Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
File: WVskOnIz5XHDwXPrgkkRGQYyYBk.mft (raw, json)
Hash identifier: 8N1xqAk+mYhI1v9To3rT207nrRciHu88H+pH0nKrBxw=
Subject key identifier: D0:48:D1:83:00:C2:60:4E:FF:35:AD:00:E7:44:33:52:5B:70:11:DA
Authority key identifier: 59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
Certificate issuer: /CN=595b243a7233e571c3c173eb8249111906326019
Certificate serial: 019A4FD0259BCFA7C47DC96BC75AD5E60DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
Manifest number: 1688
Signing time: Tue 04 Nov 2025 17:00:32 +0000
Manifest this update: Tue 04 Nov 2025 17:00:32 +0000
Manifest next update: Wed 05 Nov 2025 17:00:32 +0000
Files and hashes: 1: 2580DhDO7oRxSgRoTYqJtzmDRZ8.roa (hash: 4RUkkYY+CZ3xO00bJ4wL39GFuDvJP7M2BRc09JQ7DH4=)
2: WVskOnIz5XHDwXPrgkkRGQYyYBk.crl (hash: Cb/SBp2h2mNuqhLbwqwrhcvBijQXjtiE+shm/mKp26k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:25:9b:cf:a7:c4:7d:c9:6b:c7:5a:d5:e6:0d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b243a7233e571c3c173eb8249111906326019
Validity
Not Before: Nov 4 17:00:32 2025 GMT
Not After : Nov 5 17:00:32 2025 GMT
Subject: CN=d048d18300c2604eff35ad00e74433525b7011da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:8c:f3:3b:62:7f:a5:63:e3:78:f0:f9:bb:
d0:f3:3d:f5:38:3a:8d:e3:57:8d:31:2f:74:b7:54:
52:49:60:80:27:e0:74:21:00:08:58:f0:18:63:0b:
5e:30:c9:95:33:8a:ed:f1:82:c6:f3:de:2f:80:27:
a9:50:71:6e:20:97:ae:79:a8:ea:7d:2f:5e:99:6a:
2a:18:d4:67:f5:11:98:3c:8a:f0:fc:42:d2:4f:7d:
0a:0f:63:9b:21:b5:0f:4b:01:73:0d:03:21:81:af:
3e:f2:b0:e5:c6:22:bf:b6:b5:ee:36:64:77:34:38:
0e:6f:bc:cf:b4:00:18:15:76:ac:a7:c9:72:a9:15:
eb:d3:29:f1:37:ff:bd:6d:59:df:2a:59:51:e0:da:
53:6b:4a:5c:27:cc:9f:8d:4c:83:f2:fd:5c:58:b4:
15:d5:f2:6f:63:df:bd:70:90:84:56:65:9a:84:2d:
d3:ec:e0:94:e7:d9:c5:53:96:2f:2e:3d:9b:36:7d:
d9:24:86:94:9c:c6:6a:d3:58:f6:ce:56:31:eb:4e:
6f:a8:67:c3:ba:b6:5a:d2:7a:56:eb:cb:a6:ee:70:
dd:b6:ac:67:0a:19:ce:ca:75:63:48:21:9a:51:6d:
51:fe:c9:a6:a6:0c:c0:96:e1:fe:4c:fc:a4:46:80:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:48:D1:83:00:C2:60:4E:FF:35:AD:00:E7:44:33:52:5B:70:11:DA
X509v3 Authority Key Identifier:
keyid:59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:32:97:70:bf:01:ce:c9:c0:db:a9:6a:a9:59:93:da:3b:3e:
68:14:7d:aa:a5:eb:1a:07:de:06:a4:06:93:d4:4b:95:82:58:
ea:64:e3:ad:dc:20:22:34:d7:63:01:8f:a1:cc:23:ec:9d:09:
2f:89:a0:3d:d7:94:2b:4e:ec:15:2f:8f:2b:9c:1a:10:7c:c3:
86:e5:5d:ac:01:90:1b:32:2c:86:4d:44:1c:56:38:32:7e:bc:
36:c1:1c:9d:77:82:ab:c0:14:7e:50:86:e8:9b:71:b5:52:f0:
c4:94:b1:be:98:91:a5:c5:04:af:ed:f3:de:02:f7:18:2a:07:
51:4d:c2:f6:59:61:cc:e7:bf:3f:1f:53:77:99:bb:d5:0e:9a:
10:85:3a:1c:f6:12:27:45:e8:f4:fb:d2:d8:7b:08:d7:7e:6f:
0f:8e:99:b7:48:4d:2c:b1:ba:12:db:d9:0c:8e:c7:09:72:be:
8f:d8:18:b3:18:e3:57:49:85:ce:8e:22:67:f2:ac:28:ac:e2:
85:50:8d:e6:81:1b:e0:e7:5f:f6:a2:a8:3a:e3:11:8a:b1:40:
5c:62:56:16:9a:eb:b2:c7:cb:a2:5a:db:d1:05:ae:59:a8:2d:
4e:34:16:5d:ac:01:50:66:bc:7c:2b:cb:76:8b:e5:5a:4f:3b:
b5:1c:83:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:36 2025 by rpki-client