Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
File: WwyVAj-g0zsibu8vIsjso5BSa_A.mft (raw, json)
Hash identifier: T9bGBa3W7w2VMeylAsOglcYLykwmvsLKYh4iELUOQqM=
Subject key identifier: 84:77:3C:C6:A1:C8:FB:DD:52:7C:8F:68:71:18:84:E6:F3:78:BB:E7
Authority key identifier: 5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
Certificate issuer: /CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Certificate serial: 019A503E17153DF40D4B76FCDD107C74F1FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
Manifest number: 0E42
Signing time: Tue 04 Nov 2025 19:00:37 +0000
Manifest this update: Tue 04 Nov 2025 19:00:37 +0000
Manifest next update: Wed 05 Nov 2025 19:00:37 +0000
Files and hashes: 1: WwyVAj-g0zsibu8vIsjso5BSa_A.crl (hash: gmrQ1fTJfc3EEK5ldNcmFU8YSS9HuTwATiQiJO1v0vE=)
2: wllNqt1P393lVw_WgHLjVq0jQ3M.roa (hash: BBqAMtasXCpwxv6WN/tQ+Ub2hvQgjIJGzl78O7sCb5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:17:15:3d:f4:0d:4b:76:fc:dd:10:7c:74:f1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Validity
Not Before: Nov 4 19:00:37 2025 GMT
Not After : Nov 5 19:00:37 2025 GMT
Subject: CN=84773cc6a1c8fbdd527c8f68711884e6f378bbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8e:f4:ac:62:9a:45:c0:22:6b:04:30:6f:86:
b4:63:3a:33:9e:b1:66:51:19:a0:cd:9b:62:bb:b1:
12:0d:77:ef:db:24:d6:ae:dd:6e:9d:69:d0:8d:67:
30:43:a1:04:2a:98:5b:90:62:f2:67:bc:74:76:cc:
f3:12:31:96:ec:3b:e7:86:88:c2:17:71:a8:d6:fb:
e4:fe:20:1f:81:1f:9a:ea:15:c9:2d:cd:2f:b6:9b:
d8:53:a2:3c:93:2a:0c:72:fa:ea:22:a4:99:ba:ff:
85:9d:48:05:c3:5d:51:3b:f4:88:dd:c8:b6:5c:60:
fc:7f:8f:11:60:1c:8f:a7:5b:76:4d:6f:d9:58:d9:
b6:f8:cf:82:47:ea:7f:3e:ea:5d:6d:a1:65:0f:b8:
ba:32:76:4b:34:73:2c:5c:37:80:a2:52:a9:c5:95:
9e:de:8b:4e:a8:0d:71:fa:62:d3:f3:3b:f2:bc:5d:
59:2f:7c:12:76:90:83:95:84:ac:36:e6:52:7c:74:
67:0a:4e:a2:7d:9e:35:a4:e8:44:a4:3a:3c:17:e4:
69:97:1a:3c:9e:8e:b1:ba:ab:dd:ee:32:21:69:b1:
8f:c8:b4:b7:33:4a:7b:30:37:5c:fb:ec:4b:a0:ae:
98:4b:db:18:2d:91:c3:c0:b6:8a:7a:64:b7:52:af:
6e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:77:3C:C6:A1:C8:FB:DD:52:7C:8F:68:71:18:84:E6:F3:78:BB:E7
X509v3 Authority Key Identifier:
keyid:5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:17:b1:16:36:d9:33:e9:2e:d4:c3:86:3e:bc:0d:61:8b:d0:
1e:ee:45:15:20:83:6d:23:70:18:53:b8:ca:a4:54:14:7a:46:
9f:2c:0b:2c:66:fc:f8:84:19:08:d7:8a:84:f4:0b:4b:28:77:
d1:3a:82:6b:e0:7c:03:17:e7:f5:7e:f1:84:f6:84:be:7e:3d:
52:c8:36:b5:d4:ba:bb:33:23:c2:36:96:61:a0:d1:0e:32:d1:
74:a5:42:66:19:6b:d6:da:e4:ce:00:a8:36:d4:89:68:18:71:
33:6a:ea:2e:44:b0:fe:2d:41:e1:1f:59:6d:18:b5:8e:30:24:
0d:b6:82:2d:ae:fb:15:f6:d6:56:a3:ec:74:8b:b0:9a:2d:21:
9a:e3:6d:89:14:f8:a7:ea:a2:8a:0a:6f:94:aa:5c:59:4b:9d:
74:75:0b:3f:37:f2:9a:cf:b7:a0:f9:2f:bb:66:70:eb:49:73:
a0:90:95:ae:42:82:9d:66:5b:13:0b:95:31:a7:c3:7a:26:ad:
0d:a6:2b:54:d8:7a:2b:87:17:04:43:ef:56:47:e7:b0:42:f2:
71:64:6f:18:c6:3d:e4:f6:82:a7:4e:06:88:04:13:d0:02:6e:
57:6d:65:d8:5f:c1:df:50:bf:74:0d:b2:5c:e8:2d:ef:ed:9d:
3b:1c:ca:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:57 2025 by rpki-client