Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
File: WtERZRPCPYeqy_Wxu-45mBx2McE.mft (raw, json)
Hash identifier: 4VfsF45AvDfOCDWGoVRARLuTW9cyxES48RVNH08PqZs=
Subject key identifier: D5:9C:40:00:18:29:88:B5:B3:D6:08:2D:03:7D:F2:46:CA:06:50:C4
Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Certificate issuer: /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Certificate serial: 019A72D5FC2C3E0A40DD30AB97DDCD3709E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
Manifest number: 065D
Signing time: Tue 11 Nov 2025 12:13:37 +0000
Manifest this update: Tue 11 Nov 2025 12:13:37 +0000
Manifest next update: Wed 12 Nov 2025 12:13:37 +0000
Files and hashes: 1: DPHxPFz4hD849uPgUxDNkAj6z10.roa (hash: Piql48dJ9y76IkzwD/1Mb1jMycR207R9MhGmJ1kgKWk=)
2: WtERZRPCPYeqy_Wxu-45mBx2McE.crl (hash: 3BO0uwlLNTMfebk3RhQFdVTZvvttBkKlzjOriN3brjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:d5:fc:2c:3e:0a:40:dd:30:ab:97:dd:cd:37:09:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Validity
Not Before: Nov 11 12:13:37 2025 GMT
Not After : Nov 12 12:13:37 2025 GMT
Subject: CN=d59c4000182988b5b3d6082d037df246ca0650c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:cb:13:8d:b0:1a:02:d3:95:67:b4:11:d6:
c0:93:1c:d1:2b:a4:95:a9:18:47:97:67:4e:e7:5e:
bc:d1:a8:fe:27:15:31:6a:4b:bc:08:7e:ea:ac:84:
13:d5:eb:26:83:f7:8b:57:85:ad:c8:85:a3:1a:c8:
3a:13:7a:18:84:4a:42:f4:99:9e:45:a6:ec:06:81:
c6:99:66:85:f7:2f:c6:a7:ec:74:1c:1f:8d:6e:2f:
7a:27:04:21:3e:b3:f8:59:18:98:49:0d:c3:89:a9:
d7:89:20:84:58:99:3a:d3:d9:47:1c:5a:92:5e:fd:
e8:0f:16:50:fa:eb:4c:bb:c6:5e:d4:fd:8b:2f:25:
c3:ed:86:9c:b5:5d:d2:38:3c:75:5a:8a:25:4e:0f:
4a:77:04:f3:b8:56:80:9d:33:12:24:c5:81:f4:b3:
1c:e7:a4:a8:02:71:68:e9:2e:9b:aa:51:63:b0:10:
72:31:78:bf:32:e7:9b:c8:86:ee:63:72:34:5d:92:
fe:d9:8c:05:10:fc:21:7c:20:63:7e:0b:1b:cb:9a:
bb:50:b5:de:52:e2:d0:2f:b0:fe:5b:1d:b1:8c:8b:
2d:72:0d:b9:fe:7f:4f:b9:65:a2:ab:dd:53:1d:33:
d5:cb:09:a1:47:5a:d3:44:b4:a7:bb:43:33:9d:d8:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9C:40:00:18:29:88:B5:B3:D6:08:2D:03:7D:F2:46:CA:06:50:C4
X509v3 Authority Key Identifier:
keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d9:47:70:46:3b:1c:5b:ef:97:6d:dd:c0:06:d8:9f:a1:cd:
9b:47:4c:3e:03:86:eb:18:0e:46:a9:c6:db:a0:d1:0f:01:68:
63:2f:69:2b:00:bd:12:d3:0b:c7:e2:85:5a:b9:5f:ed:07:9d:
c1:c5:a5:39:05:80:e2:91:13:ef:ab:dd:f3:9a:90:11:10:f3:
6d:a3:16:b4:73:05:5b:d4:df:59:80:cd:61:77:64:e2:eb:cc:
82:26:4d:26:0e:88:33:b1:bf:3c:24:3c:2c:2b:95:ee:fb:cc:
8a:41:83:1c:64:e2:16:97:79:b4:88:29:5c:39:07:df:09:21:
6d:6a:02:3b:8e:e5:e2:f9:c7:03:5f:9b:93:c8:05:ce:b1:85:
bf:68:6e:02:92:58:41:3a:22:5d:84:78:cc:46:f9:0d:25:fd:
30:87:a0:f9:89:1c:99:ab:d8:2c:5c:99:4e:57:fd:7d:19:07:
8d:d7:60:60:ed:a7:e2:a6:69:76:d9:6e:31:01:bd:3d:ec:f3:
7f:84:58:a0:eb:7f:65:03:95:f9:62:42:ea:26:9d:54:df:55:
e2:df:15:c0:19:be:b0:b8:60:9b:91:5c:82:67:f6:e3:83:c5:
e3:d3:7b:03:9a:a0:4d:b3:c1:69:d7:13:b5:15:5e:9c:cb:3b:
67:a3:7c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:31 2025 by rpki-client