Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
File: WLKee4oN25w2xuDj9JV3gXsOo6Y.mft (raw, json)
Hash identifier: dKc6KmfyA00G/F2zUPPP+BEDKvG97A7CK1C+jxa4EJY=
Subject key identifier: 6B:4C:7F:99:52:DC:EA:79:28:E9:6B:26:61:F9:4B:94:B5:31:DF:28
Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
Certificate issuer: /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Certificate serial: 019A4E4FBD1F2ADC4919E2B7BDBBC8706468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
Manifest number: 0CAC
Signing time: Tue 04 Nov 2025 10:00:39 +0000
Manifest this update: Tue 04 Nov 2025 10:00:39 +0000
Manifest next update: Wed 05 Nov 2025 10:00:39 +0000
Files and hashes: 1: 0KA7UlWcA7dQ-EcGfcWWOlx-BpU.roa (hash: bkO5B1nteyEGZdFfFkbrhIlP/XMGpvPzgXFRnn0UfZE=)
2: WLKee4oN25w2xuDj9JV3gXsOo6Y.crl (hash: 9ySunYoR6GZ+34LKcGxN2RsABr82OgovPKLzSrQP12o=)
3: sPVz6CXeimsgpxuXKMYY5ra1yXI.roa (hash: uGVCkdoP9XZVNq6UA53Y8OgwaBktr5jNaHV/XYvmoPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:bd:1f:2a:dc:49:19:e2:b7:bd:bb:c8:70:64:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Validity
Not Before: Nov 4 10:00:39 2025 GMT
Not After : Nov 5 10:00:39 2025 GMT
Subject: CN=6b4c7f9952dcea7928e96b2661f94b94b531df28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:58:f0:e8:3c:b3:6f:3d:1e:8d:a4:5f:9c:
17:16:46:76:16:9a:d8:9c:7c:7f:16:29:9a:d1:bb:
09:bb:ee:9e:f6:6d:99:f3:cd:b1:2a:55:6b:ad:1d:
cb:40:65:73:be:3b:51:6a:87:e3:37:bf:cd:43:76:
c8:21:9f:e0:1f:4c:2e:7a:5e:81:fe:70:8f:eb:bb:
b6:0f:a9:e2:76:cc:18:6c:06:50:f1:ec:67:e5:e5:
02:c8:d5:19:87:7b:3d:79:58:88:39:ad:37:a3:bd:
2a:25:85:fb:8f:86:8e:8b:bb:df:64:57:dc:89:ef:
b2:0a:58:06:f6:c4:2e:66:bc:b0:bd:83:19:87:dd:
2b:1c:2a:1c:f3:a0:ad:f7:8c:df:29:24:5b:e7:a8:
4b:ae:34:91:21:46:b9:b5:4d:4b:ba:b8:44:9c:8b:
b7:27:0e:14:b8:10:22:73:36:9f:34:01:79:a3:07:
fd:0f:8a:ee:41:a4:13:a1:1e:d6:d5:69:49:73:45:
3b:7c:e1:1d:68:ee:88:c8:e3:6c:85:41:8f:5f:fe:
28:b9:88:b3:68:f5:ff:a0:14:bd:d5:24:1f:c1:7c:
31:eb:d3:f0:6a:5a:4e:71:7d:1d:0d:61:45:4b:50:
69:6c:3e:0b:55:01:63:b3:ee:ef:d3:bd:a0:82:3d:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4C:7F:99:52:DC:EA:79:28:E9:6B:26:61:F9:4B:94:B5:31:DF:28
X509v3 Authority Key Identifier:
keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b4:04:c0:81:ff:09:a8:ab:02:0d:83:6c:cc:9e:a1:41:59:
c5:af:22:86:28:03:c3:c8:74:7d:6a:b6:29:14:29:18:f0:50:
e4:3f:55:21:57:89:b1:c4:69:82:5c:b1:b6:00:16:94:be:8f:
6e:2f:0a:39:2c:cd:28:2a:ca:e9:3d:2d:fa:f4:78:03:a1:9f:
83:64:d8:49:64:36:38:0f:7a:c2:ed:9e:f6:13:45:13:73:81:
04:71:b1:6b:fd:4c:d4:2c:a6:2f:0e:56:91:2f:79:fc:05:ad:
da:b4:9e:36:22:4d:e9:02:13:bc:c3:8e:b6:03:46:29:8d:4c:
39:e8:f2:1b:f4:36:a6:b8:f8:10:e4:d3:3e:f1:31:c3:02:4b:
96:ff:91:f1:cb:07:ed:d1:26:39:40:8d:5b:6d:23:41:56:87:
d3:29:b9:29:f9:62:38:92:6b:a5:ec:c9:5a:ab:84:57:24:59:
b1:98:e0:66:89:b0:f7:e1:4f:82:9c:52:4a:a6:dc:65:a2:0b:
c4:96:7c:19:e8:c9:41:5f:db:95:c7:7f:c8:89:b4:6d:db:67:
f0:ae:fe:56:31:5e:b3:f2:7f:21:65:bc:cb:6d:01:6d:ca:b7:
be:37:5d:8c:1e:a5:1f:88:1a:7f:99:d7:8f:eb:4d:9e:89:e6:
4e:f9:15:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:38 2025 by rpki-client