Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
File: WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft (raw, json)
Hash identifier: E6RzVbmBohuzoicb5yA42p5ol4fLOdNJDAtdTIm8KzI=
Subject key identifier: 28:AE:81:20:A3:B6:C2:A4:2A:23:EF:25:77:52:6B:9C:BA:75:6A:EE
Authority key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
Certificate issuer: /CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Certificate serial: 0199FEB534151DE76A8A03D467D132CE4232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
Manifest number: 09A7
Signing time: Sun 19 Oct 2025 23:01:52 +0000
Manifest this update: Sun 19 Oct 2025 23:01:52 +0000
Manifest next update: Mon 20 Oct 2025 23:01:52 +0000
Files and hashes: 1: WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl (hash: BxiHCnS/n68L9EB+KA5mRIeIpbNxAQBg19dGqZZGp/U=)
2: vdHTEb2gTWFnAUlb8EFFzZFOAyk.roa (hash: 7sUvaXCmkwC5CKTFltnkxSzQliSsm8MxQWVCiowpXtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:34:15:1d:e7:6a:8a:03:d4:67:d1:32:ce:42:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Validity
Not Before: Oct 19 23:01:52 2025 GMT
Not After : Oct 20 23:01:52 2025 GMT
Subject: CN=28ae8120a3b6c2a42a23ef2577526b9cba756aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:da:58:fd:f6:38:ba:f6:ae:a4:8b:bf:21:f4:
91:ed:fa:b0:8e:56:16:13:ca:1d:eb:ac:77:96:e8:
be:3f:b0:c4:f5:5f:a6:de:fd:c0:7d:cb:e3:0a:18:
c1:4d:e6:86:88:f5:f0:a9:0e:16:88:7d:6d:99:f3:
5e:62:54:af:00:c0:dd:f9:67:93:bc:5f:73:a4:72:
bf:6f:f3:44:83:08:23:35:f4:92:d7:ff:20:a6:fa:
f3:ab:db:62:db:82:25:57:35:9c:4a:a0:0c:88:73:
67:c2:9f:47:88:89:20:b7:81:6e:62:85:e4:44:99:
28:2c:97:22:1e:9a:72:28:46:00:b9:23:6c:85:8a:
ba:ff:13:de:2f:d1:aa:7e:91:e4:72:d5:54:7a:51:
dd:fb:da:6f:1c:55:f9:02:43:36:53:c1:1d:03:34:
b7:7d:b8:f7:bb:45:49:73:2e:84:10:df:37:5e:4d:
09:a0:48:f7:ee:66:2c:fe:8e:e7:33:44:31:ff:d2:
5c:f5:a5:d1:b9:6e:12:7b:cf:d5:cd:82:1e:11:18:
f9:9d:0d:7f:63:75:96:53:a6:52:1b:e9:d1:4d:8d:
ab:19:66:b4:84:85:86:c3:a4:a6:45:22:2e:7e:b8:
79:1a:ae:09:fd:1d:89:80:54:52:62:be:9d:e9:3f:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AE:81:20:A3:B6:C2:A4:2A:23:EF:25:77:52:6B:9C:BA:75:6A:EE
X509v3 Authority Key Identifier:
keyid:58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b5:0b:52:7b:0d:5c:dd:a0:4f:85:bf:d9:7d:e5:03:bb:f6:
d0:57:97:dd:66:25:55:90:41:92:0e:e9:1b:6c:28:8e:ec:e6:
12:51:d0:1e:c1:64:4a:a9:f5:da:22:65:6c:77:1e:57:96:b1:
03:62:40:dc:8b:c4:d3:bb:8c:dd:72:ad:ce:c4:bc:00:26:ef:
ec:c0:78:ac:ac:d7:18:fc:5d:26:db:4a:a5:2a:5b:0b:eb:30:
a5:9f:54:be:23:6d:01:50:d4:00:bc:d6:34:1b:3d:b0:fd:92:
2a:2a:fd:49:13:6e:59:ea:bf:74:ed:4a:27:bd:3b:b0:f2:63:
b0:95:5f:50:d9:f5:d7:ee:80:5c:9a:08:7d:2b:9e:5a:47:a1:
a8:21:38:31:e7:11:53:bc:81:55:a2:e0:76:fc:58:03:23:a8:
4b:f9:9d:bb:8f:05:7e:47:ad:77:b8:31:95:f9:b5:25:e2:86:
dc:2a:3c:8d:4d:3b:5f:55:35:07:54:e0:e5:ae:f3:3d:ca:a8:
09:a8:ad:58:d9:fb:df:0c:be:6c:88:2e:22:c8:5a:a7:a9:96:
03:e5:4f:1b:89:c7:02:73:a7:cc:fd:e5:b6:1e:a4:e3:4d:3a:
79:29:f6:e1:c2:33:e6:96:73:94:9b:54:c1:f2:0f:67:fb:70:
1f:c9:bd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:37:59 2025 by rpki-client