Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
File: WKaBxxvrRk4B1baOGcpWbamTDiM.mft (raw, json)
Hash identifier: JfBrOtZ6C939EsyWFF0wSCKu2q7BAPybGpqhrXrCWkk=
Subject key identifier: E2:8A:BC:72:71:B4:88:45:81:83:A5:E2:FB:6B:4A:27:A9:8A:DE:92
Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
Certificate issuer: /CN=58a681c71beb464e01d5b68e19ca566da9930e23
Certificate serial: 019A522CA5E189D9E3A5B115222AB3B7C5C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
Manifest number: 11
Signing time: Wed 05 Nov 2025 04:00:48 +0000
Manifest this update: Wed 05 Nov 2025 04:00:48 +0000
Manifest next update: Thu 06 Nov 2025 04:00:48 +0000
Files and hashes: 1: WKaBxxvrRk4B1baOGcpWbamTDiM.crl (hash: w0FiN+tVreJuID7dhSAPCSFPASZDA0NBlNRX0/XXZto=)
2: lN5HO-JNvGu4hGpY5gcTC4TiNiM.roa (hash: tVhecYMNj6vTa/xG0wc+2Ec2FDfRws1DmGu5dGnbsLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:a5:e1:89:d9:e3:a5:b1:15:22:2a:b3:b7:c5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23
Validity
Not Before: Nov 5 04:00:48 2025 GMT
Not After : Nov 6 04:00:48 2025 GMT
Subject: CN=e28abc7271b488458183a5e2fb6b4a27a98ade92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:78:bb:78:43:21:db:cf:7a:22:dd:6f:9f:
a5:19:5a:f0:38:d9:7f:31:da:e7:1b:e0:f4:09:2b:
87:34:85:3e:9f:e4:ed:1c:84:9d:a1:fb:d4:e5:5d:
68:73:31:cf:ab:ae:51:da:63:ed:59:7b:03:a0:ea:
09:b9:64:60:ee:a2:b6:92:d5:28:32:8e:cd:a3:6e:
bd:8a:56:96:ac:ad:8d:a6:b8:96:a7:d3:e7:9b:d6:
d3:ad:be:4f:ae:31:38:a2:0c:22:26:f9:06:1e:7e:
35:94:fa:8a:dc:46:c0:a9:2f:75:b6:04:e2:08:b5:
9a:36:48:f2:73:7b:cc:a6:ab:2d:28:25:43:76:bc:
3c:17:76:e4:a2:88:d6:42:b8:ce:41:80:54:1a:fe:
1b:f6:12:7c:9c:bd:41:e1:79:b5:53:a5:00:08:5e:
bb:22:6d:f5:13:36:5f:72:3d:34:bd:09:7c:ad:8d:
a8:1c:6f:d8:ff:45:a6:c9:0c:5f:e8:28:7c:d8:11:
a8:6e:27:e4:bc:b1:ad:e9:78:35:32:75:d9:62:44:
91:19:a0:76:19:de:24:45:81:2a:d7:1b:10:81:31:
65:c6:75:15:9c:56:b9:7b:26:07:ad:cd:0b:e2:9c:
ba:ba:df:5c:c9:81:40:12:f5:6c:09:41:6b:12:d3:
28:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8A:BC:72:71:B4:88:45:81:83:A5:E2:FB:6B:4A:27:A9:8A:DE:92
X509v3 Authority Key Identifier:
keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:48:7f:1d:7d:fd:cd:19:c6:62:ca:ce:16:b5:7d:7d:66:25:
ac:2b:95:b0:74:d8:b5:ee:4c:a5:e4:70:cc:7a:87:dd:ee:59:
4b:b9:f7:2e:f3:28:ac:0e:4c:35:fe:92:84:fa:a4:49:1e:42:
7c:b8:f9:5f:36:b0:60:dd:28:e6:69:38:5d:04:7e:e0:a6:05:
0f:90:91:3f:05:0e:b0:3d:b2:16:65:5f:f7:67:d8:71:4b:d2:
2a:2c:71:b4:34:5b:2c:62:ab:01:e9:a0:27:67:0c:97:81:cb:
61:8d:b4:c4:51:3c:06:41:a1:bb:01:eb:b0:1c:60:95:89:9d:
9b:0c:a3:2c:2c:59:f3:65:d3:23:b6:4b:8e:6f:8b:e0:a9:56:
61:ad:92:26:6c:d0:2b:ff:14:88:63:10:ed:1b:f1:3b:42:e6:
c1:c8:89:13:f2:50:44:20:b0:f2:66:af:fa:73:86:18:b6:85:
0a:b7:31:64:d9:2d:c6:c1:c5:96:4a:61:e3:63:de:b9:ad:5a:
da:62:32:c6:16:a6:de:83:62:35:fa:a5:43:e3:ed:19:f0:0c:
b4:1d:7f:7d:ef:9e:6f:c5:60:1c:64:fc:25:93:8a:71:df:bd:
24:cf:94:d6:81:2e:be:02:75:2b:ea:72:11:fe:39:84:1b:11:
3e:39:e3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:32:00 2025 by rpki-client