Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
File: WsRdmhoiQWgz3lml5hnRIJbQlp4.mft (raw, json)
Hash identifier: k0eiIoTTiSr2eLl+siSusffTgWkezM+m+CSn4DtdqvU=
Subject key identifier: 0F:83:51:9B:A1:4E:AF:CE:EA:C9:06:EF:FE:76:24:F8:74:DE:5D:F3
Authority key identifier: 5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E
Certificate issuer: /CN=5ac45d9a1a22416833de59a5e619d12096d0969e
Certificate serial: 019A51F54600B2E21B0DF466B05A2288171C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
Manifest number: 1062
Signing time: Wed 05 Nov 2025 03:00:19 +0000
Manifest this update: Wed 05 Nov 2025 03:00:19 +0000
Manifest next update: Thu 06 Nov 2025 03:00:19 +0000
Files and hashes: 1: WsRdmhoiQWgz3lml5hnRIJbQlp4.crl (hash: LYVF0O5KpRwayuBX2CXstqTPqgyrsmGXQ3OhWiEIlm0=)
2: X2K16vfCCw5yGYZ35G284aX5j-w.roa (hash: 1LbHM2S0fWzRZr7mNPkcXGUnRUmoTc3QJQmvi/4U+L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:46:00:b2:e2:1b:0d:f4:66:b0:5a:22:88:17:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac45d9a1a22416833de59a5e619d12096d0969e
Validity
Not Before: Nov 5 03:00:19 2025 GMT
Not After : Nov 6 03:00:19 2025 GMT
Subject: CN=0f83519ba14eafceeac906effe7624f874de5df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:84:c1:79:1a:97:4f:d3:a4:37:d7:d1:05:
88:a8:48:a1:ce:48:64:2d:90:0e:f6:ac:84:95:24:
3c:3c:60:b8:cd:10:d5:c5:18:36:d8:6f:e9:fe:9f:
04:5e:76:6f:46:f4:9d:bc:51:e6:81:61:0c:54:cb:
7d:ea:3d:16:da:0c:ea:dc:32:93:02:d7:4a:c0:f0:
1f:f4:29:0b:5e:6f:50:4e:11:3e:fe:ee:3d:60:37:
bc:30:f7:73:63:15:7c:5a:31:1d:a9:21:3f:3c:1b:
db:65:04:8c:45:58:3e:3d:4b:a7:21:15:d8:2b:27:
f8:31:53:4e:21:a3:c1:23:d5:cd:e6:4e:da:cc:a0:
54:ae:75:4a:27:b3:13:6e:e1:1a:8d:f5:42:ef:f9:
7d:8a:b1:2d:63:4c:6b:3c:da:df:fc:be:a9:c8:d3:
bb:69:3a:96:43:a9:4a:4d:ca:ac:33:08:d3:8b:29:
5b:d9:36:68:3d:88:3c:d0:ea:f3:22:03:44:ec:8b:
87:67:ea:06:d0:98:3e:c1:f2:ae:3e:1e:99:13:d0:
68:ea:94:c8:3b:1c:38:df:fd:f0:3d:89:9f:68:0b:
8e:3b:e0:2e:a2:b1:18:d9:5f:bc:78:31:04:bd:6c:
bf:ba:a4:68:42:70:05:46:e6:20:c4:2e:6f:19:60:
86:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:83:51:9B:A1:4E:AF:CE:EA:C9:06:EF:FE:76:24:F8:74:DE:5D:F3
X509v3 Authority Key Identifier:
keyid:5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:55:14:93:58:67:e3:ef:c6:53:41:70:7b:45:db:7f:9e:5f:
aa:5e:79:2b:30:10:81:a9:71:f6:13:35:5d:31:b0:c8:8c:d3:
ea:58:a3:df:7e:8b:67:3f:94:7c:10:a4:7f:50:dc:16:0c:a6:
b9:38:c3:ae:a1:3b:c7:9d:cd:f0:19:08:0a:97:f4:b6:19:62:
1e:cd:9c:c1:55:4f:a2:8d:be:cd:0a:7c:76:3d:aa:e4:9f:8d:
65:30:85:75:5b:b3:55:8c:e0:a3:e7:3b:f8:b3:5d:60:de:48:
00:51:35:43:5c:56:c0:e3:e1:04:4d:9c:a7:70:77:dc:65:0f:
7e:89:71:3d:e8:aa:09:36:a5:f1:2f:e9:6f:13:60:04:16:b4:
e2:15:83:61:c6:f4:86:76:a0:07:59:58:8e:6d:1c:38:b3:54:
29:0a:d4:b5:02:39:72:02:29:fd:e2:11:0d:13:6a:d2:79:4b:
dd:17:be:46:23:17:a9:69:04:52:c4:e2:41:36:81:f0:11:f6:
8d:e9:a7:c1:e0:6a:f6:75:12:63:48:6a:fb:84:21:28:1b:47:
e2:1c:85:36:4f:75:47:c2:35:fb:2a:48:cf:04:e8:63:f9:ff:
02:d2:e5:14:6d:ea:33:9b:04:27:6a:b7:ec:24:65:a7:f0:90:
12:a8:ec:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:54 2025 by rpki-client