Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
File: WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft (raw, json)
Hash identifier: CfODjuk6rozHK8YP7y1d9vIeoyXHzhaBn+NpDfDH3Hc=
Subject key identifier: 9B:B7:02:80:27:FA:2D:3B:CE:4F:7C:5D:DD:3B:07:59:DE:D2:28:21
Authority key identifier: 5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
Certificate issuer: /CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Certificate serial: 019A4EF4C2BB0154592DC4F09813DD7AB214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:00:54 +0000
Manifest this update: Tue 04 Nov 2025 13:00:54 +0000
Manifest next update: Wed 05 Nov 2025 13:00:54 +0000
Files and hashes: 1: 9fwoj_X2tHpCghfejRb6ra1gTZc.roa (hash: VcsRDD+GofeQD9oKWI4zahEGiyHHMwhCi+kgIO2Xtcs=)
2: R-1q52axanYiR_uRw04t04Z8LDo.roa (hash: v5CC/At/0UFJJZBjnOeP3jsuRpec8w6C2aXVgu/IhIo=)
3: WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl (hash: ACgaMLbf+VxpQLBzNFBtgUNB9dT4a/jpcJWzi2fG0as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c2:bb:01:54:59:2d:c4:f0:98:13:dd:7a:b2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Validity
Not Before: Nov 4 13:00:54 2025 GMT
Not After : Nov 5 13:00:54 2025 GMT
Subject: CN=9bb7028027fa2d3bce4f7c5ddd3b0759ded22821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:a8:f9:09:d4:54:f7:14:e7:5f:b1:38:eb:
e4:c8:9f:17:46:48:6d:18:5a:01:b2:fe:5b:c8:90:
ef:c0:bd:12:ab:ee:fc:b1:13:1f:ec:de:08:bf:c3:
19:65:0b:a7:3b:41:64:c5:88:04:10:07:e1:42:d4:
78:48:86:20:6f:4d:1a:da:fd:31:ea:ec:43:32:a3:
65:4a:d8:4b:e2:ba:fa:d0:bf:dd:16:6d:5b:e1:b4:
a3:b3:9e:66:7c:6a:4a:74:a0:1a:68:66:bd:f4:a1:
2a:54:d0:d8:d4:62:13:2a:03:11:c8:5e:a8:9d:72:
22:96:13:36:c2:5d:55:06:23:04:09:f6:01:e9:f2:
de:47:1a:5d:78:69:68:33:af:f9:8a:85:62:f2:a9:
8d:be:92:e8:c4:d4:58:90:ff:29:48:01:ad:df:4a:
bf:66:39:b9:80:98:27:e2:95:48:b6:53:18:b7:2a:
2c:c2:f0:ef:c7:1d:25:b7:fd:70:8d:41:ec:49:26:
3f:f6:e5:5f:c9:23:cd:48:42:43:4b:f2:44:2b:0b:
62:2b:99:c4:b9:47:4d:8b:11:9f:f3:88:0d:0d:dd:
3e:ea:4d:d7:0c:27:7a:4c:9f:e5:12:7f:56:54:19:
6a:3f:9b:5b:b5:d3:7e:ba:b3:a1:8d:62:3a:c0:c7:
73:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B7:02:80:27:FA:2D:3B:CE:4F:7C:5D:DD:3B:07:59:DE:D2:28:21
X509v3 Authority Key Identifier:
keyid:5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:91:d0:53:3e:87:5f:77:e0:5b:cf:a8:48:db:0a:e6:b2:b0:
18:41:10:e7:11:e8:d5:05:6b:4b:d7:d1:7a:3c:22:a0:d2:8a:
d0:15:58:d6:1e:44:a4:9e:3e:db:3b:f8:ab:2c:63:18:75:01:
8b:f5:0a:c8:22:66:83:43:d3:a5:df:a8:c9:09:4d:26:da:aa:
9f:dd:63:0f:59:5a:d2:3a:b2:70:ea:06:c0:8d:c8:9e:4d:a0:
2f:4c:99:cb:de:85:3e:33:6c:cc:2e:60:da:f7:2a:87:ab:ec:
f1:de:a1:07:18:da:c6:6d:30:bf:ba:85:d6:fe:ed:ae:52:4a:
5c:b4:cd:f1:aa:e4:b0:7f:d7:7f:c7:66:35:38:c0:f1:0c:a6:
2c:85:d0:96:ca:65:13:28:18:7f:99:30:fa:6d:c8:cc:7f:e8:
db:42:e0:8f:d9:a9:50:9d:62:e0:7e:22:73:db:8c:37:17:f3:
fb:f5:a6:48:17:e5:d3:e2:29:27:e6:70:0e:45:d6:1f:91:c8:
d7:ee:03:5b:8b:c0:fd:b2:06:f6:ee:01:fc:ad:6a:84:a9:f2:
91:e0:57:96:52:45:09:19:9d:ad:57:fe:a0:72:a5:92:bd:b1:
53:82:26:7c:46:5b:13:12:32:3a:1b:cf:37:f7:56:0a:ca:aa:
36:17:6b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:41:09 2025 by rpki-client