Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
File: WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft (raw, json)
Hash identifier: Iu0LrYNvbPwPT+j7LSu3n8AHacPnwn6VgPT3w1uMGSw=
Subject key identifier: 59:CF:17:5D:C0:9F:B2:27:AB:25:FB:52:FC:42:14:EE:6B:27:C7:87
Authority key identifier: 59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E
Certificate issuer: /CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
Certificate serial: 019A50070031F0EF04913EF765B8395E77BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
Manifest number: 0FFB
Signing time: Tue 04 Nov 2025 18:00:27 +0000
Manifest this update: Tue 04 Nov 2025 18:00:27 +0000
Manifest next update: Wed 05 Nov 2025 18:00:27 +0000
Files and hashes: 1: WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl (hash: HjgQwTn+qB4DXwejoOT+poiSqoPNiC77RqOmSybGO18=)
2: WukoJKvYevk5DCDC_j-VNd6UEsY.roa (hash: oH9XlTl7oEKCB+DPnY3H0aSfeO00Y6Ze9ixEhvL+Fj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:00:31:f0:ef:04:91:3e:f7:65:b8:39:5e:77:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
Validity
Not Before: Nov 4 18:00:27 2025 GMT
Not After : Nov 5 18:00:27 2025 GMT
Subject: CN=59cf175dc09fb227ab25fb52fc4214ee6b27c787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:17:b2:02:07:a0:13:ad:6c:6f:99:ad:39:
96:10:88:eb:2b:35:1b:6b:62:c3:b3:cf:b9:c4:c3:
4c:c8:1d:38:97:6b:fc:e0:9d:02:b9:a9:5a:3d:01:
e3:d9:96:e6:31:bd:74:17:e3:65:58:fc:b1:19:a5:
5d:aa:47:56:79:fc:60:32:98:61:2f:61:6c:16:a7:
6f:0c:bb:96:17:0f:d6:70:74:ad:a2:b5:16:42:3b:
f5:f9:a9:4e:5b:93:c9:e9:26:1f:f7:d5:68:f7:b2:
70:8d:d8:e5:ef:a3:37:7e:dc:7c:22:c8:ac:df:55:
2f:80:14:30:29:7b:85:99:4b:1b:cf:0b:5f:58:4d:
e5:f1:f9:15:40:7c:ab:ef:5a:81:9f:c9:7b:0b:8b:
c6:b3:cc:a8:18:46:db:0d:c1:78:f4:61:a4:ec:28:
7e:2a:df:57:30:8e:13:06:2e:4b:5e:b7:d1:22:65:
86:a1:f8:5c:08:e8:e9:d1:36:15:e3:7b:99:63:26:
c2:c8:83:a4:bb:18:bd:0f:a6:6e:c6:fe:1e:98:aa:
89:20:48:47:b5:2b:8a:b2:b1:4a:97:74:5d:4b:5d:
b5:6b:d9:ef:34:40:e3:a7:71:2b:26:ed:b1:63:6f:
7b:45:5d:ee:bd:50:47:5b:79:5e:01:5a:b0:6f:46:
8b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CF:17:5D:C0:9F:B2:27:AB:25:FB:52:FC:42:14:EE:6B:27:C7:87
X509v3 Authority Key Identifier:
keyid:59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:79:a1:1b:f5:64:b4:83:3a:0b:a0:fa:41:c3:ae:1c:28:3d:
08:d9:2a:87:d6:56:34:b0:89:ae:55:7a:03:2a:89:28:47:1a:
68:62:48:a6:d2:47:e8:42:27:8e:c0:db:02:bd:f9:18:a3:3c:
8c:42:5b:9b:41:c9:4d:de:fd:2b:22:9c:5b:e7:0b:ff:24:90:
c8:30:f6:f6:5b:db:2e:09:08:74:1d:49:92:6c:61:75:4d:20:
82:dd:c0:36:cc:51:0b:4f:8d:45:8e:14:d4:ec:4a:17:3b:76:
b1:1f:cb:24:39:38:2b:ab:ab:7c:3e:a0:48:b6:dc:fa:a3:cf:
5b:8f:5b:d1:63:fa:c1:b4:f7:b9:8e:cd:43:f5:02:96:0f:5a:
b5:be:84:27:84:f2:e4:7d:f2:05:dc:e6:dd:2d:96:ed:6d:86:
37:a4:29:96:ac:2b:22:47:e5:0b:28:b4:f2:38:dc:78:98:1f:
24:96:d1:b2:1c:8a:e4:99:7e:ba:40:2f:a2:c5:26:48:92:91:
ad:2a:e7:74:0d:4c:66:f7:13:7e:e0:ad:3f:3c:0d:f9:d1:b1:
b1:7d:d2:97:0c:3e:a6:b1:66:eb:aa:3a:39:c0:7f:9f:cf:09:
26:9f:0c:a5:18:a9:f0:64:81:14:2e:4d:01:45:63:82:f5:fa:
fe:f2:5f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:11 2025 by rpki-client