Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
File: WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json)
Hash identifier: +ouyJsK5rS/OBsoiTsJ2cBQsyar+DnnPsXsXuI0DPvg=
Subject key identifier: 6C:31:97:C2:1F:E8:22:8F:E3:B1:2B:9A:71:ED:06:95:B2:A4:64:57
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Certificate issuer: /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial: 019A4F2AF869E3F4F5C89B7C4FC1B68983D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 14:00:07 +0000
Manifest this update: Tue 04 Nov 2025 14:00:07 +0000
Manifest next update: Wed 05 Nov 2025 14:00:07 +0000
Files and hashes: 1: 8Z3aUD_PAmXD6dv52YsOghcqB84.roa (hash: yqXiM+cGXnQH3xEwReOpDqFoSkq0y2lHcTn04sbV7Go=)
2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: w7ZVUgqDIt6N5KS54has9Zjc+JW15THZ3u96DyQlFO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:f8:69:e3:f4:f5:c8:9b:7c:4f:c1:b6:89:83:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Validity
Not Before: Nov 4 14:00:07 2025 GMT
Not After : Nov 5 14:00:07 2025 GMT
Subject: CN=6c3197c21fe8228fe3b12b9a71ed0695b2a46457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d3:43:f6:ce:3f:d3:76:51:f5:0c:72:fa:0b:
a3:2b:d9:21:25:a8:b8:9f:e8:a2:ab:2c:9e:82:f9:
ae:96:d4:a3:b9:2e:71:98:77:11:66:04:63:25:7d:
2d:db:40:32:55:a3:48:80:16:ea:5c:9b:3a:61:84:
12:be:e1:4c:c2:2b:88:ec:30:8a:5a:40:fd:83:b9:
e6:f2:27:84:0a:28:20:d6:b2:a0:5d:ef:5f:e6:89:
43:d5:64:7e:5a:6d:77:5c:04:c5:a5:ec:e2:fb:ce:
17:1a:38:33:6e:31:b7:85:70:bb:4e:47:56:df:45:
c1:c6:25:66:4a:a2:6a:5f:1a:b8:7f:ae:ca:2e:45:
07:41:b8:de:7b:67:e7:78:6e:db:e2:2e:d0:6a:9a:
50:0a:39:7a:56:60:16:2e:ab:6c:d4:98:a2:c5:6b:
df:2c:6a:0c:ea:45:9c:a6:f6:4c:dd:36:65:f0:fe:
93:af:b3:ba:8f:77:82:84:9f:7e:13:46:40:af:4c:
75:c7:39:bf:78:89:6c:6c:8a:24:19:6e:c9:eb:f3:
36:73:d0:62:ba:17:47:a7:64:f8:04:44:10:fd:44:
00:27:1d:58:d4:75:b7:27:67:49:5b:68:b5:dc:30:
db:86:9c:8f:9c:cf:24:8b:79:3b:67:7b:d5:6a:f8:
0e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:31:97:C2:1F:E8:22:8F:E3:B1:2B:9A:71:ED:06:95:B2:A4:64:57
X509v3 Authority Key Identifier:
keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2b:bb:bd:c1:65:87:df:b1:ba:fd:9c:f5:70:20:2f:fb:a4:
5f:fc:8a:35:9b:fd:da:a7:99:73:7b:8a:e7:24:07:b3:35:42:
de:23:a1:5b:9e:ed:1e:53:59:61:1a:d3:3e:9b:b2:07:68:f6:
68:0a:d2:78:fe:99:fe:37:f4:8b:f1:fc:23:ee:89:47:ef:d1:
53:35:fe:69:60:a9:87:96:b1:a3:39:f3:94:48:50:2a:ef:e6:
e4:54:c1:35:cf:c7:d3:16:b2:47:29:ac:1c:fd:b7:09:8d:60:
45:f9:d6:1b:a8:bd:2e:7d:d7:93:5e:8c:8c:11:1e:f8:77:ca:
80:10:f1:01:29:ea:c6:fd:05:70:58:9c:b5:75:b2:a1:af:bd:
6b:cb:41:19:6b:45:0f:4b:e5:6d:0a:02:c9:30:d1:1a:9a:34:
cc:55:f9:ec:82:23:4f:5d:8c:d6:4a:88:c7:48:b2:71:0b:4e:
8c:82:ab:b6:47:3c:53:70:71:ce:60:36:2f:18:43:11:df:31:
2a:89:8b:ed:72:0f:ec:fa:56:3b:d1:ec:18:df:b7:3f:44:e1:
67:4c:6b:ea:a3:60:65:cb:f2:8d:b4:75:22:f8:3c:30:0a:78:
3e:e7:12:60:c3:91:48:15:4f:f8:e4:c9:9d:f7:c1:36:b2:7f:
fe:df:d9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:54:11 2025 by rpki-client