Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
File: WYW9QaWaLUUeYnCDXaFDmf9iuro.mft (raw, json)
Hash identifier: Bb9YZhdo0SBe4duW6lfTymk4qgR6Akf/dtoyke37BAQ=
Subject key identifier: 80:FE:AE:9C:BC:B1:91:F5:F8:E1:18:91:54:3C:E6:5E:E6:AB:51:75
Authority key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
Certificate issuer: /CN=5985bd41a59a2d451e6270835da14399ff62baba
Certificate serial: 019A50E29E85BB91AB3A91E811A78BC41B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
Manifest number: 0249
Signing time: Tue 04 Nov 2025 22:00:19 +0000
Manifest this update: Tue 04 Nov 2025 22:00:19 +0000
Manifest next update: Wed 05 Nov 2025 22:00:19 +0000
Files and hashes: 1: TgNurcV4axU3uqSkw39wE7TkQvk.roa (hash: B80X6acZEx7hnHCt/dDJOZhPF/97mIDxIpJ3EyHK/4c=)
2: WYW9QaWaLUUeYnCDXaFDmf9iuro.crl (hash: 3076sd+gwmFHPVhA8Rx4FzXrVM7bObwfpQmgZKzLd+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:9e:85:bb:91:ab:3a:91:e8:11:a7:8b:c4:1b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5985bd41a59a2d451e6270835da14399ff62baba
Validity
Not Before: Nov 4 22:00:19 2025 GMT
Not After : Nov 5 22:00:19 2025 GMT
Subject: CN=80feae9cbcb191f5f8e11891543ce65ee6ab5175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:aa:83:2f:f7:18:df:6c:b4:43:f4:ca:d7:f3:
83:8a:a3:74:a4:f0:15:5e:35:88:db:58:43:ec:e3:
fa:2f:40:56:6d:38:7f:50:c1:5e:3b:18:7d:55:1b:
43:c3:a5:f1:6f:4c:1c:dd:46:4f:1a:32:49:ed:e8:
53:26:e7:bc:4d:96:52:07:cd:01:7e:d8:81:e9:d8:
c1:f4:e1:fa:e8:63:43:f5:3a:83:1c:a7:c9:97:0e:
0a:42:16:b4:8c:8f:38:13:ac:a1:e8:73:71:a6:36:
e2:eb:5b:c9:e3:8d:29:b6:45:80:38:83:ee:7e:e4:
92:d0:e1:5e:9d:eb:0f:8e:5e:52:6e:47:13:b7:ba:
7a:f4:59:c8:b3:01:fe:c7:d1:1c:05:d6:7a:ef:22:
65:9a:f6:a4:be:da:9d:06:5c:81:7a:69:47:88:ef:
63:8a:2d:85:cc:d0:cc:90:0f:61:b5:f5:d0:78:a8:
32:bb:eb:49:99:bc:55:aa:bd:60:98:e3:5b:d2:a5:
1e:ce:f1:ad:1f:79:55:80:3c:42:0a:e1:1a:bf:ce:
4f:cf:07:5d:7c:49:26:54:4a:a0:57:11:f3:f7:c6:
b3:17:6c:e9:69:b0:43:5c:d9:f0:64:d7:5b:42:68:
fd:88:ab:03:77:67:a5:26:f0:5d:15:26:b6:ab:ca:
4f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FE:AE:9C:BC:B1:91:F5:F8:E1:18:91:54:3C:E6:5E:E6:AB:51:75
X509v3 Authority Key Identifier:
keyid:59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:56:35:67:fc:6a:8f:41:c6:cf:27:29:14:37:6e:fb:7e:26:
9a:73:c0:15:6d:5d:31:ae:48:ac:42:9a:68:e6:48:58:ca:36:
ed:b4:b9:8e:37:68:51:89:6b:7a:e3:97:20:0d:5c:00:e2:e0:
19:2d:f7:37:a7:f2:56:5f:9f:b3:a9:ca:23:a6:ea:48:35:ca:
60:85:13:23:89:26:80:e3:fa:03:29:1b:b7:25:00:47:60:c6:
a0:b6:d5:3e:83:87:a2:db:11:c0:4e:a3:8b:f6:ff:27:b8:bb:
d2:43:d3:9a:58:d5:ca:de:b6:1d:01:7d:91:0b:35:15:8d:a5:
b3:c4:65:28:04:66:53:b7:52:53:89:d5:18:c7:9f:0a:49:ac:
61:86:25:c6:05:ab:83:5f:75:a5:ac:fc:71:f4:e9:0a:ba:bc:
9d:5a:e4:39:b6:45:98:54:7e:ed:6d:6d:a8:a3:6a:df:00:70:
77:aa:fb:15:fa:b7:4d:92:a6:e6:ec:50:25:51:1d:45:84:d2:
77:5f:bd:47:56:0b:01:35:5d:48:c3:f0:4e:ae:4e:b8:fb:37:
24:a5:d5:0f:96:7f:4f:03:b2:e9:c3:59:27:c0:27:02:77:3a:
e7:2c:4b:3d:2b:f2:1a:82:06:d2:d2:b1:26:a5:67:0b:c9:17:
cc:f7:5e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:51:32 2025 by rpki-client