Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: G4S9ZRFeU1A9sg4btQFiUex45UKelK+okRii20VyTrQ=
Subject key identifier: E4:35:F1:FA:8A:7D:66:19:9F:00:D5:ED:80:49:81:A0:67:ED:9F:02
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 019A4DAB365A94D92BF34E992B37440011B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 081A
Signing time: Tue 04 Nov 2025 07:00:57 +0000
Manifest this update: Tue 04 Nov 2025 07:00:57 +0000
Manifest next update: Wed 05 Nov 2025 07:00:57 +0000
Files and hashes: 1: 2symQxt9tiTp5JPRu9SVrhpHnoI.roa (hash: ETxwfWEk5Ji119X6QNRzmnwtDjfSz5qCO5WUq2I4qpI=)
2: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: /PeCYZFc+DlVgQQtxPPIWaSVO+xRY+2lDXeBiOotx8M=)
3: aiepDcInSC7XQM1NAo38Ltggcos.roa (hash: 6COc/WNOkQasZPkjRm4nKC/vd3bNAbojTsGDQ+J1+tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:36:5a:94:d9:2b:f3:4e:99:2b:37:44:00:11:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Nov 4 07:00:57 2025 GMT
Not After : Nov 5 07:00:57 2025 GMT
Subject: CN=e435f1fa8a7d66199f00d5ed804981a067ed9f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:6f:d2:f3:e7:2b:06:62:42:53:4e:ec:12:
8f:7c:de:d5:19:9e:85:bf:a7:fd:da:be:60:70:a7:
a1:40:d1:bf:cc:c5:d2:a8:35:fc:b5:3a:aa:5c:53:
74:44:43:4a:af:6b:f7:51:4e:da:b3:ca:55:1e:29:
d4:5b:12:f8:1b:12:b2:65:f1:10:72:26:9a:dc:e8:
b6:09:59:9b:36:e4:98:ce:31:b8:f3:c4:eb:66:ef:
66:d6:5e:38:43:42:fa:26:de:b1:ce:a5:27:ac:be:
d0:d5:b2:2b:e2:be:f2:bc:3b:08:e6:8a:52:bf:db:
59:20:fa:79:f0:36:8f:5d:37:53:52:61:04:15:ca:
0d:17:ae:8e:a6:46:9c:49:5c:eb:fe:f4:58:79:66:
a1:38:65:4d:07:cb:2e:40:0e:74:be:e8:6f:46:12:
66:dd:02:0b:81:4c:25:7a:d8:9e:ba:55:5f:c1:ef:
23:a4:a3:69:0b:a2:5d:59:4c:6e:a2:01:7a:a3:ea:
95:c0:90:c0:09:b8:1a:7b:aa:72:7c:56:8f:07:d1:
9d:e4:07:b4:48:51:32:d5:c0:8e:77:8f:d2:a9:13:
64:0d:b4:74:b9:0e:6a:77:51:5c:ea:94:82:97:4d:
c0:ce:b6:ad:59:b5:9f:ba:74:8d:44:18:ce:d2:a8:
52:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:35:F1:FA:8A:7D:66:19:9F:00:D5:ED:80:49:81:A0:67:ED:9F:02
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:08:ff:8d:f0:44:de:31:48:5c:44:1b:c8:cf:e4:97:8d:49:
10:6a:bb:26:76:bf:12:3a:73:d6:00:97:46:67:7a:ca:25:6a:
c3:4b:11:86:83:65:0f:cd:0d:b6:82:95:42:ae:1a:3b:bb:f0:
d8:00:d5:e1:1d:01:82:74:b4:67:0f:17:2e:00:5c:50:cb:d6:
e3:ab:79:08:15:68:11:b9:75:45:0f:6f:a1:39:eb:dd:a5:bc:
59:91:67:fc:0b:4c:4c:cb:67:0e:d5:32:9d:65:dc:cd:1a:53:
5a:e7:6e:15:d4:b3:ed:27:df:c9:0f:b2:97:c9:cd:ef:3d:9c:
1a:68:1c:57:47:81:da:21:a0:85:39:47:ef:b5:f3:e8:6a:5a:
c0:ee:5e:e6:b9:e7:35:26:31:43:f5:e6:d1:2a:83:fb:c7:04:
19:6e:11:f3:fa:8b:76:23:17:5e:59:d4:c6:e3:0f:d9:b5:f9:
d8:95:9b:2c:3a:bd:c7:94:9d:0f:6d:78:85:d1:0d:ba:22:7f:
1c:34:92:52:0b:80:c5:cb:7a:63:34:ab:01:6c:80:21:64:59:
5e:1c:4d:e6:6f:5d:a5:03:c9:c7:ff:22:89:6c:1f:ba:fc:76:
d7:8d:71:5d:57:59:52:ea:58:f4:3d:85:e4:c2:8f:96:dc:5a:
2a:7b:0f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:37 2025 by rpki-client