Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
File: WROOPbd2QL6t8dpbFRlLk4ShRE4.mft (raw, json)
Hash identifier: pXctQsUoT5miaP+wmtztQA+t8cR+9PzLL9BqhpTikvc=
Subject key identifier: E7:BE:16:DA:1C:4B:6E:79:FE:19:F2:5F:F7:F5:0F:F5:E7:63:7B:A1
Authority key identifier: 59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E
Certificate issuer: /CN=59138e3db77640beadf1da5b15194b9384a1444e
Certificate serial: 019A50751A04A63144AB4256DFB1ED84F3B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
Manifest number: 0B70
Signing time: Tue 04 Nov 2025 20:00:42 +0000
Manifest this update: Tue 04 Nov 2025 20:00:42 +0000
Manifest next update: Wed 05 Nov 2025 20:00:42 +0000
Files and hashes: 1: WROOPbd2QL6t8dpbFRlLk4ShRE4.crl (hash: Lx9wEm7ZPTkbRAkcktugIZ5xiGWgVThJB2eD58EgwCI=)
2: XxQYUuyDfDmvEH-_h4xcYdCTTls.roa (hash: sOyHTNSLK1nXbLPuDkiUpZ37v4YFW/N/3OvLA+CjJUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:1a:04:a6:31:44:ab:42:56:df:b1:ed:84:f3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59138e3db77640beadf1da5b15194b9384a1444e
Validity
Not Before: Nov 4 20:00:42 2025 GMT
Not After : Nov 5 20:00:42 2025 GMT
Subject: CN=e7be16da1c4b6e79fe19f25ff7f50ff5e7637ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:06:f2:76:80:ab:5e:66:f0:24:dc:11:6d:2e:
d4:7d:86:04:27:be:af:97:c2:de:f4:f3:5a:d0:e8:
1f:43:71:79:ab:e9:ea:f8:5e:07:e2:5c:76:7a:40:
f2:f5:5a:2e:8e:04:4a:d7:c2:5d:fb:5e:a6:f3:be:
92:5c:80:08:5a:a7:a5:84:d0:8d:78:dc:b6:3c:fe:
2b:c8:77:87:26:c3:87:0e:64:3c:f5:3c:0c:5e:7a:
25:f4:28:11:1f:27:3e:2e:3a:0b:93:2e:9f:26:75:
6b:e5:c8:dc:82:bb:28:bb:d0:8e:13:dd:96:60:35:
20:2b:66:c6:83:39:01:07:93:78:6e:96:ae:38:80:
bc:e1:e3:b7:db:7c:2d:6e:69:74:4f:e1:bc:27:c3:
76:c7:6d:c4:1d:84:3d:b5:7b:c1:51:61:d1:1e:b6:
0f:3a:60:30:78:56:92:17:31:56:1b:c5:cb:7f:0c:
3e:a1:13:35:ae:fd:8b:d2:88:fd:3c:1a:4b:a3:f4:
fc:91:1b:57:07:74:1a:23:04:75:e6:1c:c5:fc:c2:
47:03:e1:50:6a:a4:b6:bd:79:96:37:ad:23:89:9f:
c8:2b:a5:c7:40:45:3d:9d:5f:23:f6:69:bc:91:93:
c1:bc:5f:13:94:83:d2:63:f3:ac:d3:dd:ca:bc:3e:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BE:16:DA:1C:4B:6E:79:FE:19:F2:5F:F7:F5:0F:F5:E7:63:7B:A1
X509v3 Authority Key Identifier:
keyid:59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c1:bc:98:73:95:5f:38:6f:9a:69:ab:a7:07:82:26:53:4c:
51:a4:c4:c4:a6:89:41:ea:e1:a6:32:f2:45:76:8f:3c:6b:af:
78:fe:5d:bf:af:59:2b:07:c3:4d:e4:cd:da:5c:f0:98:20:ff:
a6:d0:09:96:81:63:7e:0f:fb:19:e8:2a:1a:5a:b9:9e:17:a9:
9d:2c:e2:6a:68:0f:68:6e:c4:a7:68:ad:94:81:ed:5d:68:7c:
f1:53:04:8e:0b:2f:1c:06:d9:43:77:86:f9:e1:cf:89:28:44:
c2:7d:79:f2:0a:c3:84:79:43:66:40:13:92:ef:54:b9:67:cd:
b4:28:14:16:13:96:45:9d:46:a7:2a:fc:1a:d8:0e:8d:63:e5:
a9:b2:5a:f2:64:e4:7c:88:c0:0c:85:e4:f1:7a:be:5b:91:70:
bd:8e:46:65:05:0e:5c:82:f7:8c:06:eb:bd:05:0a:88:c0:f0:
63:70:92:ff:d3:d8:ee:db:24:58:51:0b:7d:f2:ad:e7:10:e2:
b4:3d:55:0a:a0:8a:a6:e6:ef:85:b0:46:1f:2b:8e:e7:ff:45:
0e:08:47:47:d3:8d:87:94:55:69:3e:b7:22:84:41:20:85:62:
00:75:32:7e:63:f3:72:17:2d:c1:32:93:4f:d4:57:2e:f7:5a:
66:1f:b2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:31 2025 by rpki-client