Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
File: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft (raw, json)
Hash identifier: nvSRSNsV1RZxH+h30/q6IFCgHW5a4HFsjuNrW4OY2OE=
Subject key identifier: 75:9D:CF:32:0C:97:E2:3C:76:8B:CC:87:40:B1:79:36:D1:14:52:63
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Certificate issuer: /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial: 019A53E3BDE628BE59DA677D7D3D7618A66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 12:00:25 +0000
Manifest this update: Wed 05 Nov 2025 12:00:25 +0000
Manifest next update: Thu 06 Nov 2025 12:00:25 +0000
Files and hashes: 1: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl (hash: Rwl2VIQKwrZ8uVMyWQ+FMV7Oi+vrl+ewKcfFvm9RYjg=)
2: aiBw7mg-7iWQbjUD1MChAVL_Coo.roa (hash: KeivAY3qo56HW2nMzFcSP1tB4CHei3XM2+AGnhTVVP0=)
3: jqsja3Ig_Inj8Kr-paXhHO8forw.roa (hash: lgk++/8/iHEqAJTqQrY78sNZtOq1z4JSDJP8vNMWH0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:bd:e6:28:be:59:da:67:7d:7d:3d:76:18:a6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Validity
Not Before: Nov 5 12:00:25 2025 GMT
Not After : Nov 6 12:00:25 2025 GMT
Subject: CN=759dcf320c97e23c768bcc8740b17936d1145263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:4a:ad:a9:61:8d:7d:33:37:fd:10:d1:12:
0a:8a:9b:ff:97:62:86:5f:d0:6a:16:d5:fa:9b:1c:
f9:fe:ce:82:cd:4b:29:e0:8e:ed:af:73:ef:19:8d:
df:61:cb:57:c3:ff:ae:18:02:02:71:8c:9d:a1:58:
7f:bb:b0:31:6f:71:f2:c7:6f:bc:21:85:87:25:7a:
c1:55:5a:81:cd:f6:c7:1d:b4:9d:d2:ab:85:4f:99:
ef:23:cb:fe:9d:da:dd:de:a8:c4:a7:64:02:b5:65:
25:84:1f:28:1b:0c:de:c8:d6:31:bb:b4:db:19:a7:
60:2c:d0:c3:11:d1:b8:c6:b5:c5:7c:87:84:03:b5:
33:00:9a:76:80:95:62:47:40:15:43:5a:17:6d:a1:
3d:f8:a7:34:15:96:0f:06:8d:81:84:44:48:a6:a8:
9e:60:71:f2:c0:58:15:13:6e:44:13:8f:cf:25:ab:
31:e5:7d:39:17:7c:f5:af:d5:b8:38:60:40:ff:83:
eb:13:cf:04:2a:1a:db:66:cc:3b:05:99:2f:fa:28:
07:78:38:1f:39:4b:26:ce:ec:25:c4:ee:9c:8d:38:
b5:d2:3c:d3:34:43:09:1a:38:6b:24:53:39:51:2e:
89:67:8c:97:2f:7d:b0:67:40:01:4e:f7:af:7e:21:
07:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9D:CF:32:0C:97:E2:3C:76:8B:CC:87:40:B1:79:36:D1:14:52:63
X509v3 Authority Key Identifier:
keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:43:59:1a:97:57:2f:62:fb:ca:92:50:b7:fd:d0:9e:4f:d7:
6b:44:b7:b8:ec:f2:53:f0:6d:cd:36:b9:0f:8b:80:95:a0:f4:
31:2e:6e:1c:88:5d:b3:cc:ee:48:38:22:2e:dd:8e:f2:17:fe:
0a:98:a2:95:33:5a:78:af:6b:a6:78:45:3a:50:39:ec:28:18:
83:b7:83:52:c6:fb:b1:f7:81:e8:be:8e:eb:50:d4:61:ff:1b:
e9:6f:ba:b5:ce:c4:91:e5:ad:c6:eb:15:9b:f2:a7:d2:8c:e4:
5a:d6:f7:57:f1:3d:91:25:78:31:ad:3c:37:4a:65:63:a3:e8:
8b:b5:de:aa:87:02:36:68:2b:ac:05:80:4d:20:2c:cb:80:e9:
7b:01:9a:f3:ad:a6:57:b2:f1:24:07:b0:87:63:86:24:c6:9c:
cb:49:c0:08:ce:50:80:98:76:38:54:c5:91:18:64:ec:c5:49:
2e:b2:03:ee:43:e3:e8:a5:1e:c6:9c:80:da:00:44:32:6b:2a:
60:3c:6c:88:47:74:3a:b7:17:f5:58:1b:df:50:8c:d0:af:11:
35:16:37:d2:93:f3:8f:4a:c3:55:a4:fc:e7:7e:b8:d3:6a:8f:
8e:4c:63:a8:88:e8:7c:31:ed:b7:20:ec:69:09:f0:c1:c0:9b:
96:ec:01:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:18:42 2025 by rpki-client