Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
File: WP-hTfKonLZwljbysLVwq8z4uEs.mft (raw, json)
Hash identifier: CW9UIWGQxPeXcFhwEVk8uQibMseAAXM3ufF0l0rb1Do=
Subject key identifier: E2:5A:0E:68:78:27:61:F7:7B:46:0B:79:6C:AC:B3:C0:DD:A4:AE:E7
Authority key identifier: 58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B
Certificate issuer: /CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
Certificate serial: 019A4E1881CF0FEF5F9FC8E4DFAE870A6099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
Manifest number: 0D09
Signing time: Tue 04 Nov 2025 09:00:20 +0000
Manifest this update: Tue 04 Nov 2025 09:00:20 +0000
Manifest next update: Wed 05 Nov 2025 09:00:20 +0000
Files and hashes: 1: WP-hTfKonLZwljbysLVwq8z4uEs.crl (hash: RIluefO26TLHoMC8Zeuk+rVvddAzDmXS4bCsQ0l/tXA=)
2: veLJ4L5EYT10h17WiouBEd9ghYg.roa (hash: SL3KXjVWHmfowaZ8673tndrXHNHka8vX7pXlSqc5uVs=)
3: yWqbv8m78zRPBYHcRQrpHDhQyj8.roa (hash: SfVZhow6dDvaY/ddg+fEVIx1y/Hb6m65rBhEpqp4rjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:81:cf:0f:ef:5f:9f:c8:e4:df:ae:87:0a:60:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
Validity
Not Before: Nov 4 09:00:20 2025 GMT
Not After : Nov 5 09:00:20 2025 GMT
Subject: CN=e25a0e68782761f77b460b796cacb3c0dda4aee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:87:41:e2:2f:f2:cf:c1:c7:fe:40:4f:57:
2f:ef:8e:1f:44:a0:b3:f3:a4:f9:74:4c:9c:fc:f6:
00:38:80:d7:17:6e:69:11:64:87:ce:d7:67:ad:a7:
5a:02:00:05:6e:25:ec:99:65:be:9c:f4:d0:94:4b:
f2:46:eb:15:4f:13:9c:08:cf:ad:5d:14:02:b1:dd:
06:c7:eb:cc:87:0a:f7:58:9d:d0:fa:12:27:64:63:
f2:34:3e:93:7f:92:51:71:0c:d7:1e:4f:74:ab:2a:
69:3a:64:7d:b0:19:15:04:24:6b:b6:a7:fd:57:9f:
ae:90:47:e7:8a:9b:b0:cd:ce:6e:6c:56:a0:52:d4:
26:4a:d3:c6:d6:88:a4:1e:88:aa:76:f4:b1:ba:53:
00:d2:33:ab:c7:71:6e:c9:9d:c3:79:c4:76:e8:7b:
fb:86:cd:ae:21:1f:20:52:3a:d1:9c:cd:71:82:9f:
46:08:c6:9d:ac:55:33:7a:6b:ec:1e:62:01:a4:6f:
18:c0:c8:31:95:0b:1d:63:08:b4:fa:eb:a8:6d:9d:
30:5a:10:e5:3b:36:f1:ac:57:f0:a9:36:e3:45:9d:
5c:5e:a1:87:e9:65:ca:c5:ef:e5:73:be:38:d8:2c:
ad:e6:dd:52:95:0c:18:25:0b:da:ee:7a:74:f9:da:
a8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5A:0E:68:78:27:61:F7:7B:46:0B:79:6C:AC:B3:C0:DD:A4:AE:E7
X509v3 Authority Key Identifier:
keyid:58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:30:f2:c4:fa:b3:df:29:94:e0:c4:55:34:2c:06:fd:03:25:
9c:f1:0f:1f:24:dc:74:2d:59:ac:7b:24:8c:a1:44:3d:87:04:
9b:2b:d0:43:10:ae:2e:64:ce:87:5e:a0:ae:f7:92:3a:91:ac:
39:ff:6c:05:9c:9d:fc:79:e1:04:c1:5c:4b:3b:75:29:2a:f7:
ed:ae:47:1a:06:44:2c:75:99:30:f8:9e:3b:27:69:78:f3:e7:
26:84:88:b4:51:fd:e9:c6:50:cf:d8:04:be:ac:47:72:80:0e:
18:bd:04:50:57:d5:0b:10:dd:fc:c7:ed:77:d2:7c:fb:6f:1b:
a5:1e:02:f0:bc:e5:9a:c7:91:66:38:c6:8d:41:c5:5a:7b:56:
c2:9d:6c:67:a4:8a:4e:5e:00:8a:1a:e7:08:67:31:a6:9a:fd:
51:3d:f1:9a:af:8f:bb:b0:28:e4:80:d0:2a:a7:10:fe:b0:3a:
33:62:d9:b4:11:ed:52:d8:5b:3f:45:69:b1:1b:12:1a:27:b5:
95:89:b2:03:38:01:c0:d9:aa:59:aa:f3:c2:32:fe:ec:35:10:
fa:6e:7a:1d:a2:b5:85:60:95:3f:5e:14:71:db:08:ff:0b:4e:
6d:94:a8:e2:d5:d2:57:e6:33:e6:b3:be:c6:26:99:2d:b7:3b:
1c:71:6c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:25 2025 by rpki-client