Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
File: wessYB-m0HUHlzCB-qEyX-GQsnY.mft (raw, json)
Hash identifier: liqGB4cmAciFlGUHQItHIjkD9WAEpzCNWRPGOLIj65c=
Subject key identifier: A6:D0:4C:65:CE:77:77:91:E6:F5:E0:FF:17:79:BE:FE:97:D2:05:FF
Authority key identifier: C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
Certificate issuer: /CN=c1eb2c601fa6d07507973081faa1325fe190b276
Certificate serial: 019A53ACBAB0C4E73EBD46E7DB7B7FAC8FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
Manifest number: 058C
Signing time: Wed 05 Nov 2025 11:00:20 +0000
Manifest this update: Wed 05 Nov 2025 11:00:20 +0000
Manifest next update: Thu 06 Nov 2025 11:00:20 +0000
Files and hashes: 1: 9VIpFT_uZfwTVVoxe7PNJO0XppE.roa (hash: dBqoAsOTvzrDylULyUsZPwgLS85TPwI2yvXP5iugyTk=)
2: v1vDCS3zEydWpnAi830GA_yQEHw.roa (hash: 3xFB/pduxsTBOKVMWYRZZ5LgXgY+cAqxpBeMHy8oimw=)
3: wessYB-m0HUHlzCB-qEyX-GQsnY.crl (hash: y79bRt5gNno6XdbNYr+Q2Y5N/pLC5Fh/EKz0y93Epro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:ba:b0:c4:e7:3e:bd:46:e7:db:7b:7f:ac:8f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eb2c601fa6d07507973081faa1325fe190b276
Validity
Not Before: Nov 5 11:00:20 2025 GMT
Not After : Nov 6 11:00:20 2025 GMT
Subject: CN=a6d04c65ce777791e6f5e0ff1779befe97d205ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:32:ff:2c:07:89:38:55:8c:b7:f3:01:fb:
b9:2f:1d:79:03:e9:61:ba:be:b8:79:99:e7:cb:f0:
2d:13:f9:84:70:fb:1b:12:28:14:f9:25:27:95:81:
8b:ae:de:9f:a4:4f:20:4c:1f:19:f5:02:92:d5:a7:
7f:88:93:c4:97:09:f0:84:d8:dc:97:ac:75:c6:b2:
8e:94:3a:72:0d:c6:05:d6:04:c4:eb:2f:8f:fb:48:
2c:57:e7:9a:48:6e:91:23:3c:28:30:2b:38:7e:78:
83:05:08:ef:c3:46:24:7c:c7:51:65:3d:45:e3:e1:
4c:02:80:18:20:3e:6d:0f:37:60:c7:61:8a:b7:60:
42:82:ff:10:c6:8a:cb:25:d6:92:6a:84:2a:0d:03:
e5:7f:4a:aa:14:1c:8b:ed:85:54:29:9d:02:ec:48:
1e:c5:d6:49:3d:53:c1:e7:94:12:6d:71:95:eb:2c:
d6:96:d8:cf:ab:b7:b9:02:ba:e2:93:8c:21:c2:02:
39:8e:cb:b4:a4:2f:56:0a:01:44:79:79:49:2c:2e:
1c:23:2f:b0:46:93:eb:d5:37:92:6d:41:30:cc:a7:
ba:39:b1:6c:a8:f7:7e:6b:cc:db:23:53:af:bc:de:
fe:7f:0b:01:41:8a:5a:ac:89:c4:49:1a:92:45:85:
9b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D0:4C:65:CE:77:77:91:E6:F5:E0:FF:17:79:BE:FE:97:D2:05:FF
X509v3 Authority Key Identifier:
keyid:C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8e:70:04:e9:6d:e9:73:de:12:a1:57:79:0f:ee:a6:31:10:
fc:04:d4:7e:ec:5b:fa:50:79:46:0d:44:a5:b9:fb:80:d0:55:
0f:3c:78:c0:ef:46:b5:a7:f9:e2:62:b4:89:72:72:97:71:6f:
0f:d9:ca:75:20:f4:38:1a:1f:ea:87:08:49:2f:b9:fc:dd:bf:
db:e5:f7:f5:5c:7b:55:1c:12:a0:ae:c8:f9:ab:c2:76:8c:03:
ac:34:f6:84:b7:7a:f2:01:b1:37:bf:b8:00:ab:4d:76:4b:8f:
67:4a:9f:07:83:83:3d:c5:06:fd:01:e2:4b:14:e9:e7:fb:c3:
ac:88:e8:e4:9c:20:78:fb:ed:dc:2b:fb:a1:19:4d:61:4f:6d:
c0:39:7f:df:81:29:05:b0:51:76:ce:63:04:0e:f4:7e:38:46:
ff:39:0b:d9:44:b5:8f:23:15:7d:c6:7b:bb:b5:38:00:d6:dd:
c7:80:3d:af:bc:58:50:9d:3a:56:44:78:6a:bd:9d:65:95:9d:
11:03:d1:52:8b:10:7e:d0:eb:36:31:a8:ab:c4:cf:0f:1b:4e:
ad:b6:81:a2:32:10:e9:7a:24:0c:36:b5:ae:0a:f4:be:88:71:
e3:9f:4c:7b:03:1a:40:e3:5c:27:c5:03:fd:3a:9d:32:09:27:
4a:67:e7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:12:39 2025 by rpki-client