Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier: rKqKEIKjGeOAzUUatUxRaevksvR6L/OBmcFXuvGaQVs=
Subject key identifier: A3:57:7E:3A:84:0D:AF:9D:AA:2D:41:17:AC:E1:37:88:60:2D:85:51
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial: 019A552DFF8654E70707C37F38998957488E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number: 108E
Signing time: Wed 05 Nov 2025 18:01:09 +0000
Manifest this update: Wed 05 Nov 2025 18:01:09 +0000
Manifest next update: Thu 06 Nov 2025 18:01:09 +0000
Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: xkndjj2Cnk/9QobXk1bEcWlHaIzMzWpHOkXJOetbMmg=)
2: rwRRPql1rIQzsq_i06yzoO2wgHQ.roa (hash: 0FdnTsSRRUfY+3q4ZnKlxf+D+uYOXphiuhAQtxiPw20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:ff:86:54:e7:07:07:c3:7f:38:99:89:57:48:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
Validity
Not Before: Nov 5 18:01:09 2025 GMT
Not After : Nov 6 18:01:09 2025 GMT
Subject: CN=a3577e3a840daf9daa2d4117ace13788602d8551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:d7:58:4d:2b:24:b6:70:96:6e:0a:5d:90:
56:8f:25:c2:3a:65:d6:76:e4:1e:dd:e8:78:9a:1f:
29:4e:7e:28:24:07:5d:3a:c0:75:98:2a:df:87:cf:
8d:0f:cb:0f:e0:05:15:c8:a1:6d:62:fa:ee:e7:58:
55:47:19:f4:cf:0e:d4:4d:a4:db:b4:fb:05:09:b8:
cf:4a:f7:85:0c:bd:42:f9:ec:35:94:fe:b5:e0:03:
dd:3c:ff:46:1d:9d:bc:f5:5a:dc:2b:ea:ab:fb:35:
f4:8d:9f:0a:16:be:bf:2c:56:3d:a2:87:fc:13:43:
e3:7e:07:b7:ba:65:34:4f:f7:ab:6f:b3:37:34:82:
fb:3b:c8:eb:4b:63:23:b0:09:4b:1c:3c:3b:4a:2d:
1a:3a:d3:cd:9f:85:07:07:e5:82:cb:dd:77:e5:f0:
d3:fc:80:77:1e:b2:41:a9:c0:d0:18:1f:d3:33:f0:
fa:51:da:ae:2b:24:b4:85:64:a5:dc:12:2f:3f:c3:
8f:b1:92:23:c1:82:6e:db:a5:04:fc:1d:7c:ec:0a:
99:74:ac:78:a3:33:be:6f:d4:c1:9c:9f:9b:7c:aa:
a2:70:ac:9f:65:14:e3:4e:2c:a1:64:c7:5f:00:bb:
8b:e1:82:26:a7:d4:a2:69:d5:a9:5a:ba:ea:fc:34:
f6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:57:7E:3A:84:0D:AF:9D:AA:2D:41:17:AC:E1:37:88:60:2D:85:51
X509v3 Authority Key Identifier:
keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c2:04:1c:c3:7a:b9:1f:70:89:72:7d:06:98:92:70:14:78:
e6:07:43:ff:9e:66:ed:d9:b0:37:66:cd:6b:f8:70:3a:15:47:
4b:31:7f:8b:31:d4:6f:f6:05:94:ea:d5:17:2b:f7:b2:7b:4c:
f5:bb:3e:ea:10:1b:37:e3:fe:d4:79:a9:ce:3d:9e:29:64:f5:
3d:74:0a:73:de:00:5c:dc:34:ff:31:43:aa:4e:3d:64:45:5c:
04:96:53:b4:3a:86:5f:02:0d:19:d9:3a:b5:98:d2:e2:68:0e:
d5:ff:e5:5b:2d:4c:75:28:a4:d4:f1:10:14:59:a5:f0:74:7c:
65:b6:5e:27:d8:4b:d2:52:66:2d:20:22:c8:04:f1:81:6b:4b:
ea:45:b8:a0:05:d5:6b:16:0f:2a:47:86:bd:68:78:6a:a8:96:
6e:ff:05:fd:e9:5b:f8:2d:20:69:de:b8:75:d9:1b:73:79:7e:
ba:f8:81:0a:c9:cc:02:5c:79:04:c1:94:17:67:bd:d9:a9:e9:
e4:9a:20:d2:77:ef:0d:e8:bf:48:56:11:c5:c4:5b:51:23:46:
30:0d:7c:35:48:28:20:c4:e6:28:a5:b4:81:2a:d0:00:ee:4e:
72:36:26:0e:c3:89:63:25:e3:ac:2b:c2:0d:de:74:b6:cf:d5:
fc:d2:90:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:13:53 2025 by rpki-client