
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
File: WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json)
Hash identifier: CThLH2kqoGbSwJHf93yCqSrrJfv+AUN52gR9ILJJOT4=
Subject key identifier: 3A:74:06:2A:27:B0:BD:FF:5E:4C:65:12:7A:47:F1:C4:46:A0:9F:1A
Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
Certificate issuer: /CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Certificate serial: 0199FB461F9A9DDEF57C053EE6E9ED8DE8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
Manifest number: 02E4
Signing time: Sun 19 Oct 2025 07:01:40 +0000
Manifest this update: Sun 19 Oct 2025 07:01:40 +0000
Manifest next update: Mon 20 Oct 2025 07:01:40 +0000
Files and hashes: 1: MzdQsDB1AACOG2EyiBlrqIPuVdY.roa (hash: nb+ptkiMxODpHnRgVbj2TaDnZ7JIdyQXT5CZFak+Qnc=)
2: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: hePGEZjeJEfGnPT2jcis8esaM1lcPwiED+FHII9IgQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:1f:9a:9d:de:f5:7c:05:3e:e6:e9:ed:8d:e8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Validity
Not Before: Oct 19 07:01:40 2025 GMT
Not After : Oct 20 07:01:40 2025 GMT
Subject: CN=3a74062a27b0bdff5e4c65127a47f1c446a09f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:00:45:f4:ed:e0:ca:60:9e:76:e2:48:d1:
8e:5b:b7:f7:39:c8:22:64:a4:cf:ef:85:24:38:07:
f3:57:15:09:59:e7:10:d7:ce:16:e3:35:20:e4:c3:
15:1c:46:c2:bc:15:74:98:b9:15:ad:84:3f:b0:9f:
be:95:75:4f:c3:e0:db:d2:23:84:66:4b:17:d8:71:
c4:08:98:67:68:88:77:6d:b9:be:4c:fe:29:b1:62:
44:d5:02:22:3b:fe:b0:e7:56:67:8d:eb:0e:d1:36:
36:20:c0:91:66:9c:3f:c0:38:e0:72:80:84:1f:0f:
4a:94:e7:80:fa:97:ff:a0:c8:58:c5:2c:ba:f2:22:
ec:ac:d1:70:18:26:e6:ad:91:44:7d:29:3a:45:3e:
99:c1:16:9d:1a:62:6a:99:dc:f8:19:78:d8:54:f9:
6f:44:d0:0a:36:2e:77:d9:06:ac:2d:7d:ca:79:9c:
b3:09:eb:cf:9a:15:8e:02:6c:b3:ee:a6:ab:1b:b3:
a9:c9:f1:85:41:bd:ee:09:1f:a0:cb:ee:47:3b:89:
45:b7:e4:41:28:ac:2e:69:c2:ee:6b:a0:e7:bd:7e:
38:48:e4:7f:b2:4f:d6:44:4b:9f:23:cb:d3:0c:17:
64:a3:8a:71:ce:2c:e3:1a:75:09:27:0c:01:e2:86:
f5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:74:06:2A:27:B0:BD:FF:5E:4C:65:12:7A:47:F1:C4:46:A0:9F:1A
X509v3 Authority Key Identifier:
keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:03:22:07:36:82:97:f8:d0:90:8f:ba:02:69:32:f3:a9:1b:
75:11:89:5f:9e:65:8f:89:81:e3:2f:f4:92:81:e2:aa:eb:03:
b7:c5:c0:24:f8:ea:35:77:d4:63:24:a8:1e:ef:82:5b:8c:47:
6f:a7:4d:10:ae:d1:8b:ee:63:2b:11:d7:5d:d9:21:bb:a2:37:
24:bb:da:90:11:63:56:88:76:07:7b:08:c3:ac:69:4b:51:cd:
3a:56:ba:6d:b4:20:57:3c:f6:92:2b:30:06:33:49:0c:e8:a1:
49:72:6a:50:cf:a6:51:76:da:31:5b:24:e8:52:fe:a0:48:59:
6a:81:e6:5a:64:4f:27:ed:1e:99:6c:9a:a5:9d:9e:b3:83:08:
ab:92:53:50:97:01:6b:98:95:1a:c0:6a:44:78:3f:dc:c8:34:
27:33:27:b5:da:44:96:e5:d9:72:ee:7c:78:e3:68:27:93:2f:
c8:1d:89:07:1c:ea:45:79:ae:18:fa:c8:f5:de:6d:11:72:42:
58:a2:c7:fd:bb:cd:1d:d5:d5:17:4c:13:de:7e:c1:95:fd:d6:
e8:e3:09:d6:9d:4a:14:3b:77:af:e2:4e:e8:37:7a:4f:48:53:
e8:dd:c4:e4:42:13:11:00:1c:6b:a5:3b:52:c4:e0:13:cd:0e:
7b:f4:dd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:28 2025 by rpki-client