Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier: vzPt1z73wQwRULI3G+8kpeQGpWjp7yyF/fuhpYm3K+A=
Subject key identifier: 1B:16:A8:65:8E:CE:6C:C1:E4:49:AC:01:F6:BC:46:0B:8A:91:25:45
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 019A4E86485D6CBAA21D8059FD25A6BF5789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number: 171F
Signing time: Tue 04 Nov 2025 11:00:14 +0000
Manifest this update: Tue 04 Nov 2025 11:00:14 +0000
Manifest next update: Wed 05 Nov 2025 11:00:14 +0000
Files and hashes: 1: 3IRgLqbP_ec1EGoarWc4xpisfyQ.roa (hash: GZRzYUts0dDxW36RNVg638JimijfwAxJcVtkZHDVq/A=)
2: 96CIMKKoqN02QJYrluNPvEhoHEk.roa (hash: PH9kqz02Fz7yivfLv32cVnK1ToPORdX94byNA/yE6eo=)
3: HcTZ55L4MSrkLfHwNTyTNa60af4.roa (hash: lgA8q/P+YEtpYxddfFcHkInhcj8mF/W8Rf9rQjSJ6rQ=)
4: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: T/n0aeHayiiW2DuyKkmD3+BtQzaTie/fgjx+azoaXVg=)
5: hVkEcV5BYqMN66hJqLsfxmtD6-I.roa (hash: qGjxxeMK37L3nzimP1DFdWK9NxQEtXmgcd3DzWsOUEg=)
6: i7LPx3k5NSVEBiacqO7vPHaWiwU.roa (hash: gYTLRIvfaUJXoKPS7pQ+Cpl5E8jxQVsdISY+9vzV8lg=)
7: t7xFNtek28TRqAwV5AsSOdRcmio.roa (hash: q0nm/KnHwfhrXByIEAa1Oz0ny+0DeTEXrb5cVZLEYz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:48:5d:6c:ba:a2:1d:80:59:fd:25:a6:bf:57:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Nov 4 11:00:14 2025 GMT
Not After : Nov 5 11:00:14 2025 GMT
Subject: CN=1b16a8658ece6cc1e449ac01f6bc460b8a912545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:97:11:76:3e:52:85:85:2d:e4:2c:cb:97:
17:65:c0:fd:a8:71:b4:8d:22:f6:b7:4b:53:a4:85:
1b:84:d3:10:eb:ab:04:94:67:91:32:7d:92:f9:7f:
93:58:84:7e:30:94:14:09:0a:0c:06:f4:49:0a:ca:
4d:c2:27:8c:72:f2:af:84:d8:55:cc:a2:f0:c6:b8:
57:db:65:21:dc:89:95:b9:28:19:ac:69:b7:59:39:
fb:8f:f3:05:17:e3:1e:68:9b:05:82:eb:60:44:fe:
60:93:35:f7:98:67:30:5c:f7:f9:17:f4:90:32:62:
4e:bc:39:e6:aa:b0:ab:61:45:f3:e1:a8:a6:04:4e:
21:d4:f6:38:9c:31:2f:70:df:f7:3a:9d:d6:97:d2:
cd:a2:4b:7e:2b:bb:51:1b:d0:11:97:da:f3:d9:b3:
45:00:10:cd:b0:54:20:3b:f4:e5:fa:fd:68:e4:74:
98:7f:e3:fd:e4:42:ef:78:da:1c:0a:f6:38:12:1f:
48:b1:e6:b2:8e:f5:43:d3:79:3b:e5:ad:28:4b:12:
ba:86:b4:72:65:14:2e:8d:dc:5f:6c:98:09:da:49:
bf:b0:98:c9:d4:c3:a2:38:16:e7:29:b1:3e:9a:9d:
8c:49:55:10:31:64:ca:a7:4b:3f:52:ed:72:19:9f:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:16:A8:65:8E:CE:6C:C1:E4:49:AC:01:F6:BC:46:0B:8A:91:25:45
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e8:47:5f:cd:ea:76:58:46:d9:dc:35:a0:1a:be:fb:6a:3b:
d0:2c:29:3e:df:13:36:37:2f:20:14:68:fd:1c:34:0d:f5:11:
06:a3:1e:2a:b7:e2:b3:43:b3:c6:92:ad:fe:26:04:c8:c2:3d:
3d:71:a6:49:f4:bd:e3:22:0c:c2:b6:d6:20:f2:c2:a7:44:e5:
85:4c:02:9a:8d:2b:4b:51:3d:98:4a:5d:ef:a6:88:46:d3:2a:
8f:25:83:c6:e8:12:78:6e:10:77:04:0c:2d:8e:68:f3:38:19:
59:dd:06:d2:29:37:e2:2a:d1:87:8e:3f:ef:4b:dc:5e:33:d5:
cf:85:f8:44:fa:23:0b:fc:b9:9f:c1:8f:1a:c3:ae:5e:5a:ac:
50:c1:25:b2:c5:b9:ff:b7:93:b2:ec:72:c5:76:49:11:2d:5f:
46:07:90:f8:49:ad:ce:4d:df:8c:d9:9e:c2:6c:7e:8d:cd:38:
88:6b:95:f7:bd:d6:d8:31:f9:01:16:d1:74:aa:f1:75:f2:c0:
df:29:be:15:ca:99:a5:fb:0d:4a:e4:b2:5a:d7:6c:0e:05:1b:
20:93:b4:ef:b9:94:4c:1b:1d:fb:e1:97:8b:8c:8b:ed:25:57:
26:f6:8c:c6:0e:7e:88:10:15:9f:cc:fe:95:3d:b5:39:c7:7a:
8f:6f:47:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:31:36 2025 by rpki-client