Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier: MPKCnoEyD932g5Df7qIdNtOxT1QDElorce7nuv2OA0k=
Subject key identifier: 68:2F:D3:6A:D4:4A:A9:34:AD:AE:5E:A9:BE:75:FA:21:63:BA:93:08
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial: 019A0411210D1AF3F318C4493E21F59D2D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number: 1064
Signing time: Tue 21 Oct 2025 00:00:22 +0000
Manifest this update: Tue 21 Oct 2025 00:00:22 +0000
Manifest next update: Wed 22 Oct 2025 00:00:22 +0000
Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: q+eq7Q63GiTuCoqmdOfdWwPHoMs6o+6IhdFjwyhazrI=)
2: rwRRPql1rIQzsq_i06yzoO2wgHQ.roa (hash: 0FdnTsSRRUfY+3q4ZnKlxf+D+uYOXphiuhAQtxiPw20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:21:0d:1a:f3:f3:18:c4:49:3e:21:f5:9d:2d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
Validity
Not Before: Oct 21 00:00:22 2025 GMT
Not After : Oct 22 00:00:22 2025 GMT
Subject: CN=682fd36ad44aa934adae5ea9be75fa2163ba9308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:ce:d5:24:2d:24:19:b7:b2:ec:3a:cc:32:
72:31:01:e1:17:aa:cd:d3:40:99:f0:ed:2c:e0:fa:
a5:f9:eb:cd:d1:01:3b:62:60:4d:d9:4a:e1:66:9f:
1c:3d:1d:52:98:8c:b9:27:01:10:08:31:bc:78:bf:
7c:05:ca:be:f0:d7:74:ec:5f:cc:71:84:fb:c3:7f:
1d:a8:5b:a3:06:69:e5:04:ad:59:f6:b1:1a:65:15:
0d:74:d5:2f:d8:70:83:53:66:7f:b8:02:40:55:de:
aa:33:83:dd:e3:07:d3:d5:b0:7e:29:77:10:0b:0e:
49:81:81:fe:b8:0b:ba:5c:c2:0d:1d:73:cf:a9:cf:
0a:ec:ac:e1:43:3d:40:af:1a:72:af:5c:40:03:7a:
9a:1c:51:ec:0e:f1:0f:3a:cd:80:8c:bf:88:01:97:
fc:28:b0:1a:ff:bf:cb:4b:9c:fa:b1:5b:69:57:8b:
e8:c4:93:c8:80:c9:61:31:0c:df:77:c5:16:b4:6b:
cb:02:74:0e:a3:32:48:37:51:0e:9c:c2:53:64:04:
67:e0:6c:3c:db:2a:a0:5f:f6:ad:93:13:1b:57:8b:
5b:29:b7:eb:af:f7:e9:5b:c4:f1:ef:9e:fd:28:1b:
d6:de:bb:71:d0:b4:9f:25:54:c4:eb:79:2c:5e:73:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2F:D3:6A:D4:4A:A9:34:AD:AE:5E:A9:BE:75:FA:21:63:BA:93:08
X509v3 Authority Key Identifier:
keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a1:76:fc:28:f1:7f:9f:c7:b6:de:39:eb:27:66:e8:0b:6d:
ae:f6:88:a8:c7:4b:e3:49:a7:27:e1:b1:ad:ca:1b:9e:48:3d:
bd:9e:4d:65:f4:88:24:ef:ce:16:bb:c3:94:b5:b7:4a:87:53:
99:a1:c5:93:09:72:e5:be:22:fa:1c:20:44:44:bf:06:02:7d:
8f:d9:18:67:a2:63:b1:51:7e:e9:20:54:72:b2:e8:e3:5b:f3:
66:76:51:b8:32:8c:a4:12:b1:e2:14:f8:38:7b:e1:26:0e:87:
ca:ce:4b:42:6a:f4:c0:4e:4f:61:11:48:cc:4c:10:4b:02:d4:
ec:1b:46:4f:09:d6:86:a6:7a:df:81:55:96:0c:08:62:bb:57:
fa:ac:54:95:6b:1f:cf:9f:f4:3f:36:9d:b2:95:cd:73:82:2e:
60:9f:4a:9e:46:bc:a1:6a:e6:ef:fb:03:2c:f0:7c:82:71:a6:
8b:62:f3:ab:c7:79:df:42:35:92:ee:06:30:c0:0e:9e:e0:f8:
5e:36:ab:b0:88:61:1e:3a:70:0d:91:17:4a:6e:4e:65:57:ed:
10:e0:8d:e9:45:90:20:bd:f4:a3:33:54:48:c4:1c:44:d3:63:
63:10:cc:34:d3:12:3a:bb:f5:57:2e:a5:52:de:03:83:44:fb:
65:5f:e1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:57:07 2025 by rpki-client