Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
File: WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft (raw, json)
Hash identifier: JCTBKaG1p4ZDyNimceTSMrdeJhjuGbgEjQal0mO+V+c=
Subject key identifier: A4:AD:9A:11:E8:C4:57:EA:4C:9C:C2:8E:04:8B:2A:4A:56:C3:2C:FC
Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
Certificate issuer: /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Certificate serial: 0199FC8F8429FB971F9DAD7403527D5DA5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
Manifest number: 0E3D
Signing time: Sun 19 Oct 2025 13:01:27 +0000
Manifest this update: Sun 19 Oct 2025 13:01:27 +0000
Manifest next update: Mon 20 Oct 2025 13:01:27 +0000
Files and hashes: 1: BnHPRpHVxUrrpd0IzvhYM9ZoVGA.roa (hash: k46oPjmA0dBoUS914bzbaVVF+WxzasmMO4gdexQM14I=)
2: WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl (hash: J71ZOKm12xVale5QnPTIUEpCZaMR5GWdYAq28deWFAc=)
3: pXH9YpU9YJCA_rF2kD4sAq3Gb8A.roa (hash: T2ULJjjfs09CAUBnhR9VtzEhjC6fHO+cQ94xa8HkXMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:84:29:fb:97:1f:9d:ad:74:03:52:7d:5d:a5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Validity
Not Before: Oct 19 13:01:27 2025 GMT
Not After : Oct 20 13:01:27 2025 GMT
Subject: CN=a4ad9a11e8c457ea4c9cc28e048b2a4a56c32cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:4a:f8:75:a8:52:b3:4e:46:5b:aa:61:b2:
c4:e8:5b:96:e3:40:4a:ad:51:4f:09:31:ee:33:3d:
65:d4:2a:46:20:d5:87:00:cb:9a:c7:aa:8b:98:47:
06:70:2e:f3:fa:2d:2b:59:da:9a:f7:38:35:84:9c:
ca:e3:b4:3e:de:bc:89:a0:bb:3c:71:ad:c4:f1:f4:
22:ab:5f:3a:a6:86:c4:a9:09:75:6f:a6:38:71:07:
f5:b5:ed:89:d7:e5:e0:e7:fa:7c:a4:d8:1d:b0:04:
80:b1:1a:16:1f:ca:fa:69:5d:c3:35:e3:ff:de:b0:
91:b9:bb:a1:22:6f:f5:8f:62:40:98:ea:c9:21:67:
e4:67:b0:8d:7c:5f:18:6d:c1:02:5d:85:95:ae:2c:
77:04:92:9c:ae:ad:dc:69:6e:78:29:14:6d:44:c3:
5e:aa:6e:98:0b:64:bd:d2:48:eb:86:14:3a:e7:2c:
9b:00:69:e2:4a:52:76:59:15:42:32:f4:bc:66:59:
d3:da:38:c1:33:63:0e:f6:b3:23:26:6a:46:02:29:
dd:3f:d1:e2:2e:94:5d:03:69:4f:7a:5b:96:0f:33:
af:25:12:bf:28:53:00:5b:19:6e:ad:06:df:5f:12:
ae:fc:83:79:2b:93:77:e5:72:d9:35:9d:d7:12:b5:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AD:9A:11:E8:C4:57:EA:4C:9C:C2:8E:04:8B:2A:4A:56:C3:2C:FC
X509v3 Authority Key Identifier:
keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7d:ea:e7:d2:6c:7d:d3:23:09:06:e2:f0:32:5c:b6:62:b6:
81:78:9e:9e:c5:83:7f:09:c6:0c:db:92:fe:fe:45:7c:57:64:
fb:8c:af:c5:b3:43:11:56:d5:27:dc:c9:50:ef:93:3a:79:b9:
fa:cb:63:f2:78:05:e7:e5:d7:63:e6:1f:05:3a:8c:cb:4e:d7:
10:b4:62:5b:bd:2d:10:fa:6e:04:ca:b4:84:ff:93:f1:f5:20:
e7:e1:dd:14:a0:34:f9:14:87:a9:63:6e:41:ef:5b:04:a8:d8:
ba:07:1f:7f:db:80:bc:10:db:4a:0b:c0:07:ff:36:7c:9a:fc:
3f:d1:b5:4f:d4:ba:65:9a:e4:0e:0d:2f:bf:ed:2a:27:1f:23:
79:23:0e:9d:2a:00:4e:de:d0:52:e9:23:e7:54:80:96:9e:24:
1c:cf:05:c1:f0:76:76:ef:f4:f8:33:8e:eb:83:eb:92:77:e4:
70:1e:b7:da:a0:7a:f6:c9:b5:37:a9:41:f3:53:13:91:ce:d4:
df:23:e1:64:6d:06:44:a7:18:f0:bf:d4:5f:c0:d6:9a:9d:be:
94:c8:f8:2b:a9:f4:af:89:ef:3a:99:b8:55:6f:73:b3:aa:e3:
e7:9f:f7:18:c9:04:47:45:4e:b9:52:35:c1:fd:ca:d1:b3:5d:
d9:a6:d6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:06 2025 by rpki-client