Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
File: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft (raw, json)
Hash identifier: SZ0aaxtJMMZeHWd529TpAc4ECRUJKEO05tTiPUYhO4g=
Subject key identifier: 38:1B:F3:33:03:0F:FD:B0:36:4A:05:D1:92:1D:1F:3D:81:B3:A6:F5
Authority key identifier: 5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
Certificate issuer: /CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Certificate serial: 019A50E2F048070E2F755C907C10D496104E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
Manifest number: 16A2
Signing time: Tue 04 Nov 2025 22:00:41 +0000
Manifest this update: Tue 04 Nov 2025 22:00:41 +0000
Manifest next update: Wed 05 Nov 2025 22:00:41 +0000
Files and hashes: 1: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl (hash: xN+v2OvaoaXHb+pTLAb3TYCZ8lC4xr2blZwon+7TWeI=)
2: Y5NkjhxNGx4ss5GCzKl7-rIduCM.roa (hash: /DJ0Dj5nLfrACSNcG6NOE2ReJp4ef+Ajvh1vnuYm/CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:f0:48:07:0e:2f:75:5c:90:7c:10:d4:96:10:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Validity
Not Before: Nov 4 22:00:41 2025 GMT
Not After : Nov 5 22:00:41 2025 GMT
Subject: CN=381bf333030ffdb0364a05d1921d1f3d81b3a6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:50:16:77:9a:2f:41:c3:c9:67:f1:e9:5e:f0:
2e:17:57:95:10:7d:8f:8f:27:3d:c4:a4:07:81:f7:
07:3d:6e:11:00:1b:a5:3d:15:00:e2:7d:96:a2:92:
61:7c:db:58:7d:92:1d:6f:42:cf:85:e2:6f:09:7c:
de:66:f4:98:57:a9:1c:4c:69:a6:75:99:36:f1:83:
86:40:21:7b:00:43:37:c1:c2:c9:d3:67:f8:a8:22:
1b:d0:d4:d3:8b:a1:1e:34:6b:ce:f9:ae:98:6c:b3:
09:b6:a1:1b:b9:4d:ef:ff:de:2f:0a:58:83:23:35:
03:bc:e9:16:ef:f7:95:24:d6:e2:4a:a7:a1:07:c3:
b1:ee:5c:b5:0d:c1:2d:7c:fa:8c:38:66:62:5b:78:
b5:ac:e4:36:d3:b0:97:07:36:e5:c5:c4:70:d8:ed:
d2:ee:21:f4:0f:c6:86:bd:34:62:be:cc:16:2b:1d:
5c:db:91:10:81:69:09:87:61:8a:c3:bb:ec:b9:ed:
9f:1e:cc:8e:9f:c1:01:2d:61:14:93:0a:98:39:6c:
0c:cb:d9:ec:01:f3:ec:ca:b4:e7:56:06:d4:15:53:
36:38:44:4d:f3:dd:fc:9a:50:9b:8b:69:32:65:bc:
32:af:9f:d5:3c:6c:d2:84:de:55:1e:3d:27:85:db:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1B:F3:33:03:0F:FD:B0:36:4A:05:D1:92:1D:1F:3D:81:B3:A6:F5
X509v3 Authority Key Identifier:
keyid:5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0c:a7:c5:32:ad:b0:b9:d5:ee:0c:27:c3:a3:fa:6e:2d:7d:
b1:09:fb:8b:53:2a:c5:0e:2e:d9:77:fe:7f:b2:8a:3a:32:71:
55:e3:f2:5c:18:ec:90:44:4c:20:31:c3:8e:dc:45:1c:3a:1d:
3d:bf:59:9b:1b:51:d8:20:8f:82:5b:9a:b7:05:54:84:60:cd:
fb:ae:7f:b4:0e:ba:f0:f6:eb:3f:25:5c:60:0b:b6:e5:3d:36:
4c:d3:2b:3e:cb:29:33:df:23:d7:36:b7:5c:87:d5:59:9e:1c:
0b:5f:93:a9:79:e1:9b:c8:5f:71:d5:46:04:01:62:63:ff:1e:
46:b8:f6:a1:2e:38:78:d5:d9:86:40:f5:1c:71:72:e8:e4:3f:
53:25:55:4f:8e:49:09:cd:20:6d:8c:59:5e:1c:f3:1e:81:6e:
4d:05:ee:37:24:0f:5a:e5:90:2e:35:c9:dc:98:f8:9c:23:0b:
f7:95:b4:62:28:9b:38:d6:b8:94:c4:de:2b:e6:2f:1c:92:88:
9d:f7:d3:63:7d:96:f4:31:6f:d5:e8:0c:1b:40:80:bb:1f:e2:
29:8f:89:d3:b8:e7:1e:20:16:a7:7c:e3:65:00:db:84:b5:a3:
ef:3b:8c:7b:a9:c7:a5:75:bd:0c:1a:70:f4:88:c9:4d:67:ba:
a1:fd:f3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:23:54 2025 by rpki-client