Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
File: WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft (raw, json)
Hash identifier: Cy4yIVyJL9CR9pzxDfumchIRviS35HMcqTW+ULvplTE=
Subject key identifier: 85:E2:B8:8E:6F:29:58:7B:E0:99:2A:1D:AB:3D:11:38:D1:72:A3:21
Authority key identifier: 58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
Certificate issuer: /CN=58dd42ab3460279709c134b570f76e34e4d95b91
Certificate serial: 019A4DE21CDB35EE5772F1E3BA292097AAD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
Manifest number: 1431
Signing time: Tue 04 Nov 2025 08:00:55 +0000
Manifest this update: Tue 04 Nov 2025 08:00:55 +0000
Manifest next update: Wed 05 Nov 2025 08:00:55 +0000
Files and hashes: 1: WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl (hash: Q0yD8xSylHm0f3swqz7+hZ4RaAKUEdMGxTNTbVCS0aw=)
2: fyfyl5NsL0BWisw7TSdl5mH8Mlw.roa (hash: /XQvoo54R4s6GryMB7e6F8gsZAvkqlu3TTwYzBkmBbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:1c:db:35:ee:57:72:f1:e3:ba:29:20:97:aa:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dd42ab3460279709c134b570f76e34e4d95b91
Validity
Not Before: Nov 4 08:00:55 2025 GMT
Not After : Nov 5 08:00:55 2025 GMT
Subject: CN=85e2b88e6f29587be0992a1dab3d1138d172a321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:1e:a6:18:c4:6e:a4:06:06:26:cf:19:ab:
f2:32:a9:04:3a:2f:c1:43:e1:9d:a3:fa:87:1b:9a:
00:f9:1d:f8:e1:97:16:1d:fa:cb:77:78:f3:bc:4a:
78:98:00:a5:3f:6e:f5:18:1f:bc:9c:6e:47:d3:0c:
d6:db:ae:0c:5b:78:b9:52:a7:c1:7f:08:ba:5b:29:
30:ac:73:74:95:27:a7:9e:44:27:c4:01:29:17:96:
d0:cb:20:d4:9a:a6:b3:7f:ec:ec:6e:f5:5a:a6:3e:
e3:42:27:68:04:a8:5c:a0:dc:44:db:41:2a:93:fa:
b9:c9:58:59:8b:eb:18:ce:77:ff:1f:9d:6e:4c:24:
1b:2c:1f:07:54:49:c4:7f:1a:87:49:ac:0a:eb:df:
cd:fc:a2:23:1a:d4:c2:09:22:4e:94:3b:1a:c3:9d:
c2:1d:75:e4:2c:9a:53:5c:aa:49:03:a5:3f:e3:7c:
aa:0b:69:0e:6c:0a:19:b3:c0:5d:1f:4e:c8:df:27:
83:ed:7f:40:f8:cc:c1:06:72:ce:0c:ed:f1:ad:e2:
e9:72:98:3d:2f:f5:26:f1:0c:2f:71:3d:7d:61:42:
65:09:4e:fd:bd:53:fc:09:88:f4:b2:67:c8:e2:35:
b4:bd:37:d5:95:58:d5:fc:56:3a:4e:14:f6:fb:22:
f5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E2:B8:8E:6F:29:58:7B:E0:99:2A:1D:AB:3D:11:38:D1:72:A3:21
X509v3 Authority Key Identifier:
keyid:58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:20:5f:19:98:c9:05:18:bf:3c:fb:1a:a7:ae:1d:3f:1a:8c:
df:cd:dd:cf:c1:34:e2:92:2b:b9:b3:3a:61:d4:0d:87:d9:58:
ff:d9:6e:ca:a2:20:f2:46:18:02:d9:9d:e0:85:35:67:72:70:
c7:31:43:b8:d5:36:d9:2a:3b:97:e9:9f:b0:fc:fa:b5:5b:8a:
e2:fe:5e:b6:a7:4c:e4:7c:ba:5e:7e:45:a0:ef:8a:e7:5f:56:
83:cd:c5:d7:77:e4:f8:3e:1c:08:da:a1:18:ec:3f:d8:8b:6b:
a3:81:52:6c:89:d1:50:2b:0c:16:4c:05:45:49:f1:c6:61:a3:
b1:cf:37:6d:06:ea:70:cf:1c:66:4c:10:74:f0:61:52:75:2a:
86:41:e3:47:fe:9f:4c:e5:62:3c:2b:60:33:9f:7d:6c:d7:bb:
d4:6b:bb:6f:d5:af:26:d1:60:f2:dd:0c:ba:84:2c:f6:bd:d7:
b4:43:40:34:33:60:ec:ad:34:af:88:4c:ae:bf:a4:60:8b:00:
39:9b:d2:e6:4e:97:49:2a:8d:16:b1:b0:37:b2:62:84:f5:93:
d2:75:cb:b4:05:0b:36:f6:f5:d5:96:27:17:ba:97:ac:e6:79:
bb:f4:24:29:2f:a2:fb:69:dc:e7:74:91:70:84:ea:5b:bc:f4:
db:80:78:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:27 2025 by rpki-client