
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
File: Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft (raw, json)
Hash identifier: WiQJaqfW0xTDg3KClSgwrpxSZXgGwZ2NyfDFoacYvD0=
Subject key identifier: 4C:43:5C:1C:D0:D9:AE:55:19:E3:8B:5E:20:2C:C7:CB:F4:CF:B8:1C
Authority key identifier: 5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1
Certificate issuer: /CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
Certificate serial: 019A5262F18B8DAA742ED0499F56240650A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 05:00:07 +0000
Manifest this update: Wed 05 Nov 2025 05:00:07 +0000
Manifest next update: Thu 06 Nov 2025 05:00:07 +0000
Files and hashes: 1: 2x0oIHlLniQgJ8wCGF91u-VP36U.roa (hash: hTRJW3J22JabEFrfjLPUALfCkvH53/llK6Ms4YgJ720=)
2: Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl (hash: wMu3Rz01Ylgwog4QGNFVAFTBbXp0wIxoP/Dd8q6RPhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:62:f1:8b:8d:aa:74:2e:d0:49:9f:56:24:06:50:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
Validity
Not Before: Nov 5 05:00:07 2025 GMT
Not After : Nov 6 05:00:07 2025 GMT
Subject: CN=4c435c1cd0d9ae5519e38b5e202cc7cbf4cfb81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:03:ff:86:fb:5d:94:94:7a:d2:a8:57:9d:
dd:60:2c:3b:be:ff:72:7f:c7:23:a9:68:94:5c:bd:
54:30:39:70:50:f6:4b:18:a2:2b:57:76:6f:25:5e:
a7:bb:e5:80:2c:fb:00:e9:6b:65:eb:74:88:48:60:
27:68:9f:1b:fd:ce:0d:50:76:38:49:26:34:18:68:
63:7f:8c:ec:4c:e3:1f:90:b9:78:fa:5c:e1:d0:35:
32:6d:8d:b3:51:39:8c:62:0b:44:60:46:bf:54:32:
a0:10:7d:8c:12:79:a8:a0:36:ea:a3:3a:cc:fe:8e:
78:95:24:7c:50:6d:f4:b3:3e:5e:73:dd:fa:80:bd:
48:44:0d:48:35:c0:14:81:f0:7f:53:f9:40:b8:32:
b1:fd:b3:02:f1:ba:0b:9b:fc:94:b2:e8:50:84:bb:
60:da:87:8f:95:00:cc:3b:b0:79:80:7f:09:a5:91:
7c:aa:27:10:6e:af:2f:76:96:8d:79:83:22:19:2a:
d4:72:42:91:cb:57:db:ae:91:e2:9c:4f:b6:c2:c3:
e4:70:2e:fd:0b:ad:8a:26:ba:75:47:1c:09:c7:f5:
f3:7a:e5:90:03:f7:c6:3c:50:fb:fb:8e:c4:8f:11:
00:2b:29:43:b1:a8:7e:0a:69:e1:8f:fd:49:e8:f4:
19:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:43:5C:1C:D0:D9:AE:55:19:E3:8B:5E:20:2C:C7:CB:F4:CF:B8:1C
X509v3 Authority Key Identifier:
keyid:5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:08:fa:39:7a:50:76:20:9b:d1:fd:21:bf:5e:3f:4e:ec:38:
e1:74:94:45:24:f7:01:8a:50:bb:26:5f:c9:d9:5c:6f:e5:f1:
36:b6:1c:4c:f2:bf:3c:70:6e:ff:23:34:13:6e:26:df:e7:7a:
e4:60:63:ca:dc:f0:bd:98:b6:d1:a2:a0:5f:49:a7:0d:38:35:
65:dc:fd:d5:04:92:93:a9:ba:71:be:18:44:3a:78:e0:6f:38:
ef:53:ae:32:7b:17:c5:de:7e:19:36:c8:f3:87:4e:d0:d0:73:
88:23:54:4a:5e:8f:34:51:40:9d:d1:f1:bc:2f:ed:27:88:13:
b0:3f:37:dd:74:ba:f7:6c:7a:6a:56:b4:82:7a:95:5d:f4:9f:
71:9e:98:ac:f1:47:f9:94:62:ad:ef:3d:86:89:b4:5f:53:6b:
13:9e:bb:6b:07:64:98:d3:0e:99:56:a3:6f:e4:3f:b8:99:a0:
51:4c:9c:b8:a6:c3:ed:4f:46:4a:fd:96:ba:78:86:21:de:3f:
2b:c5:ac:3d:f6:d6:9a:0b:35:7b:a1:43:39:42:1a:b4:b1:25:
01:d8:33:fd:dc:ce:93:ed:98:63:a7:01:1b:49:98:d4:8e:b0:
47:53:60:a9:bb:61:19:ff:dd:01:db:25:38:bc:08:39:09:e6:
bf:0d:b2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:52:54 2025 by rpki-client