Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
File: W-qBqpshl9kSe0QlJRAP-qNuDVI.mft (raw, json)
Hash identifier: eoCyonAUKUTul0H9JE6jwtJzYAqOddCY2FPgFrtU5xU=
Subject key identifier: 84:77:D8:0F:C5:91:4C:13:B0:95:A8:CB:D9:92:51:C5:5A:71:57:0C
Authority key identifier: 5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
Certificate issuer: /CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Certificate serial: 019A4C2A80F7998A0B6B9288551EB5B3E6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 00:00:45 +0000
Manifest this update: Tue 04 Nov 2025 00:00:45 +0000
Manifest next update: Wed 05 Nov 2025 00:00:45 +0000
Files and hashes: 1: RErNlaOpDzrD6wSfbbH1rz1M530.roa (hash: wgBHw0Ti6lWp1Z64AKciY1+PcChXXuuN8WEU42REeQ4=)
2: W-qBqpshl9kSe0QlJRAP-qNuDVI.crl (hash: crd7v7NSyFBzBDiirwc4kHyWJc3ReMErzo7n+vCrA2I=)
3: iuYZctM9ho40y9O9NGu8oiwydyQ.roa (hash: iVbT4XgjGA1oWctdpXO1acTvsUwxsInkD3aqlUFGvoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:2a:80:f7:99:8a:0b:6b:92:88:55:1e:b5:b3:e6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Validity
Not Before: Nov 4 00:00:45 2025 GMT
Not After : Nov 5 00:00:45 2025 GMT
Subject: CN=8477d80fc5914c13b095a8cbd99251c55a71570c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:67:e2:63:fa:be:a0:44:8d:eb:90:9a:00:75:
9c:4f:b2:7e:94:bf:f7:d9:b5:84:9f:62:a9:9f:fd:
78:a7:e4:7d:65:09:3f:2c:66:35:02:19:c3:9a:4b:
1b:fa:7f:44:06:0e:79:d5:d7:34:35:6c:b0:a7:66:
25:1a:b0:29:c6:8a:a4:43:fb:13:09:d8:c6:65:74:
00:1f:c6:ec:9d:da:06:d4:fd:e4:da:76:39:1a:94:
8c:c1:d5:91:2e:89:22:fb:d8:58:2a:9a:03:d5:2e:
ca:9c:e1:c6:27:e3:a1:ea:e0:47:e1:9a:b9:1a:86:
d6:d6:f6:55:c8:ab:00:69:b3:d1:b3:80:e0:94:69:
f4:4c:cd:52:ac:33:9e:62:30:76:70:27:f0:01:4e:
90:00:78:0f:a7:2f:88:59:31:4c:9f:1f:b0:c7:e0:
52:c1:72:a7:51:f9:04:90:cc:eb:af:6f:a4:6c:ee:
85:2f:13:e2:43:a7:c1:19:61:e4:8c:4f:ba:72:95:
22:88:38:bc:b8:c7:4b:c9:eb:b9:96:d6:8d:4b:b8:
c3:84:9f:1a:cc:2e:6e:4b:52:f5:43:5d:13:6b:cf:
f1:b5:a7:2d:9c:31:17:1b:28:e3:d4:ca:15:06:ba:
28:f0:11:57:8e:98:04:be:e1:53:bb:6e:e2:13:e9:
ef:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:77:D8:0F:C5:91:4C:13:B0:95:A8:CB:D9:92:51:C5:5A:71:57:0C
X509v3 Authority Key Identifier:
keyid:5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ec:b2:c3:cb:49:80:88:4d:7a:c1:fe:53:35:d2:3b:00:c7:
8c:67:a6:ac:34:8f:e6:69:a6:84:23:1d:48:a2:33:26:bd:6e:
27:6a:4b:24:e8:58:a7:b0:26:20:2e:eb:24:44:db:1f:bd:86:
5e:5e:5e:68:39:84:18:02:42:af:e6:51:25:c4:d9:1d:fe:a3:
6b:50:25:45:32:7d:54:93:59:84:ac:44:37:95:e7:17:f1:c6:
a1:a1:24:aa:67:98:df:d2:a7:79:ae:17:9d:e4:ed:33:ed:13:
ad:d6:20:25:0e:e6:93:85:b6:f0:bf:19:a2:06:89:6c:55:f0:
23:4f:c3:dc:0b:e0:9d:40:9d:4c:a7:75:b0:41:0e:0a:e4:2e:
01:4c:af:22:a8:d2:4f:7a:98:c5:32:98:4c:86:65:b1:fa:1d:
9b:fc:e7:6b:b1:ee:4b:95:e5:74:6d:6f:3e:ff:05:8a:bf:37:
ae:c6:7b:24:af:42:e2:b2:f5:ea:f2:ef:e3:48:9a:2d:cb:a8:
d2:bd:7e:c0:29:04:e8:a5:e9:18:2a:64:0d:5f:ca:0f:ae:8b:
26:03:6d:16:2a:38:54:0e:4a:7a:c1:82:56:70:74:92:a2:5c:
03:46:15:61:d2:0c:66:c2:1d:ef:cd:77:b2:af:95:a9:f1:ea:
61:8b:0a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:46:58 2025 by rpki-client