Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: 073qrGpt4KDCurZ3+OW+aUWGmbMRRJkPOdXylcvvBn4=
Subject key identifier: D9:65:CB:BB:BF:94:7B:A2:70:43:11:33:D4:EB:B3:4E:29:4C:15:E4
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 019A006BE1FDDCDEA7C13D2FABD83FF6D98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 07F2
Signing time: Mon 20 Oct 2025 07:01:01 +0000
Manifest this update: Mon 20 Oct 2025 07:01:01 +0000
Manifest next update: Tue 21 Oct 2025 07:01:01 +0000
Files and hashes: 1: 2symQxt9tiTp5JPRu9SVrhpHnoI.roa (hash: ETxwfWEk5Ji119X6QNRzmnwtDjfSz5qCO5WUq2I4qpI=)
2: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: 8af3jBjrVxkGFEXG7GGg+QNK8k2wbqY8y1cTNVkg1OY=)
3: aiepDcInSC7XQM1NAo38Ltggcos.roa (hash: 6COc/WNOkQasZPkjRm4nKC/vd3bNAbojTsGDQ+J1+tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:e1:fd:dc:de:a7:c1:3d:2f:ab:d8:3f:f6:d9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Oct 20 07:01:01 2025 GMT
Not After : Oct 21 07:01:01 2025 GMT
Subject: CN=d965cbbbbf947ba270431133d4ebb34e294c15e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:d4:9a:05:ef:d3:b4:55:c9:17:4d:da:2a:
80:b5:f7:2e:23:31:81:24:42:9b:d7:24:1f:6f:04:
72:2e:9a:73:eb:ff:f2:6e:0e:a1:4b:14:2b:bf:50:
c8:67:b1:c0:e5:b0:d4:0c:b1:1c:e1:ad:7f:44:0e:
f0:1e:22:56:f8:63:e8:59:bf:24:56:77:d5:35:2a:
05:8f:7a:97:65:c4:56:a2:87:b3:c1:98:44:e4:fc:
7b:13:6c:66:2b:bf:3f:45:3f:cc:5e:cd:0a:a3:4f:
d7:20:71:6f:f8:e1:a9:04:91:58:05:e0:cd:8e:7a:
6d:7e:88:21:46:9f:6c:da:ac:ac:1a:cf:ae:a6:27:
c4:8e:80:43:f0:c5:98:2c:0b:7e:f1:60:d5:b3:67:
bc:39:f0:c7:7c:c9:2b:44:a3:18:a7:7b:85:59:68:
ae:2c:6f:3a:9c:a1:5d:de:76:27:0f:71:b7:47:58:
16:c8:5b:d1:cc:6f:e7:87:05:c4:5c:cd:43:56:8a:
ad:d0:22:7f:bb:58:8e:b6:31:36:65:2b:d9:30:7a:
13:54:2d:22:31:66:7c:ad:0c:78:85:10:ba:0c:a4:
c3:27:71:ff:46:ef:8b:c8:53:ee:3a:9b:df:6e:97:
27:ca:17:5e:21:30:6c:97:99:96:af:66:f9:17:35:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:65:CB:BB:BF:94:7B:A2:70:43:11:33:D4:EB:B3:4E:29:4C:15:E4
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6e:a8:e9:ba:23:a1:b9:e1:fd:bb:dc:75:38:de:4f:6d:3d:
19:d8:19:44:a5:7f:6c:db:e1:25:6b:1a:08:1b:2f:5d:b5:ca:
91:f6:26:86:9c:c8:a3:42:45:df:19:b8:7f:17:67:a4:ef:7a:
b5:2c:cf:c3:f7:93:33:fb:9e:5b:2d:56:d2:0a:c8:8d:4f:ff:
f4:7b:95:ea:10:6a:c4:9c:ad:77:f3:1b:b4:35:6c:b9:75:aa:
f8:0d:77:e2:68:e6:6f:a5:2f:54:06:ba:e4:9f:77:ba:5e:21:
9e:b3:e4:8d:23:b8:e6:f3:b4:b6:04:0b:db:3f:da:24:c8:c8:
83:f6:51:cb:0c:ec:18:f3:54:3b:bd:ef:7b:cb:5b:fb:c0:55:
2e:8f:c4:d0:fc:64:ab:dd:1d:67:9e:21:44:d3:c4:23:fa:3e:
ef:8f:fc:70:84:a1:ab:0d:73:c5:20:63:71:dc:2d:eb:2b:5f:
9d:08:c5:5b:2f:22:c6:63:1f:a6:dd:ec:88:a9:ee:43:3e:c1:
59:d5:03:49:c5:49:70:74:aa:12:27:86:b9:7d:82:32:01:b0:
02:08:20:94:c9:b5:d8:bd:89:84:68:33:8e:6a:33:45:9b:68:
d4:35:56:fc:d3:e4:f5:2e:0f:00:f5:69:ee:c6:91:02:bc:52:
e0:cd:a9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:24 2025 by rpki-client