Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json)
Hash identifier: GJgE1PyrDqhoH5TEXBmpfiFIozWYP0XztHIZSQW7rKk=
Subject key identifier: 0A:74:2E:2E:59:B7:CA:C3:85:9E:D7:56:09:CF:80:AE:87:53:9E:E4
Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba
Certificate serial: 019A5263363DC4B49D89047186D3FC034984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
Manifest number: 01C4
Signing time: Wed 05 Nov 2025 05:00:24 +0000
Manifest this update: Wed 05 Nov 2025 05:00:24 +0000
Manifest next update: Thu 06 Nov 2025 05:00:24 +0000
Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: W/DKgw11rKUge09gj3U3JIhoCrKkIrZX+lve67FD5Jk=)
2: wNDSq8yZE9PBcRFzNVbL2mjY9tI.roa (hash: +CAo2P8QJyLpdrdtqSl+fQIj2IGhG8nr3/YTjB35bgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:36:3d:c4:b4:9d:89:04:71:86:d3:fc:03:49:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba
Validity
Not Before: Nov 5 05:00:24 2025 GMT
Not After : Nov 6 05:00:24 2025 GMT
Subject: CN=0a742e2e59b7cac3859ed75609cf80ae87539ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:28:4a:31:d5:15:5b:c9:30:0b:1a:4d:46:
78:16:a0:fe:e2:06:ef:fb:42:ba:14:1b:9e:a8:f8:
8e:6b:dd:d1:a8:85:b3:3e:aa:7f:62:90:4f:94:bd:
c2:cf:cf:48:5b:70:59:e3:de:d2:67:c0:45:24:69:
84:ef:eb:7a:a9:df:11:df:66:47:29:e9:ec:2f:99:
cc:63:0d:7d:51:44:01:48:8c:93:41:fa:60:ed:0b:
f3:81:69:5f:f8:ae:c7:c6:2d:ff:da:16:cc:63:2a:
47:ce:65:4b:22:e5:90:5e:88:c1:35:fe:b0:3d:64:
bd:3f:46:34:6b:be:35:67:2a:67:fc:bf:d6:3b:cb:
95:1f:51:c1:d9:4e:d6:d8:87:3a:66:8f:6f:83:1d:
d4:04:1e:46:28:3b:a7:1a:50:c0:d4:57:90:64:37:
ae:c0:26:bd:50:bd:1e:dd:1a:3c:08:c4:8f:1c:92:
ac:58:34:72:b1:10:d4:7a:56:a8:ef:9e:3a:64:ae:
e4:79:63:59:92:a9:8b:fb:bc:1e:94:f5:0f:99:41:
53:a8:82:45:5a:9b:1f:99:4c:4e:8c:d9:16:f8:35:
e4:d4:b2:4f:dd:6f:b0:2b:b7:dc:a0:ed:8e:dd:e5:
af:bc:3c:dc:cc:98:a2:74:5c:2a:f4:49:ba:c2:38:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:74:2E:2E:59:B7:CA:C3:85:9E:D7:56:09:CF:80:AE:87:53:9E:E4
X509v3 Authority Key Identifier:
keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9b:de:e1:59:76:5d:9d:48:7c:ae:8a:ae:34:4e:ea:97:f0:
bb:a2:81:55:fe:46:94:03:06:5f:f7:a9:3e:0e:01:a1:fc:de:
ee:fc:a2:05:60:2a:a0:64:0f:82:66:28:d8:25:5f:e5:d3:30:
22:b0:25:f5:41:d5:2a:a1:97:db:f6:0d:e1:1d:2b:71:5c:6e:
fe:b9:c9:3d:73:f0:b2:a5:59:e5:bf:e1:03:91:84:60:11:e3:
44:c7:07:77:0b:ce:70:e2:ec:5a:ac:74:88:c4:bb:e5:e5:de:
14:87:b5:0b:7b:86:8a:bc:d8:d3:6f:df:2f:59:33:d6:8c:78:
be:8a:1c:ad:31:f8:2a:fb:ec:a7:a1:9a:dd:82:9c:4a:0f:aa:
0d:30:34:50:84:3d:c3:b5:c9:2d:55:c7:bf:af:bc:4e:4b:38:
e1:b7:e9:8f:5b:f2:38:69:50:61:e6:e0:dc:03:d9:fa:89:8c:
26:50:10:28:04:bc:9c:09:ed:ab:58:ab:8f:e4:b1:7d:bc:bf:
08:2d:8a:b1:b5:b8:e3:2f:6c:ff:fc:ac:06:04:ac:f3:fd:c0:
57:6c:9d:3b:55:d7:2e:c3:7c:99:c7:af:e3:e4:70:10:13:2b:
52:6d:64:e9:4f:c3:07:ef:98:98:1c:31:ba:0e:e5:12:24:a8:
3a:67:cf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:54:50 2025 by rpki-client