Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
File: WwrDjepqcErbq6k4HB3AI1bTqpA.mft (raw, json)
Hash identifier: ji/2hgZw8n0A3zE17jlxHzzOofW4KPW+n4PD8S3Hi2s=
Subject key identifier: 4B:53:72:C8:2F:5B:C6:F5:1E:21:EE:0E:E2:3D:CD:4F:4E:5D:A2:AC
Authority key identifier: 5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
Certificate issuer: /CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Certificate serial: 019A4D74134F0FDD086A39BBFA67E650FCD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
Manifest number: 0A68
Signing time: Tue 04 Nov 2025 06:00:43 +0000
Manifest this update: Tue 04 Nov 2025 06:00:43 +0000
Manifest next update: Wed 05 Nov 2025 06:00:43 +0000
Files and hashes: 1: WwrDjepqcErbq6k4HB3AI1bTqpA.crl (hash: DdgFS7Epc5EWKSMVeGt3FAoQgsOzZb3ZH9js2ZeXOEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:13:4f:0f:dd:08:6a:39:bb:fa:67:e6:50:fc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Validity
Not Before: Nov 4 06:00:43 2025 GMT
Not After : Nov 5 06:00:43 2025 GMT
Subject: CN=4b5372c82f5bc6f51e21ee0ee23dcd4f4e5da2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:33:a4:8a:32:ce:a8:87:68:52:22:87:cd:73:
50:39:f0:95:c7:bd:3e:89:7e:31:2d:d5:9d:0d:be:
f2:11:69:ce:ad:5e:6e:26:f5:ee:11:0d:95:9b:b8:
a1:f9:85:ca:36:2d:99:45:b7:d9:b8:3e:4f:43:21:
36:7f:38:0f:a7:aa:eb:40:17:e6:0e:e5:c3:82:38:
ba:84:52:3c:a2:9b:a1:30:fa:d0:21:ac:8b:e1:75:
e2:d0:85:9d:9f:35:06:c5:e8:a6:20:c9:93:18:47:
6c:ff:a2:ca:7e:4f:cb:ed:bf:60:f9:b8:e6:97:cd:
10:6d:8c:31:17:e9:97:35:a9:3b:60:93:41:cd:30:
97:b5:d6:6b:c4:1d:4c:48:3d:c8:57:5c:a7:59:7a:
ad:c4:c2:60:8c:ab:9c:6a:af:e7:dd:e1:48:dc:a0:
d5:75:ec:0d:59:c1:df:a0:ef:5b:97:60:5d:50:da:
14:d5:8f:ae:61:b0:e6:a1:dd:05:66:73:5f:f6:0e:
92:41:26:27:7f:c8:89:3a:3e:f9:74:89:13:43:db:
05:c1:fa:5d:2e:37:92:aa:e6:12:40:81:a8:6a:60:
bf:c0:f8:96:8e:1a:54:b6:3d:08:79:ff:e1:58:81:
b2:d8:4d:93:3e:eb:0c:21:73:4e:20:5a:2e:92:97:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:53:72:C8:2F:5B:C6:F5:1E:21:EE:0E:E2:3D:CD:4F:4E:5D:A2:AC
X509v3 Authority Key Identifier:
keyid:5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5d:79:27:75:04:02:84:74:e6:bf:96:0e:ff:0a:c3:85:3f:
e8:06:bc:65:75:33:bd:7c:09:25:5e:43:23:55:d3:b5:74:ed:
c0:97:8a:3e:72:91:f9:a5:4f:18:b0:1c:fc:ec:56:e2:39:c3:
