Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
File: WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft (raw, json)
Hash identifier: vc3XqSROuCBz77tiReIJVnrqM4xo8miVjBNEH7JzAcc=
Subject key identifier: B7:E5:D0:46:FA:3E:18:9A:44:1C:D2:C4:57:C5:F4:E4:06:84:6F:DA
Authority key identifier: 5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
Certificate issuer: /CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Certificate serial: 019A4E1891AECAD4F2BAE49DF0CE7C1F7683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 09:00:24 +0000
Manifest this update: Tue 04 Nov 2025 09:00:24 +0000
Manifest next update: Wed 05 Nov 2025 09:00:24 +0000
Files and hashes: 1: KOtOprlo9eWM-S3ee18Bkra0s7U.roa (hash: YzsVJr77Droy7DJXTIqItUpDk3Xa+3GyD3WsTRtaj84=)
2: PnDAeBphB2kiD9o4b1TlFW_oiEw.roa (hash: 80HIEeMh1J7mTJAl8xWdqZV3GTcdBhba2s3G/UCvDhk=)
3: VJASrMOyLg85AblR9YiVSWxHxZs.roa (hash: REvGVujT8OfpbkY6GeJPSg8UwmOkMcFqkev3bGvsPwQ=)
4: WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl (hash: RTnmkYGkE5oy1PWC0Ri428Ts2qEUAIZS7aQJXwNzrvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:91:ae:ca:d4:f2:ba:e4:9d:f0:ce:7c:1f:76:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Validity
Not Before: Nov 4 09:00:24 2025 GMT
Not After : Nov 5 09:00:24 2025 GMT
Subject: CN=b7e5d046fa3e189a441cd2c457c5f4e406846fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:51:44:22:79:19:45:0d:b5:df:4c:d0:e3:80:
2e:7c:73:bc:3c:ef:4d:f4:9d:cd:38:31:ba:58:1f:
12:86:ce:76:f1:98:23:a7:8d:10:eb:ef:7a:ea:16:
f1:59:cf:ec:ab:e2:50:a1:35:b9:1b:cb:90:58:ad:
87:47:29:1c:e9:2f:2e:8b:23:4d:70:6a:0c:0e:1f:
3d:33:c0:d8:7b:c8:92:a8:42:0c:1b:d8:f5:78:d0:
54:8f:1a:30:0f:b2:5c:b7:89:d6:a3:1f:9a:f0:4e:
ee:67:68:31:20:4c:1a:ae:24:4b:87:39:48:e0:98:
54:ec:71:fb:15:fa:6d:a4:bb:6c:c4:32:96:d9:a4:
78:a3:5b:d8:e4:d3:c4:5f:f7:ff:8a:b6:21:8d:1a:
43:ae:02:d1:34:8c:23:5c:4f:bf:45:d2:54:ff:f7:
76:4d:45:3f:5b:66:c1:63:47:4a:38:9e:f1:ac:40:
3b:23:f0:75:1a:7e:52:33:bc:bd:d1:7d:01:4d:b1:
64:db:d1:4e:49:b4:3c:b5:e8:92:88:f1:f1:13:8c:
0e:76:32:af:b3:61:f5:87:d6:81:47:19:08:5d:66:
02:b2:26:97:b5:66:f6:2d:0f:5f:08:01:bd:63:cb:
1d:4e:88:ad:52:07:b4:f7:d3:5e:1a:63:d6:11:46:
4e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E5:D0:46:FA:3E:18:9A:44:1C:D2:C4:57:C5:F4:E4:06:84:6F:DA
X509v3 Authority Key Identifier:
keyid:5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2d:44:96:a3:fd:b8:b3:1f:2f:c5:78:a8:b0:8d:ed:e0:a8:
19:ed:b3:76:e5:8f:1c:7f:2d:fd:a9:89:a2:0e:11:aa:92:43:
c5:a2:24:fa:ea:c0:49:32:2f:a1:70:b7:a1:f3:60:15:eb:1a:
93:25:9c:40:0e:7c:27:2b:db:fe:7b:6d:c7:2d:dc:2f:38:c3:
5f:a1:51:49:d5:09:dd:76:92:c7:66:df:95:07:2f:8b:a1:20:
e1:8f:86:bb:ea:80:da:5c:60:8f:26:2e:6e:e6:be:cd:40:af:
9a:40:da:bd:2e:58:7a:ac:81:1a:57:4a:8f:28:d7:92:3c:d9:
2a:30:ff:19:6c:78:2a:29:f2:d0:85:a6:02:ec:f5:18:43:4f:
a7:38:74:da:b1:4f:08:c4:2b:72:87:20:58:4c:16:9e:5c:3d:
c6:9f:b6:38:34:1e:c7:84:07:d0:c6:7c:18:8c:1b:87:07:11:
23:ef:6a:04:2f:d7:fc:5d:34:86:63:e2:b2:96:66:38:c6:7c:
58:6e:4c:33:9e:ad:08:07:46:82:01:6e:b7:1f:b6:4b:08:3e:
f7:ce:4d:5e:74:6c:6e:a5:ec:78:57:d9:ce:d0:4e:fa:04:ab:
ca:90:cb:10:50:10:2b:c1:1b:43:b4:cf:a8:0d:49:d5:91:c8:
34:ae:eb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:43 2025 by rpki-client