Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
File: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft (raw, json)
Hash identifier: UFxFtiMnhHbonSWzlF3UsJHRHtkJR3o4S00iv3da3Yk=
Subject key identifier: 3D:4D:81:70:F7:46:35:A5:39:AD:56:77:E8:6D:EA:17:CE:D5:91:AD
Authority key identifier: 58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
Certificate issuer: /CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Certificate serial: 019A0592BC3571D397636D6E0329945D15BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
Manifest number: 0380
Signing time: Tue 21 Oct 2025 07:01:33 +0000
Manifest this update: Tue 21 Oct 2025 07:01:33 +0000
Manifest next update: Wed 22 Oct 2025 07:01:33 +0000
Files and hashes: 1: CqZAFiIzp-k21bzGsuj1395ZHTc.roa (hash: gXssHvpvQonpjegaCBTMeVVsQnPbWqrgEQgoKWzts44=)
2: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl (hash: qYSajdiZuH7Zq41nmuZJl3mv4XpA6fspbO8JmQ2gLEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:92:bc:35:71:d3:97:63:6d:6e:03:29:94:5d:15:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Validity
Not Before: Oct 21 07:01:33 2025 GMT
Not After : Oct 22 07:01:33 2025 GMT
Subject: CN=3d4d8170f74635a539ad5677e86dea17ced591ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:43:4e:ae:1a:8c:0f:f9:95:88:a5:91:99:
13:69:b6:a7:ce:45:b7:6b:49:03:d8:af:33:2f:5b:
a7:7a:7e:6b:b0:47:2e:be:93:d0:f9:08:29:09:89:
0e:02:32:68:e0:85:e1:dc:63:ea:7b:18:88:4d:1c:
81:c7:d2:57:0b:cd:4d:7f:19:0c:46:97:19:66:08:
71:9a:25:70:fd:ba:89:a5:f9:5d:01:f9:42:8b:e8:
6a:7e:ae:5d:a3:00:2c:49:39:aa:5c:1a:21:5e:1e:
10:92:0d:1c:38:22:63:05:5e:6e:54:c8:6b:b5:92:
80:1d:fe:7e:7e:4f:af:29:fc:cd:7d:85:57:92:31:
46:99:2a:36:f8:0f:4a:c5:7d:0f:28:5c:99:ff:f3:
3d:c4:74:58:35:49:28:25:da:09:f9:d2:1b:fa:09:
fe:91:86:8c:96:75:a0:1b:8f:98:e4:67:6e:33:4d:
d4:8b:6d:42:23:4c:37:7a:e2:7d:ce:8d:4d:03:4d:
43:dd:88:bb:a5:52:07:ee:d5:dc:66:e2:d4:4e:9d:
b0:9a:9e:72:c5:f5:6a:10:22:aa:ea:59:40:66:92:
3e:d9:99:ac:6d:ba:9f:69:28:ca:f8:3a:e2:c9:28:
5e:d3:69:cd:07:df:ee:4c:b7:90:36:09:f2:a6:ff:
7f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4D:81:70:F7:46:35:A5:39:AD:56:77:E8:6D:EA:17:CE:D5:91:AD
X509v3 Authority Key Identifier:
keyid:58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1c:08:1b:7d:6c:f2:f8:38:e6:63:2d:a1:84:92:67:94:a9:
9a:5f:fb:1b:07:de:80:46:71:db:3b:e0:fa:9e:a7:64:0d:90:
e5:f4:42:ed:e1:ef:9c:54:39:4c:84:da:5f:89:ff:b2:cd:37:
92:90:11:0b:78:1e:d3:17:95:d8:86:aa:61:4b:ff:9b:d5:3d:
0e:a5:89:83:99:0b:d1:3a:7d:e0:e6:b2:a9:b4:21:c7:58:a8:
f1:9c:c4:9f:18:5f:13:1a:7f:d7:68:62:6f:bf:c1:95:df:1e:
2c:f0:e7:37:5d:d1:18:e8:4d:22:ee:4a:31:b7:67:ad:8f:f8:
3e:52:db:dc:b4:f2:7b:c6:c2:7f:65:44:54:70:24:04:55:06:
7c:9f:0f:16:50:14:2c:e7:88:b3:52:81:ca:77:38:2e:db:c1:
18:18:96:d2:b7:44:64:64:dd:86:d1:e9:ee:f2:59:55:50:92:
1f:fb:49:24:24:1b:8c:0e:8a:f8:93:b5:da:8e:9c:00:cb:e5:
33:af:d4:6d:51:26:dc:87:30:9b:2c:f1:cd:04:8b:f7:1f:b9:
61:05:c0:32:dc:77:8c:dc:f6:7e:48:e9:49:5f:7d:e8:2a:44:
51:ff:af:5d:95:2d:df:2d:41:41:66:bd:9d:a3:42:28:b0:1b:
9d:48:69:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:08:34 2025 by rpki-client