Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
File: WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft (raw, json)
Hash identifier: cQml87oS9GlmLIlRzSBvc1cNF3+PKVFxoDrhJlMthE8=
Subject key identifier: 39:E5:11:F5:A0:FF:65:AA:43:11:4B:F0:A1:C9:E9:30:3A:93:0A:11
Authority key identifier: 59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
Certificate issuer: /CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Certificate serial: 019A503DE4E5C505A1AFD95D8B5486906CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 19:00:24 +0000
Manifest this update: Tue 04 Nov 2025 19:00:24 +0000
Manifest next update: Wed 05 Nov 2025 19:00:24 +0000
Files and hashes: 1: V-65NroNLvpJ9Twbo3fHxbLWAEE.roa (hash: NtuVubfew3le+olU13mvFJqg5qy010/3pkiRpLBMMVI=)
2: WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl (hash: r7DshMS4iGfronVQ0GHoDnTlZ0qroUOAN4R4mnFOcAg=)
3: k0eS8GbpTFpaVPi3K9_CZDFOaPU.roa (hash: Ej4uiaS/aPM289NUT10w3nroNfgE/+kc/Uq0qTQREqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:e4:e5:c5:05:a1:af:d9:5d:8b:54:86:90:6c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Validity
Not Before: Nov 4 19:00:24 2025 GMT
Not After : Nov 5 19:00:24 2025 GMT
Subject: CN=39e511f5a0ff65aa43114bf0a1c9e9303a930a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:fa:e2:94:27:43:0f:04:2e:e6:99:68:10:
7b:62:cf:5a:24:72:3b:88:b9:f4:f8:6a:e4:fe:6c:
d7:3c:0c:a5:0a:35:d6:5a:2e:91:f4:e3:c2:03:09:
ba:f8:5b:8a:d4:bf:13:84:ec:f1:3e:15:9c:69:15:
ce:05:f2:9d:58:9c:eb:07:b8:3f:e9:48:4f:00:61:
aa:3b:b2:5f:fa:ef:32:01:49:ee:d5:0b:71:10:54:
96:17:50:f3:90:00:5e:43:a6:ce:84:17:c7:50:a8:
c3:f1:48:15:23:8e:d6:9f:2d:33:b4:ba:f2:9c:22:
b6:f5:28:cd:60:8e:9a:17:5e:cb:f9:43:d1:59:43:
0d:8a:dc:4b:3d:0f:34:c0:08:2a:b6:04:33:7b:c2:
a3:7b:ef:b7:d8:bf:ed:fe:b5:5a:55:8b:27:4e:21:
cd:c6:87:a7:be:a7:c6:c8:f8:b8:7e:06:db:70:72:
8f:fb:ac:ae:20:d8:78:ea:d7:30:f8:e2:c7:7f:3f:
47:d6:91:ff:bf:86:a4:f7:39:af:66:d3:ce:d9:41:
c7:c2:cc:a3:e7:e4:bf:ee:a6:98:45:b0:ee:03:30:
aa:0f:82:b0:12:4e:0f:4c:a6:01:13:f7:a8:dd:e7:
fd:73:dc:18:a3:fa:14:67:a0:d0:46:58:a7:bc:b6:
35:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E5:11:F5:A0:FF:65:AA:43:11:4B:F0:A1:C9:E9:30:3A:93:0A:11
X509v3 Authority Key Identifier:
keyid:59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:39:4d:67:f8:a0:81:78:0d:69:5b:67:78:a8:3f:49:13:e8:
26:67:aa:a8:e6:3f:e7:8d:54:84:1a:f1:19:f1:c5:6a:91:a6:
7b:44:c8:35:d9:a1:33:65:64:69:05:18:c6:45:3e:cd:3a:21:
aa:1d:e6:6e:f0:e9:48:7a:3e:f7:dd:81:0d:36:41:f3:b0:f1:
c9:ff:49:cc:c0:52:ef:38:33:58:dd:8d:45:b1:e2:03:d2:d8:
2d:05:d4:0e:ed:1c:fa:42:47:37:f1:a4:80:42:bb:db:41:90:
b1:84:73:72:49:ee:ef:c4:46:37:f3:fe:45:69:f1:9d:4b:ee:
ab:58:9b:4a:f3:56:48:1a:2f:b2:09:8c:fa:83:50:47:d8:69:
c3:2c:83:c1:1f:b9:01:a6:f6:4c:66:9e:cb:c8:2a:ef:fb:3a:
65:25:58:84:c3:9f:b7:c0:42:3a:04:d4:4c:5f:b5:ea:cb:b3:
7c:9e:47:f8:ab:4b:0c:27:b4:a4:53:11:bf:c7:00:24:69:93:
74:0f:67:3c:14:17:10:71:86:81:f0:5e:44:83:a5:c6:81:38:
1e:37:09:fa:5d:c4:a1:8d:6e:2e:8c:98:5a:60:8d:9d:98:36:
45:48:11:06:af:06:6f:8e:a4:5e:d6:22:0d:0e:96:c4:ab:08:
0c:69:9f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:04:17 2025 by rpki-client