Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft
File: WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft (raw, json)
Hash identifier: FN3pim8E/xQ6RNLUTtS8wMIPSDLYGGLPwRniJNfxZ/g=
Subject key identifier: 99:FF:25:8B:55:AD:92:3E:6B:6F:18:25:68:00:16:1A:39:87:CA:C6
Authority key identifier: 58:C3:C4:3B:44:4C:A8:35:CC:76:F4:C4:C3:C6:39:75:2E:D1:AA:7B
Certificate issuer: /CN=58c3c43b444ca835cc76f4c4c3c639752ed1aa7b
Certificate serial: 019A4D741BCEF06CE8A75BF7054FBF09E58C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft
Manifest number: 0425
Signing time: Tue 04 Nov 2025 06:00:46 +0000
Manifest this update: Tue 04 Nov 2025 06:00:46 +0000
Manifest next update: Wed 05 Nov 2025 06:00:46 +0000
Files and hashes: 1: WMPEO0RMqDXMdvTEw8Y5dS7Rqns.crl (hash: Qq6qil42w7FjEU7IEPIqwQK4/KxbWMQ9fvbc6M/77c4=)
2: Z2JDU3PNXto61tujLWtOdksDxYw.roa (hash: XDiLVtUbcUm1U7CtOsqMZFEyrN50eh3zLLtFQ3J984U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft
rsync://rpki.ripe.net/repository/DEFAULT/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:1b:ce:f0:6c:e8:a7:5b:f7:05:4f:bf:09:e5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58c3c43b444ca835cc76f4c4c3c639752ed1aa7b
Validity
Not Before: Nov 4 06:00:46 2025 GMT
Not After : Nov 5 06:00:46 2025 GMT
Subject: CN=99ff258b55ad923e6b6f18256800161a3987cac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:94:2b:0f:66:ed:ea:ec:6a:e4:e2:cb:22:fe:
39:3c:da:d1:f8:25:04:03:72:b5:a7:b4:0a:23:21:
df:d7:b7:51:c3:80:3c:a0:f6:53:18:cf:f5:62:8c:
f6:e0:dc:54:80:41:0b:3f:91:14:69:a7:38:6b:c3:
d1:c4:72:06:5b:85:94:15:bc:ff:10:6b:ef:08:bc:
07:ce:a8:e2:ec:bc:44:c5:aa:35:a5:aa:fc:87:58:
ca:24:6f:f7:f1:ca:c3:59:7f:48:8e:26:eb:0f:07:
36:ae:fa:5b:83:cd:0f:1d:73:24:01:32:6a:e5:8a:
da:61:d4:f6:df:f3:66:45:7a:90:16:76:67:a9:10:
cb:29:0d:96:6b:9e:2a:ca:a5:49:f4:8c:c6:57:0e:
42:d0:c0:81:55:e1:ec:bb:56:10:f0:54:0a:75:a3:
10:12:0d:1f:4f:93:c7:ba:84:d3:43:16:ba:ef:4c:
12:03:fe:03:f4:e5:20:ff:4f:9f:b2:93:e0:a5:2b:
e1:51:4d:3c:0c:82:95:93:64:0d:e0:01:cf:50:d6:
b0:05:a0:e5:80:ca:05:69:0b:e8:4a:98:96:ef:9d:
f8:09:20:1c:2c:71:d5:1b:75:98:23:6e:c2:04:a0:
99:88:83:81:82:a9:d4:30:a3:9c:75:ab:d0:1d:30:
26:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FF:25:8B:55:AD:92:3E:6B:6F:18:25:68:00:16:1A:39:87:CA:C6
X509v3 Authority Key Identifier:
keyid:58:C3:C4:3B:44:4C:A8:35:CC:76:F4:C4:C3:C6:39:75:2E:D1:AA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:61:d6:0a:58:f2:19:4c:da:4e:29:4d:0d:53:de:fb:bf:69:
7e:19:ed:8c:2e:18:70:dc:a1:db:58:c8:9b:5a:69:a7:07:89:
46:22:64:9b:72:dc:53:9d:08:28:9e:be:aa:d7:be:ca:c6:85:
4c:38:39:c2:4f:39:a8:32:cc:ec:e3:84:c1:5f:26:8e:c4:43:
76:0d:a4:ef:b3:ad:96:26:00:e9:83:f3:b6:7a:a7:d3:d0:a6:
79:77:21:f0:b0:a0:2a:b5:11:f4:59:64:4c:48:7b:87:3f:44:
17:97:46:b3:ec:64:28:5a:8c:9b:fe:1d:13:7c:2f:5f:0f:cc:
36:17:95:71:69:e0:2e:12:91:27:06:d3:49:53:47:eb:f5:85:
a8:1b:00:2d:1f:ad:47:4e:2f:54:40:d8:a8:ba:7d:65:87:c5:
eb:ef:7c:35:17:3c:19:11:3a:48:54:da:b2:17:e8:f7:b8:69:
6c:08:92:1e:b1:c8:7f:b5:1b:34:d8:e0:e8:7a:9e:53:cd:22:
69:2d:b2:8f:ff:d6:8e:be:25:8d:ac:51:5e:0b:3f:fa:c3:35:
38:79:20:bc:7d:fd:d7:6b:33:02:d0:cd:25:92:0b:1d:cd:9d:
e1:4c:93:14:00:6e:70:74:57:90:61:6d:9a:b1:b0:57:15:05:
7b:30:d7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:12 2025 by rpki-client