed 12 Nov 2025 09:01:06 +0000
Files and hashes: 1: 7LnQSFfXaCdtSrN73Q04rTSUR1U.roa (hash: qe1kV18U1ftZ6/1GEB/ILiq/KKpDzYSHRLnRjgpziJY=)
2: WvZis_PcgxKxtryRfwrwBiJ3U1U.crl (hash: YmR8b0vKb63Fb9+WSynuyd2+apmaWb4u8ffKRbO/LjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:bb:59:35:d7:dc:01:f8:dc:c7:d2:37:4e:53:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af662b3f3dc8312b1b6bc917f0af00622775355
Validity
Not Before: Nov 11 09:01:06 2025 GMT
Not After : Nov 12 09:01:06 2025 GMT
Subject: CN=a511505a5101436eb61dab2bbf98574f5d191721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b3:87:44:b8:63:3c:f8:f1:ec:cd:b5:8a:c7:
8e:84:94:f3:bb:4e:fc:b9:e3:42:e0:c8:4e:73:9f:
4c:0f:11:2d:b6:84:fd:7a:0d:e8:f4:6c:27:4c:88:
24:0a:ba:f7:b7:fd:c0:e1:7d:8c:f3:e7:f2:f7:2f:
07:f8:d3:ed:5e:b4:5e:df:fe:39:ee:a7:a0:e4:d2:
72:1e:fb:0b:f8:f3:f6:22:f0:da:8d:25:f1:c5:38:
e8:3b:3a:22:30:70:44:b9:a7:34:e1:fd:e1:e1:a4:
8b:25:9f:12:9f:9b:99:6c:40:00:99:d1:4a:26:69:
6f:71:71:c6:2b:03:cc:8b:cc:10:0f:e2:c2:7b:e1:
fb:ca:1d:3d:ae:47:6e:ac:8c:f9:63:2b:f7:d8:d5:
9d:a7:4a:aa:51:b9:5c:b6:c4:1b:6a:f2:9f:72:fa:
6a:76:2b:e9:3b:a1:d2:2e:7f:9e:5d:fc:4e:cf:5c:
da:fb:07:52:62:57:01:0d:31:c2:ae:e6:47:7a:aa:
c8:0f:fc:23:0d:73:ff:fe:14:51:4b:1b:e9:4d:97:
d0:fc:41:17:58:fc:00:4b:2f:04:7c:24:78:dc:28:
fa:ab:ad:56:3e:f4:a0:3b:f5:56:d3:cc:7b:eb:79:
cb:17:4f:a2:0e:c3:94:04:11:da:4c:a3:ac:94:e9:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:11:50:5A:51:01:43:6E:B6:1D:AB:2B:BF:98:57:4F:5D:19:17:21
X509v3 Authority Key Identifier:
keyid:5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:52:00:e6:10:00:56:de:02:fb:70:2a:9e:71:c6:87:ba:6d:
d9:2b:1b:5b:d9:54:b6:66:16:7b:d3:92:39:54:d6:09:c3:c6:
54:e5:ea:a4:e2:60:a6:1f:1a:2e:02:5d:93:63:9e:75:83:03:
66:7e:34:ec:f0:89:44:45:1e:ed:d8:3a:d7:17:34:77:cf:ff:
be:73:c4:1b:3c:c9:18:e3:ad:c1:5e:dd:b6:8d:53:af:d7:ea:
9b:13:ac:f5:e4:11:6f:8e:61:1c:7c:cd:78:34:30:4b:ec:06:
93:40:60:d6:43:2f:bb:90:ae:9e:f9:da:37:b1:30:01:42:1a:
d9:32:27:1b:f8:70:3d:61:e5:be:fb:d1:42:e9:11:80:32:95:
6f:5d:88:6d:23:20:1c:b1:d9:2d:0b:c7:13:b5:cc:ae:58:45:
56:50:1b:e5:09:3c:ea:97:08:64:16:c3:fa:9a:9f:93:b1:ef:
de:d3:42:7b:b7:6b:3d:be:82:6c:a4:a8:6f:de:7b:2b:80:9e:
4d:d2:68:54:5a:17:ca:c6:f1:ee:91:69:82:f2:3d:2b:12:f5:
1d:6e:d0:19:01:35:c1:11:2f:2b:88:2e:60:ae:30:39:e7:0b:
7b:2e:39:2a:30:45:62:58:81:35:80:75:d1:40:e3:78:52:c3:
40:71:2b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:57 2025 by rpki-client