Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
File: WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft (raw, json)
Hash identifier: +bR8NDp4fDRiFRMOfLBrhhXu/ZrvUpsSNCqbYWuEo7g=
Subject key identifier: 28:FE:32:60:F0:80:03:FB:43:52:26:C5:76:BF:9A:7F:4F:64:17:8E
Authority key identifier: 59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74
Certificate issuer: /CN=596a5fee9345fcd48010348877b7853afccc6474
Certificate serial: 019A4D3D3F4C6E6D29A5C257783BA72AECFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
Manifest number: 05B7
Signing time: Tue 04 Nov 2025 05:00:50 +0000
Manifest this update: Tue 04 Nov 2025 05:00:50 +0000
Manifest next update: Wed 05 Nov 2025 05:00:50 +0000
Files and hashes: 1: WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl (hash: O4pSp1eGI2TEW4lPDA+Gqi99xZCv+K765TfA/4yIlOE=)
2: _dX4f78r8ar055s65dZPENw-y4Y.roa (hash: YAHCWNUUSCjGUaMNs/qPZDcoPmc5Fkj8HR1jTR9dAy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:3f:4c:6e:6d:29:a5:c2:57:78:3b:a7:2a:ec:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=596a5fee9345fcd48010348877b7853afccc6474
Validity
Not Before: Nov 4 05:00:50 2025 GMT
Not After : Nov 5 05:00:50 2025 GMT
Subject: CN=28fe3260f08003fb435226c576bf9a7f4f64178e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:ba:d4:c2:3c:78:7b:89:72:f1:5c:9d:81:
2a:0b:37:2b:6d:bf:6d:90:4f:99:ab:08:62:77:3c:
79:81:d8:91:6d:cc:e1:27:63:25:cb:75:0d:15:6f:
f2:e5:98:34:5e:7f:68:6d:e2:0f:6d:71:82:dc:9c:
c1:59:b4:a6:03:83:eb:39:fe:9d:09:fa:bc:56:97:
f0:b0:06:46:91:9b:2a:0f:e2:41:c3:c2:06:27:fd:
f4:90:f6:9e:31:00:48:fa:78:dd:3d:ce:8f:c0:80:
55:5e:17:0d:32:a2:1a:34:a9:d3:bd:d5:86:76:2a:
89:8e:cb:d7:1d:ba:22:29:49:c6:19:d6:b3:88:44:
83:8c:57:d0:79:5a:01:ee:62:8e:eb:be:3a:2c:b7:
b3:ee:7e:03:32:3a:65:c3:04:26:32:55:a3:9c:db:
aa:83:eb:f4:e3:8e:50:44:32:71:7f:51:e3:f0:7b:
0a:11:ad:30:b9:a2:dc:62:6f:4a:62:91:80:28:3b:
e5:4d:7f:13:15:99:6f:82:f7:7a:2b:04:e8:d9:a6:
3c:04:90:23:2f:08:91:d3:cf:d4:5c:28:32:de:3d:
71:0e:ee:b8:af:30:a0:98:72:89:20:05:d9:19:08:
be:a2:f0:af:82:b4:e0:a4:04:a9:14:b6:45:0a:a5:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FE:32:60:F0:80:03:FB:43:52:26:C5:76:BF:9A:7F:4F:64:17:8E
X509v3 Authority Key Identifier:
keyid:59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:83:ac:7d:ba:a5:a3:0d:87:67:16:43:cc:60:6a:38:98:cb:
