Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
File: waskfGNq04m_n4xQdMgiAjDo7cw.mft (raw, json)
Hash identifier: kzaHk3hiSVmDSRdKT0pWcV0yo4lwkoqaHBsCJsP4jtA=
Subject key identifier: 65:CD:4D:9C:99:6F:FA:8E:CB:04:83:06:80:63:0A:4E:88:15:2E:01
Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
Certificate issuer: /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Certificate serial: 019A7293731C8767C8A8640BF529659733DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 11:00:57 +0000
Manifest this update: Tue 11 Nov 2025 11:00:57 +0000
Manifest next update: Wed 12 Nov 2025 11:00:57 +0000
Files and hashes: 1: YhlJJJSXn0316GXMCt3evKM4RRA.roa (hash: GoRGuSI9MFxsC15qVirr/MrX3xBRfDPgJUjig6NxAVs=)
2: l9EgD7Cv7e532Hlt9LLUu3z8_dw.roa (hash: 4Xh0ogOpmmD0jHDBdjnr8Hc05bJosT/Z9VheuQZJvIw=)
3: ux1IC1yxeTUgRbCsz7aKGJRUxDA.roa (hash: Cbk3gKO+GYUzaeJI/vrLpgkHk9pkTZFjphWYEpQbc/Y=)
4: waskfGNq04m_n4xQdMgiAjDo7cw.crl (hash: P5/ZELwr2ApAhgizdKbS8TD5XAu3WaLQ/fyuyLoDSsY=)
5: xPSDuA4Q8aGWwP6K3N_nyK74gDo.roa (hash: UU3ufwB67xN9A6E6STJlvefFGKYdsphPt8rIQ8rp99U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:73:1c:87:67:c8:a8:64:0b:f5:29:65:97:33:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Validity
Not Before: Nov 11 11:00:57 2025 GMT
Not After : Nov 12 11:00:57 2025 GMT
Subject: CN=65cd4d9c996ffa8ecb04830680630a4e88152e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:df:49:65:6f:3a:50:88:3d:23:11:77:a6:
a3:3f:c7:47:94:03:a3:b0:d6:33:0c:41:c8:0c:97:
e1:31:64:8e:f0:3e:8b:93:8b:d1:1b:88:29:ca:96:
bc:7d:fc:c4:b2:49:d9:78:65:d3:6e:33:d0:a2:df:
73:a4:f7:a4:14:02:4a:2b:bd:d9:ba:ef:62:2b:94:
9a:c5:66:a7:8f:ec:b8:2d:17:04:5e:72:a7:9e:0e:
5d:80:c7:0b:18:c1:93:28:84:68:39:6b:12:2b:48:
ea:b8:12:57:de:15:a7:c1:13:7e:1f:b4:34:3f:3e:
6d:91:32:48:b6:64:81:69:13:7a:95:82:de:bf:cf:
52:f7:50:65:5c:6b:07:45:ad:25:76:03:37:e6:9e:
07:07:a4:54:78:d0:3b:95:f8:3c:36:a2:91:e3:bb:
e1:34:d5:bc:ab:44:6d:70:d1:7e:ca:ef:25:77:83:
e3:6f:43:4c:d9:6e:6e:45:6e:68:01:e4:9f:b5:a4:
2f:87:be:e5:49:40:e0:f9:42:e7:70:bf:bf:a2:d1:
38:dc:e9:f7:c5:67:6e:94:c8:67:6e:6c:10:0c:a0:
1e:3b:e1:57:62:a0:00:8f:0f:dd:28:7c:ca:34:53:
b3:6e:b7:7a:67:40:0e:ef:ae:00:7f:1a:f0:97:a2:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CD:4D:9C:99:6F:FA:8E:CB:04:83:06:80:63:0A:4E:88:15:2E:01
X509v3 Authority Key Identifier:
keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:00:63:5b:2f:e4:9d:55:b6:5d:4b:f2:20:68:a5:46:1f:e0:
c5:31:6c:9b:81:f2:17:29:78:f3:83:c4:56:7e:91:a5:d0:70:
37:38:9d:0b:eb:db:8a:2e:ae:fa:d0:de:0e:bf:0d:1d:4b:c0:
c6:7b:bc:3e:87:42:e6:ce:b0:4b:a5:a7:51:4d:28:61:94:60:
8a:6d:54:e6:70:bc:aa:c3:5e:ef:d8:71:ba:94:2c:7e:14:42:
8a:a5:53:f4:a5:f1:1a:b6:0d:76:a4:1e:8b:a6:82:7e:be:f2:
03:ff:00:b0:6c:47:b6:f2:0f:c0:3b:f7:58:e1:fd:ad:7d:74:
c9:85:81:9f:c1:ec:85:f5:07:1b:e7:34:9f:19:89:3a:d8:d6:
2c:81:72:45:df:cb:94:dd:70:94:ca:31:6e:23:75:af:12:e6:
15:dc:91:d4:52:db:1f:90:ff:54:7a:df:df:e2:ee:67:d4:73:
86:44:0c:fa:a6:04:f3:21:28:17:42:5c:8a:87:06:71:67:26:
ab:6f:10:0a:52:e8:56:ba:a4:b0:cb:f3:dc:d8:11:39:95:19:
9c:5b:dd:bd:59:55:33:e4:e7:53:43:ce:f6:9f:2e:2a:81:56:
1a:20:11:4b:81:20:1b:4a:dd:4b:23:5d:ba:69:cd:62:4d:4e:
e4:60:15:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:57:51 2025 by rpki-client