Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
File: WEfx9Pa8sqR1isipl7wQgADkGNE.mft (raw, json)
Hash identifier: RY49OVPe2I45lr5iMNDEAiXf4P0Np3G3R9Ug7zhdcDM=
Subject key identifier: DF:54:10:2C:99:E2:0C:4C:57:F2:33:E4:EF:87:EB:7B:F8:8F:CD:0F
Authority key identifier: 58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
Certificate issuer: /CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Certificate serial: 019A4D062C81438ADBACC5A9C5F87E1FE7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
Manifest number: 0A96
Signing time: Tue 04 Nov 2025 04:00:41 +0000
Manifest this update: Tue 04 Nov 2025 04:00:41 +0000
Manifest next update: Wed 05 Nov 2025 04:00:41 +0000
Files and hashes: 1: WEfx9Pa8sqR1isipl7wQgADkGNE.crl (hash: XvTAG1HU8c3i/4UuI1PCXKNYETZXvYPWwD4wYieGNO4=)
2: wIsKAJrVffRqz6laEWhWTAS6tTY.roa (hash: V1Qapun8icHJI/Zpv+MiEjbXSsE72DuavneqFQZT08I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:2c:81:43:8a:db:ac:c5:a9:c5:f8:7e:1f:e7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Validity
Not Before: Nov 4 04:00:41 2025 GMT
Not After : Nov 5 04:00:41 2025 GMT
Subject: CN=df54102c99e20c4c57f233e4ef87eb7bf88fcd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:a4:67:df:92:2a:4a:7d:e7:8d:90:90:81:
6f:59:43:86:c8:87:65:a2:79:57:0e:fb:8e:bc:9a:
b2:ca:0e:50:09:c0:77:11:a0:9d:e8:6d:e0:d3:b0:
bc:47:6c:39:f5:ad:be:e2:0f:cb:e4:9a:a4:04:a9:
21:a4:b3:bf:ce:61:dd:15:28:7f:1e:9f:b0:0a:22:
49:d3:82:6c:73:ac:1b:e1:f6:04:71:f9:5f:13:e1:
2c:c0:40:67:35:ca:29:41:6c:be:af:c6:55:39:ad:
05:62:6b:bb:e3:7f:7a:e6:7b:d6:4d:5c:33:d8:38:
74:63:9e:04:01:24:05:e9:dc:4e:dc:d7:ac:84:9d:
5c:cd:1f:1c:3f:3d:57:06:54:40:46:c7:6e:f7:c0:
52:49:15:34:6f:65:89:cd:8f:dd:b8:30:9d:29:86:
30:b3:02:83:b6:8d:1a:28:3c:e2:62:61:e6:c7:17:
79:d4:74:e3:ad:c4:d7:12:d1:aa:9b:06:2e:e9:70:
5c:24:dd:55:e9:e2:a6:4d:3c:3d:4c:23:51:2e:0b:
15:63:1c:d9:86:49:4b:08:64:9c:1d:42:bb:7d:23:
87:4c:7f:88:ea:b6:13:c5:07:2c:6b:fc:92:1f:0d:
ee:db:3f:ec:06:d6:46:24:f0:0c:a1:a8:48:20:d6:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:54:10:2C:99:E2:0C:4C:57:F2:33:E4:EF:87:EB:7B:F8:8F:CD:0F
X509v3 Authority Key Identifier:
keyid:58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5a:ee:20:88:ee:ad:5d:aa:97:31:38:40:3a:7a:e6:0f:21:
4b:d8:16:4e:1d:81:c1:d9:94:0b:05:74:0c:47:6e:65:bf:89:
30:0d:0c:1e:10:35:d9:b9:c1:5f:cf:e9:56:46:cb:ad:0c:01:
ac:47:59:2d:5f:0e:d9:67:4e:9f:fe:df:2d:fb:16:12:0e:9c:
a7:06:14:19:db:77:9a:b5:dc:8e:08:b7:df:87:67:e1:db:01:
8f:1d:dd:af:9e:03:13:58:cd:ab:5c:80:1a:56:ae:54:29:45:
58:2a:9b:ff:61:84:f4:5c:ad:85:37:38:11:30:88:d7:9b:6d:
ab:73:0b:72:05:f9:5f:3b:25:0d:e2:5b:7e:81:9f:83:12:74:
1f:f4:2f:e4:38:3b:3e:01:35:bd:90:44:61:43:2c:01:9f:ed:
9f:6b:41:6c:49:31:79:f3:45:ad:fb:97:10:f5:28:b9:d9:1a:
ec:7a:1e:a6:d9:bd:da:21:82:8d:c7:ec:b5:0c:82:c3:f8:e6:
f4:4a:df:56:fe:66:47:cd:5d:1b:71:6e:e2:5b:35:2f:f9:1b:
75:4a:14:b4:e0:12:b6:38:84:bf:21:5f:40:76:75:4c:de:6a:
23:4e:99:15:51:cb:d3:ce:3f:ee:53:d0:55:ee:d7:66:c6:42:
8d:b6:79:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:08 2025 by rpki-client