Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
File: WdNqIemzaNdIurjHe-vd4sInxsM.mft (raw, json)
Hash identifier: XjQ2MBzBINmhfVIyKVbPhZxwI3rldnPx4XEqeKHBCFo=
Subject key identifier: 4E:E7:EC:4E:82:6D:04:BE:27:BA:BA:F8:8B:46:9C:6E:60:E4:96:C5
Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
Certificate issuer: /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Certificate serial: 019A4E4F843E816150CA5DB67D55AD6621F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
Manifest number: 08EA
Signing time: Tue 04 Nov 2025 10:00:25 +0000
Manifest this update: Tue 04 Nov 2025 10:00:25 +0000
Manifest next update: Wed 05 Nov 2025 10:00:25 +0000
Files and hashes: 1: 2sZdgnxG39Ec4iWQKIqHRPm_-nk.roa (hash: 1XVkgkrwmMauPThY8HLX2JQkAHIe6uakbKzIFrk1NHc=)
2: WdNqIemzaNdIurjHe-vd4sInxsM.crl (hash: mpTEED4YX4voWWNT8BUpzTCiyMoo0eMuIHlLYSYjQl0=)
3: is_XEdqOSIZdOdAUliJ38zXn5ZE.roa (hash: +WoDzk7VKcG/lDal047Esdi6HVzF1DiurqrDKoqvrhI=)
4: k47IkFzsvbAU-luJwFSjcXBgPII.roa (hash: LRzevFO33ciORneOuJWjPwolGOd6frxZBqlkG2Q4ros=)
5: skXm2fkwzq64ONGiXwLfUYMzOOo.roa (hash: eZX3z+2+p9WFafZJ1Sv1eq5Rzpet45IDFVeaiO++2eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:84:3e:81:61:50:ca:5d:b6:7d:55:ad:66:21:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Validity
Not Before: Nov 4 10:00:25 2025 GMT
Not After : Nov 5 10:00:25 2025 GMT
Subject: CN=4ee7ec4e826d04be27babaf88b469c6e60e496c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f3:b7:13:65:c2:72:d3:e3:67:35:fe:1d:1f:
31:85:5b:89:b1:7c:14:9c:0b:41:a7:bc:19:c5:ed:
7a:85:ff:10:f6:bb:7d:0e:de:7d:82:7c:92:5f:98:
3a:b5:59:a9:44:11:bd:ed:2d:7b:eb:db:15:72:2e:
aa:d5:2e:59:60:3f:2b:07:1f:48:a8:cb:68:48:af:
79:0a:e2:88:40:57:e2:82:ba:76:24:b9:64:79:80:
f6:be:fd:b8:19:77:1d:fd:10:92:18:2a:da:82:97:
be:7b:47:40:94:b0:81:18:02:29:8f:ea:d3:9e:d0:
35:1e:74:9b:7f:71:89:fb:fc:1d:b1:94:7b:df:92:
57:af:bc:6d:e0:7f:b8:28:7d:56:77:b5:d9:e8:27:
b0:3a:2b:33:6b:98:04:46:9c:08:90:e9:e2:8d:d4:
1a:2e:94:17:78:98:23:c4:66:bf:2d:b3:a9:20:43:
eb:b0:f8:b8:8e:70:1f:82:25:0c:8a:99:06:f1:de:
d1:e4:24:05:3f:81:93:3c:0f:79:4b:47:f7:d6:be:
f5:2a:24:f5:55:98:84:77:99:8f:c7:5b:2c:23:0f:
93:7e:a9:ac:e3:84:65:e6:3b:c1:93:77:76:22:f3:
8f:d3:4e:84:9b:e2:0d:e9:ea:b5:68:ef:29:95:f1:
ae:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E7:EC:4E:82:6D:04:BE:27:BA:BA:F8:8B:46:9C:6E:60:E4:96:C5
X509v3 Authority Key Identifier:
keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:95:c7:a9:10:62:5d:89:af:58:83:27:27:8b:19:94:20:a1:
a5:b8:c6:1b:02:97:b2:8d:f6:80:ef:02:8c:21:24:9b:67:f9:
42:ce:07:da:25:08:a7:5e:53:c7:73:36:c8:33:f5:19:52:9e:
3b:ec:50:81:1d:ca:8b:3c:7f:5d:a6:d4:56:ae:08:84:6b:b1:
d8:67:32:30:6f:45:0e:cc:ca:cb:4f:3c:5d:84:81:0b:b3:f9:
4a:08:f8:b6:60:49:05:6e:72:26:1c:aa:ed:83:ef:a1:99:c0:
ef:6d:fe:36:2a:91:64:8b:ba:60:e9:f8:77:d0:fe:4a:b3:84:
0b:06:51:91:55:ed:7c:70:8d:f9:8a:a3:35:7d:37:c9:33:8b:
6c:8d:1f:43:d1:ad:90:c4:3d:42:bc:dd:97:3c:b5:f9:3e:0b:
f6:ab:d3:9c:5d:e7:bb:38:4a:f6:a3:8c:44:2d:b1:31:60:44:
4e:80:e7:57:65:d8:1b:0d:a1:22:30:16:5f:af:04:a2:4f:0c:
fe:c6:65:db:7c:00:28:96:b8:95:53:30:03:72:cd:4c:34:1b:
d5:87:9f:88:62:52:e0:8b:b3:c4:43:8d:40:d4:45:ce:59:92:
df:be:a5:95:c9:17:32:a1:41:f8:33:76:0d:86:53:a3:95:51:
5c:2e:ef:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:48 2025 by rpki-client