Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
File: WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json)
Hash identifier: QcUMxqAeWSDM7mVCHlp2zGgkM8bVqxYQro9W+0/lMVM=
Subject key identifier: 36:8B:AD:98:A1:A8:34:94:73:70:5C:60:C8:AA:B0:4A:B8:F7:F3:C7
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial: 019A4E864DD19DE45D523D6FD2E75558A390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
Manifest number: 0C5B
Signing time: Tue 04 Nov 2025 11:00:15 +0000
Manifest this update: Tue 04 Nov 2025 11:00:15 +0000
Manifest next update: Wed 05 Nov 2025 11:00:15 +0000
Files and hashes: 1: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: WBmSrkOo8/UnPMXu68inKf2529wX4dk9pf697Dp/unw=)
2: ZpykCbVPiyWDmZYOTfO_ZDkVQS8.roa (hash: dMJ7baRxj0geuiw7R0CU8VhA5Y/WfKmOFau3mkt++fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:4d:d1:9d:e4:5d:52:3d:6f:d2:e7:55:58:a3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
Validity
Not Before: Nov 4 11:00:15 2025 GMT
Not After : Nov 5 11:00:15 2025 GMT
Subject: CN=368bad98a1a8349473705c60c8aab04ab8f7f3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:08:bb:6a:b1:0a:e1:6b:98:5c:f0:b6:64:
83:c7:6a:8c:8d:8f:e1:89:a9:a4:20:ce:70:40:ab:
c7:5a:11:bc:25:17:a1:73:a4:45:67:6e:e2:8f:90:
1a:54:15:4a:3a:d8:b6:59:ea:fc:40:69:98:ba:78:
d3:e3:39:41:eb:41:5d:94:33:db:f0:6e:c3:ae:7a:
89:f5:6a:7e:cd:23:9b:17:bb:71:0c:4b:57:2d:c7:
cb:b3:42:5d:7e:66:15:54:1f:3c:42:33:fa:a1:00:
79:0c:43:4c:6b:79:65:dc:0d:4f:71:de:ef:c5:35:
95:2d:26:15:cf:c1:b8:a0:da:05:5b:78:de:20:c4:
c2:b1:65:fa:6f:ef:b4:41:85:f1:f0:b8:e8:91:ff:
75:78:fe:3b:b7:83:22:9c:b7:51:1f:d8:c7:94:85:
1d:06:9e:28:14:87:e8:e3:d3:59:f1:c3:9b:42:e1:
cd:43:9c:bf:61:f5:48:15:0c:d5:11:4a:82:a6:ae:
69:f2:a3:d1:ce:d6:7e:fd:c3:cc:68:f8:b7:76:ad:
3f:83:cc:4c:cc:52:7d:9e:61:8c:e4:16:b5:9a:4c:
bb:83:57:51:4b:da:b5:5f:69:dd:b0:7a:48:ec:59:
d2:13:a9:d9:5c:87:35:9a:41:c6:f3:0e:60:2f:73:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8B:AD:98:A1:A8:34:94:73:70:5C:60:C8:AA:B0:4A:B8:F7:F3:C7
X509v3 Authority Key Identifier:
keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:98:e2:a7:28:f3:50:e0:7a:cf:b4:aa:65:db:8f:27:19:9e:
9b:86:2d:20:a2:e0:69:13:16:c4:97:b9:f9:06:48:31:6d:c1:
da:c4:55:18:b3:0c:2d:83:7d:c8:14:19:24:16:3c:fd:56:a4:
d2:32:58:6f:89:66:08:d3:34:61:33:f2:41:dd:36:99:a1:23:
53:28:f0:92:70:34:c9:36:7b:65:e7:e2:7e:39:4f:01:02:98:
f3:1c:4b:c7:54:9b:4d:2c:77:59:60:54:5c:fa:82:b8:bc:53:
aa:eb:ec:6e:cb:3c:b3:cd:07:65:05:9a:1b:f3:4d:ed:0d:48:
9c:71:bd:db:53:30:c3:80:c9:d9:fa:53:90:c8:d8:55:fc:47:
42:c4:8f:d3:18:87:47:34:4c:3c:5e:9e:b0:fb:5a:cb:a1:bf:
77:fd:bb:62:31:79:a0:12:b7:9f:3d:2b:8a:a1:05:a1:8c:52:
7f:5b:10:1d:16:e7:04:ef:f3:44:1a:b7:82:ad:4f:60:8f:d2:
f1:d2:8d:11:06:5c:72:24:ad:a8:0b:64:46:9c:5c:51:a8:45:
74:94:03:84:01:61:e8:69:15:e7:94:6d:04:99:f1:0a:d3:29:
a8:d0:bd:3b:a9:1e:1a:c5:6f:40:9e:87:31:2d:4a:6d:13:5c:
18:5f:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:27 2025 by rpki-client