cb:82:43:83:12:dc:4c:bf:1b:09:2e:da:3c:09:de:ba:d5:0c:
b1:33:af:1b:2f:e9:10:a5:61:e8:9c:ad:6d:99:09:04:14:63:
1d:0a:ba:f5:07:b7:fb:4b:cf:11:ea:01:e2:b5:f8:3c:d5:8d:
ad:0f:e9:c6:44:fe:16:07:1d:08:54:b2:58:e0:0d:da:eb:e5:
1c:84:de:57:18:0d:27:bf:50:5f:92:57:12:4e:1a:31:89:02:
03:8e:73:f3:91:7d:8c:d9:62:10:57:8d:5b:2e:1f:a7:d1:04:
64:88:f0:06:64:b1:56:ab:2b:f1:ed:5c:5a:45:a0:62:82:df:
09:97:94:94:ba:51:ed:c0:1b:57:63:dd:38:34:3d:a3:5f:42:
a7:e0:80:c8:0b:d5:cc:24:f7:ac:eb:8a:d6:66:2d:fa:b8:81:
a3:26:20:42:7e:e6:29:16:9f:98:a5:6b:ce:5f:0d:27:a0:f1:
46:9f:9c:5f:a3:7f:c9:ac:e1:cc:6d:23:24:c5:ac:e8:ec:56:
4b:7b:15:39:98:28:d1:20:e3:a2:83:c1:86:34:5c:ae:5e:62:
1d:f3:ac:98:c6:ff:08:aa:3a:75:fd:89:00:71:34:03:11:df:
6c:4c:6b:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPT9Mbm0ppcJXeDunKuz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NmE1ZmVlOTM0NWZjZDQ4MDEwMzQ4ODc3Yjc4NTNhZmNj
YzY0NzQwHhcNMjUxMTA0MDUwMDUwWhcNMjUxMTA1MDUwMDUwWjAzMTEwLwYDVQQD
EygyOGZlMzI2MGYwODAwM2ZiNDM1MjI2YzU3NmJmOWE3ZjRmNjQxNzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ261MI8eHuJcvFcnYEqCzcrbb9t
kE+Zqwhidzx5gdiRbczhJ2Mly3UNFW/y5Zg0Xn9obeIPbXGC3JzBWbSmA4PrOf6d
Cfq8VpfwsAZGkZsqD+JBw8IGJ/30kPaeMQBI+njdPc6PwIBVXhcNMqIaNKnTvdWG
diqJjsvXHboiKUnGGdaziESDjFfQeVoB7mKO6746LLez7n4DMjplwwQmMlWjnNuq
g+v0445QRDJxf1Hj8HsKEa0wuaLcYm9KYpGAKDvlTX8TFZlvgvd6KwTo2aY8BJAj
LwiR08/UXCgy3j1xDu64rzCgmHKJIAXZGQi+ovCvgrTgpASpFLZFCqWELQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCj+MmDwgAP7Q1ImxXa/mn9PZBeOMB8GA1UdIwQY
MBaAFFlqX+6TRfzUgBA0iHe3hTr8zGR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1dwZjdwTkZfTlNBRURTSWQ3ZUZPdnpNWkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi82ZjZiN2MtYzBhOS00OTUzLTk4NjUt
ZGU0YmRhYTM3MjAzLzEvV1dwZjdwTkZfTlNBRURTSWQ3ZUZPdnpNWkhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi82ZjZiN2MtYzBhOS00OTUzLTk4NjUtZGU0YmRhYTM3MjAz
LzEvV1dwZjdwTkZfTlNBRURTSWQ3ZUZPdnpNWkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4Osfbql
ow2HZxZDzGBqOJjLy4JDgxLcTL8bCS7aPAneutUMsTOvGy/pEKVh6JytbZkJBBRj
HQq69Qe3+0vPEeoB4rX4PNWNrQ/pxkT+FgcdCFSyWOAN2uvlHITeVxgNJ79QX5JX
Ek4aMYkCA45z85F9jNliEFeNWy4fp9EEZIjwBmSxVqsr8e1cWkWgYoLfCZeUlLpR
7cAbV2PdODQ9o19Cp+CAyAvVzCT3rOuK1mYt+riBoyYgQn7mKRafmKVrzl8NJ6Dx
Rp+cX6N/yazhzG0jJMWs6OxWS3sVOZgo0SDjooPBhjRcrl5iHfOsmMb/CKo6df2J
AHE0AxHfbExruQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:48 2025 by rpki-client