ad:25:47:50:ab:a2:8e:36:e9:3d:fc:a3:7a:ca:e1:72:83:c0:
38:30:e3:f6:34:7c:91:8b:0d:3b:cd:f4:f8:b5:d6:58:6f:ad:
7f:7a:c6:5b:98:fc:41:8a:ed:af:e7:57:c5:da:1b:48:7c:67:
ca:19:c2:73:1a:2b:a5:19:18:ee:68:29:25:2f:bf:30:52:70:
13:9e:a0:77:44:33:cb:f8:4d:61:dc:fa:d7:13:25:5a:3a:5b:
9e:78:e4:8e:9d:f2:f7:f8:af:47:92:93:19:9f:1a:0d:cd:c5:
e7:a4:d1:ab:43:b1:f0:a8:90:2d:4a:73:ae:00:cc:61:30:29:
15:b4:1a:d2:77:4f:76:20:a1:0c:b0:b4:a0:f8:5f:4d:f3:ee:
0a:b8:08:7a:dc:58:a0:26:45:08:04:6b:aa:a9:f6:93:65:07:
e5:a5:a7:a9:1a:48:e3:f5:d9:7c:ab:e4:fa:d8:e9:e5:18:24:
69:06:75:1b:4b:33:6e:49:3c:3d:c5:55:4d:34:62:c5:5c:c2:
a4:3b:62:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdBNPD90Iajm7+mfmUPzWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMGFjMzhkZWE2YTcwNGFkYmFiYTkzODFjMWRjMDIzNTZk
M2FhOTAwHhcNMjUxMTA0MDYwMDQzWhcNMjUxMTA1MDYwMDQzWjAzMTEwLwYDVQQD
Eyg0YjUzNzJjODJmNWJjNmY1MWUyMWVlMGVlMjNkY2Q0ZjRlNWRhMmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zOkijLOqIdoUiKHzXNQOfCVx70+
iX4xLdWdDb7yEWnOrV5uJvXuEQ2Vm7ih+YXKNi2ZRbfZuD5PQyE2fzgPp6rrQBfm
DuXDgji6hFI8opuhMPrQIayL4XXi0IWdnzUGxeimIMmTGEds/6LKfk/L7b9g+bjm
l80QbYwxF+mXNak7YJNBzTCXtdZrxB1MSD3IV1ynWXqtxMJgjKucaq/n3eFI3KDV
dewNWcHfoO9bl2BdUNoU1Y+uYbDmod0FZnNf9g6SQSYnf8iJOj75dIkTQ9sFwfpd
LjeSquYSQIGoamC/wPiWjhpUtj0Ief/hWIGy2E2TPusMIXNOIFoukpci0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtTcsgvW8b1HiHuDuI9zU9OXaKsMB8GA1UdIwQY
MBaAFFsKw43qanBK26upOBwdwCNW06qQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3dyRGplcHFjRXJicTZrNEhCM0FJMWJUcXBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83MjJiZDYtYmNlZi00MzRmLWIwMTEt
OTQ4ZDg2OTEzNTM4LzEvV3dyRGplcHFjRXJicTZrNEhCM0FJMWJUcXBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy83MjJiZDYtYmNlZi00MzRmLWIwMTEtOTQ4ZDg2OTEzNTM4
LzEvV3dyRGplcHFjRXJicTZrNEhCM0FJMWJUcXBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJF15J3UE
AoR05r+WDv8Kw4U/6Aa8ZXUzvXwJJV5DI1XTtXTtwJeKPnKR+aVPGLAc/OxW4jnD
rSVHUKuijjbpPfyjesrhcoPAODDj9jR8kYsNO830+LXWWG+tf3rGW5j8QYrtr+dX
xdobSHxnyhnCcxorpRkY7mgpJS+/MFJwE56gd0Qzy/hNYdz61xMlWjpbnnjkjp3y
9/ivR5KTGZ8aDc3F56TRq0Ox8KiQLUpzrgDMYTApFbQa0ndPdiChDLC0oPhfTfPu
CrgIetxYoCZFCARrqqn2k2UH5aWnqRpI4/XZfKvk+tjp5RgkaQZ1G0szbkk8PcVV
TTRixVzCpDtihw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:55 2025 by rpki-client