Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
File: WN0QF8U0V6ipIUGWh73oqLjrVhE.mft (raw, json)
Hash identifier: R71yPFQwbd97vm0Fusr0FE9TkCwNUynRZYlo6AMUpUE=
Subject key identifier: 85:89:0C:80:9A:84:61:7C:72:21:D0:65:EA:70:FF:CD:B0:4C:74:E4
Authority key identifier: 58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11
Certificate issuer: /CN=58dd1017c53457a8a921419687bde8a8b8eb5611
Certificate serial: 019A4F2B4861AFC0E70091D01562D720AB8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
Manifest number: 0DB0
Signing time: Tue 04 Nov 2025 14:00:27 +0000
Manifest this update: Tue 04 Nov 2025 14:00:27 +0000
Manifest next update: Wed 05 Nov 2025 14:00:27 +0000
Files and hashes: 1: WN0QF8U0V6ipIUGWh73oqLjrVhE.crl (hash: VspsOGMHh0rh/fCkEikaRENxvRjmS+BfZItEH03R7Go=)
2: jywZ9UYkMiz97kwCY4FM3q95-aY.roa (hash: u66se+BAVSb1YHlBvMoU6Y/uC6cRzOafh9TsvAog2jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:48:61:af:c0:e7:00:91:d0:15:62:d7:20:ab:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dd1017c53457a8a921419687bde8a8b8eb5611
Validity
Not Before: Nov 4 14:00:27 2025 GMT
Not After : Nov 5 14:00:27 2025 GMT
Subject: CN=85890c809a84617c7221d065ea70ffcdb04c74e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:c1:4e:a7:84:4e:bf:55:e6:1b:3a:72:82:
80:6d:1d:56:20:a4:a9:60:c8:28:b8:ef:eb:4b:cd:
99:b8:ce:86:2d:92:03:46:67:a5:6f:68:94:eb:9e:
3b:b1:37:0d:c8:6f:79:ab:68:e3:71:33:61:8c:6b:
d7:26:6b:08:e7:8c:b0:a5:cb:13:17:9f:6a:06:bb:
56:cd:ef:30:9b:81:5a:9b:77:41:35:9a:e8:03:ca:
76:af:bd:b1:29:07:18:90:87:8d:ea:9a:fc:70:20:
39:73:14:6b:09:56:c7:da:7e:64:cc:ad:70:bb:70:
62:fe:10:17:20:d2:ac:b8:89:d6:ce:ec:e2:a4:3a:
93:95:c6:62:fd:fc:06:98:df:83:22:1f:e5:d5:3d:
e4:ea:fc:18:78:a1:e3:a1:d5:3f:bb:e3:2f:21:31:
a2:7e:15:68:a4:e6:52:0b:e5:c2:40:31:dd:41:2c:
c0:c0:42:dd:7e:d8:66:6e:02:e9:77:13:87:3c:2b:
07:05:c8:e4:d4:eb:08:7f:f6:7c:b4:1f:f8:67:7b:
51:f7:ea:84:6a:14:4f:e8:1b:83:28:85:a8:77:ed:
e3:a8:48:5f:7b:a7:55:2a:88:6a:ea:1f:6f:77:bd:
05:b1:12:a5:65:e5:bd:c8:ff:18:35:8e:93:c9:50:
c8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:89:0C:80:9A:84:61:7C:72:21:D0:65:EA:70:FF:CD:B0:4C:74:E4
X509v3 Authority Key Identifier:
keyid:58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:91:50:43:ca:2a:39:8c:df:a8:b8:f4:e1:82:56:8e:74:69:
3c:16:cc:7d:cc:40:b5:1d:e9:23:27:22:70:62:28:e8:dc:09:
e5:ff:19:79:93:ee:61:cf:01:b0:48:3e:2a:43:ab:d6:37:a4:
c9:1d:b0:6d:87:ca:c3:23:8c:6b:8b:4d:40:26:66:0a:f9:96:
8c:0a:40:52:04:2c:9f:ba:57:02:eb:24:25:68:aa:bb:24:95:
7f:a3:f2:b9:f1:0c:2e:0b:a1:7f:ee:c5:27:f4:ac:15:a0:a1:
d2:4a:bd:d3:b0:83:b3:0e:f6:f9:96:39:37:31:8a:16:a2:d1:
03:be:1d:b8:37:da:96:41:e2:31:24:2f:f5:7c:94:df:0e:25:
c1:98:ba:b6:4f:3d:e9:6f:ca:50:91:3f:1f:b1:67:ed:08:35:
28:12:43:12:df:4b:76:83:24:d6:fe:98:b6:36:a2:0c:42:8c:
1d:de:2e:70:32:11:7a:bf:b8:64:63:d6:ae:5b:50:31:bf:29:
df:2e:cb:b8:2d:f8:0f:3c:02:e7:14:74:06:94:dd:df:b6:20:
41:fa:a4:e8:00:76:5e:25:47:4e:82:9d:b7:13:38:9f:14:8f:
63:4d:31:d4:48:1f:a0:1a:13:57:c3:31:f8:28:5e:a2:53:bc:
64:30:af:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:06 2025 by rpki-client