Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
File: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft (raw, json)
Hash identifier: i7+EZJ+msI7iwQKBycFDnUxS75A8eRSwXdY2flNBiEY=
Subject key identifier: FC:6B:B2:C8:9B:11:47:BF:09:A1:9C:2A:BB:B3:EB:FE:E6:B9:BD:9C
Authority key identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
Certificate issuer: /CN=5aae19678aa37525512229a94e7890147183273c
Certificate serial: 019A7293ECEC86962091EAEA2C459E4C1450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
Manifest number: 16F4
Signing time: Tue 11 Nov 2025 11:01:28 +0000
Manifest this update: Tue 11 Nov 2025 11:01:28 +0000
Manifest next update: Wed 12 Nov 2025 11:01:28 +0000
Files and hashes: 1: 0ehbELwlxIROAJUXnHI7q0hHZvU.roa (hash: I3OhyXjmUaPoDinsu8stBnr83W6cuJYkPeqcRDRwksw=)
2: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl (hash: nqSABZRYCJhDyGbYU/2MiH+YW60i2Z3RgcEp+oh6dEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ec:ec:86:96:20:91:ea:ea:2c:45:9e:4c:14:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aae19678aa37525512229a94e7890147183273c
Validity
Not Before: Nov 11 11:01:28 2025 GMT
Not After : Nov 12 11:01:28 2025 GMT
Subject: CN=fc6bb2c89b1147bf09a19c2abbb3ebfee6b9bd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:e8:66:64:2a:62:6d:8b:88:d2:57:87:fa:
e3:72:f9:27:f1:2f:cc:36:3b:23:1f:5b:7a:e5:c2:
c7:2e:7d:30:50:ee:f3:f0:4a:92:be:1c:c6:70:63:
6d:0e:8c:75:74:76:fc:32:0b:8a:ec:71:94:0f:e2:
11:09:75:3b:20:5c:19:1d:36:9a:31:7e:1d:e6:a3:
1e:49:56:54:39:4e:e4:6e:a6:c5:34:81:83:44:81:
c4:03:89:ab:a1:58:92:2e:51:15:aa:3e:b7:ba:85:
87:56:60:d6:c9:a9:86:9a:c4:19:ab:4e:b4:db:0b:
7f:74:11:de:58:4b:9f:36:f2:6c:84:73:ca:66:9a:
8c:1c:c8:f4:9f:63:c6:cb:a3:9a:93:8d:95:f9:6c:
76:e8:8e:28:a0:5e:d1:41:6c:36:96:85:59:f9:a3:
f4:80:3c:d8:04:35:12:f9:f8:c2:de:89:13:81:44:
ab:91:85:3f:81:ce:1e:13:d2:b9:6f:b0:77:c0:2a:
17:be:11:94:71:b0:46:31:e4:92:b3:15:94:4f:29:
1b:19:7d:6f:39:0f:e5:00:5a:9f:17:c3:c6:48:ad:
0b:c7:d9:3b:92:ad:38:73:83:d2:00:1b:da:a0:fe:
db:79:e2:5e:84:4b:f8:63:bf:5f:35:ec:e3:d6:d7:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6B:B2:C8:9B:11:47:BF:09:A1:9C:2A:BB:B3:EB:FE:E6:B9:BD:9C
X509v3 Authority Key Identifier:
keyid:5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:63:19:19:10:fa:80:52:19:dc:bc:5e:e6:c5:a1:65:ac:71:
e6:30:0b:68:ff:5f:ee:7c:d1:f7:39:9c:7a:17:34:4c:d1:4a:
ce:b6:6f:34:91:55:73:61:d0:95:32:d8:96:bc:29:d6:93:b4:
e2:9a:8a:67:31:9d:8f:1b:6d:67:b9:61:40:aa:ac:be:1e:12:
41:cf:6f:9e:89:51:05:15:33:ed:78:7c:15:bb:29:b0:e1:91:
fb:f5:8a:2a:22:9f:46:6b:42:83:30:63:55:fd:6e:f3:89:0e:
b5:d9:af:b8:02:03:e2:6f:74:86:59:ce:f6:d2:aa:55:b8:02:
70:ee:9d:7e:e0:56:98:d6:33:96:a9:27:36:2c:ce:ce:d9:c4:
ea:66:4d:eb:b2:4a:39:62:35:17:f4:96:5f:5b:13:e6:c4:9e:
9c:48:7c:7b:30:04:de:80:2f:8c:1b:5b:33:64:2c:2f:ca:7c:
09:49:6c:e0:8a:17:10:99:18:10:d7:e9:18:00:cf:7e:2c:12:
71:14:5e:9e:3d:1b:4f:1e:44:8e:2b:49:ae:74:09:e4:cf:b9:
e1:59:32:d0:53:69:54:6c:45:a5:2c:8e:88:93:6d:f7:ea:15:
8b:56:b4:d1:c3:5c:00:51:0b:db:d5:16:d6:7b:d1:0c:f7:5f:
c3:a3:7b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:08 2025 by rpki-client