Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
File: wlbSXx_dANyA3W0iWyERm_ISHok.mft (raw, json)
Hash identifier: 6yYVL/+haZu7euo5I04OcyyFq9tXOS5zsSSBx3PIiBQ=
Subject key identifier: DC:B9:F5:7E:F0:9F:5F:B5:40:57:DB:F7:5C:70:C8:30:E8:C8:51:38
Authority key identifier: C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89
Certificate issuer: /CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89
Certificate serial: 019A4D73924FE0C7A25EA0A8C892D87EE2FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:10 +0000
Manifest this update: Tue 04 Nov 2025 06:00:10 +0000
Manifest next update: Wed 05 Nov 2025 06:00:10 +0000
Files and hashes: 1: mOHhCAnpxR-dp3-6rcl-KfmxQF4.roa (hash: 3p2JZm+3j1SVt0MOxqOY+5HYmBdbi1aC8iIMBMpg4u0=)
2: wlbSXx_dANyA3W0iWyERm_ISHok.crl (hash: vVVrlAL7z/z0NpIzGoOSAKK4CIn4P9/h2ks/c/1o874=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:92:4f:e0:c7:a2:5e:a0:a8:c8:92:d8:7e:e2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89
Validity
Not Before: Nov 4 06:00:10 2025 GMT
Not After : Nov 5 06:00:10 2025 GMT
Subject: CN=dcb9f57ef09f5fb54057dbf75c70c830e8c85138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:36:61:fd:25:30:6f:09:4d:c6:72:89:bc:db:
30:3f:6c:23:22:51:42:31:73:b3:c9:43:13:da:89:
17:23:16:45:31:28:2e:dd:58:1a:4b:ee:81:14:d1:
69:15:5b:0b:b7:7c:a7:e2:b5:72:6c:f3:8c:f5:f0:
3c:73:38:27:93:d5:29:80:88:84:65:51:8a:dc:8b:
5a:54:5d:29:fc:ec:c7:47:68:7f:f4:7a:67:32:85:
bb:fb:7b:93:f4:5b:bc:15:82:0e:55:bb:eb:2a:4e:
b0:b5:ce:7a:f0:37:19:3a:7a:19:76:8d:55:94:db:
a6:b7:b2:ab:13:e0:1e:9f:60:a1:1f:5a:a9:50:47:
11:73:0b:86:86:7c:ef:82:89:9a:2e:33:5a:35:43:
1a:a9:ea:9d:70:b3:d2:c6:86:54:2d:ff:bd:be:f0:
31:a8:a8:08:dd:08:85:88:45:06:a7:7f:f3:87:42:
23:5e:e2:e1:9a:34:85:35:99:e9:0e:20:2c:be:62:
57:f4:8f:62:0a:34:b9:09:e6:e6:c1:15:cf:18:ff:
91:0b:55:b4:45:b4:c0:fb:b1:34:5d:2a:8b:4f:3c:
ae:b8:21:c8:1e:a3:f2:fa:91:ec:7d:e7:12:b4:0a:
24:4f:20:a5:b4:08:76:86:a7:4e:dd:a8:20:37:ac:
c7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B9:F5:7E:F0:9F:5F:B5:40:57:DB:F7:5C:70:C8:30:E8:C8:51:38
X509v3 Authority Key Identifier:
keyid:C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e4:2e:b7:0d:fd:09:4f:da:9f:d9:67:c8:e6:90:16:cd:11:
f2:88:9a:b6:61:9d:81:ba:77:e2:85:52:34:e6:65:24:8f:13:
18:b6:72:27:d6:21:09:b2:fa:ac:49:0e:69:17:51:b2:6c:ea:
43:19:ae:dd:38:a0:e2:76:f0:93:8d:20:89:97:d7:f4:2e:21:
88:65:52:2f:86:e8:8a:0f:70:17:07:dd:f1:34:3d:35:62:95:
d3:62:d2:70:ad:58:a1:36:23:8a:93:ad:27:ff:8e:c1:0e:8c:
ec:19:00:4d:9c:c1:58:fd:2c:3a:f1:1d:b3:60:1f:c2:7a:91:
1a:6e:bf:37:64:a3:70:24:d6:d1:a5:aa:e8:80:b4:85:c7:ab:
93:4f:6e:15:d7:f5:cb:83:f6:37:76:17:e8:87:53:12:b3:3f:
be:ea:cb:84:1c:15:8c:92:06:0a:a9:72:52:50:42:1c:ea:ed:
e2:72:45:db:e9:1f:30:f8:dd:25:22:99:ce:00:8a:5f:f9:16:
38:13:d3:af:5b:08:02:49:e5:9e:ad:05:42:d5:e6:d9:0f:8c:
55:39:a6:05:0f:c1:ea:cd:8e:ff:6c:86:60:40:17:a3:ce:87:
f1:19:d6:af:1c:80:ff:41:48:25:39:97:2d:53:40:b9:e0:a0:
39:9f:93:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:01 2025 by rpki-client