Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft
File: WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft (raw, json)
Hash identifier: 5gYV8PF4SSMQWbRcfk2oMBYMUMvRThtxK3PQoiZ4vk4=
Subject key identifier: E2:F8:7C:BA:3F:96:6B:D0:7C:72:C0:DD:F9:70:46:51:BD:2E:BC:FA
Authority key identifier: 59:0B:BE:AB:48:84:2A:41:AF:AC:49:21:D1:35:78:38:B6:FE:6C:87
Certificate issuer: /CN=590bbeab48842a41afac4921d1357838b6fe6c87
Certificate serial: 019A71B7815D37D8930F15BE561C6A343FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft
Manifest number: 14
Signing time: Tue 11 Nov 2025 07:00:42 +0000
Manifest this update: Tue 11 Nov 2025 07:00:42 +0000
Manifest next update: Wed 12 Nov 2025 07:00:42 +0000
Files and hashes: 1: TFbaF5iKEXoV94om-cXBI8K88Gw.roa (hash: Rapi4XUSpgRm7jm1pFAQz6RjmBJRmhTABSFDVzeD42Y=)
2: WQu-q0iEKkGvrEkh0TV4OLb-bIc.crl (hash: A3VObSs6WhYeUb3UAljJ446hdBojG4xnG56Xq/RFppM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:81:5d:37:d8:93:0f:15:be:56:1c:6a:34:3f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590bbeab48842a41afac4921d1357838b6fe6c87
Validity
Not Before: Nov 11 07:00:42 2025 GMT
Not After : Nov 12 07:00:42 2025 GMT
Subject: CN=e2f87cba3f966bd07c72c0ddf9704651bd2ebcfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:bb:08:60:d0:06:24:de:c8:6a:bd:44:1a:
11:8d:7f:2c:18:56:28:15:71:ad:db:2c:99:84:eb:
95:8b:8b:8e:35:f8:05:ac:27:cb:c6:c1:80:81:9e:
47:5a:1f:dd:d0:dd:53:b4:51:7f:76:b3:f3:89:12:
54:b8:91:55:b7:9d:47:57:e2:92:07:c4:28:d6:12:
12:b8:0c:96:57:78:bd:97:62:30:aa:da:5c:10:8f:
79:04:fb:31:42:4f:90:7c:6b:ce:9f:87:8e:e0:dd:
ea:7d:a4:61:df:c7:2e:9b:02:1b:19:8d:36:7e:c4:
ce:fd:a8:ba:1c:9a:25:d7:ff:4d:ee:b5:7d:74:d3:
a5:98:e0:7e:4a:6e:ee:bf:b2:b8:0a:72:a0:3e:1e:
76:3e:1c:ea:4e:8a:78:41:b5:68:bc:3d:ab:5e:b6:
cd:6a:84:2f:75:c4:6e:e5:76:09:ec:ef:52:b5:f1:
e9:bc:7c:86:42:c9:f4:d1:87:78:bb:e4:05:2e:58:
e2:0c:5f:66:e4:ba:7a:00:20:7b:1e:42:f3:9d:4f:
a0:03:6f:18:9a:75:26:d9:ee:10:92:f6:c4:3a:4c:
62:1a:0d:b1:5c:b8:ba:b4:d1:da:41:0d:30:24:bd:
c5:ff:60:f9:43:a2:21:1a:07:63:67:1a:2e:07:92:
ca:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F8:7C:BA:3F:96:6B:D0:7C:72:C0:DD:F9:70:46:51:BD:2E:BC:FA
X509v3 Authority Key Identifier:
keyid:59:0B:BE:AB:48:84:2A:41:AF:AC:49:21:D1:35:78:38:B6:FE:6C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:62:34:7e:f8:82:fa:0e:0f:7c:5c:3c:78:f4:01:c7:10:10:
b7:f0:f6:03:3a:6f:61:41:73:a4:e3:07:65:64:91:1a:5b:14:
1e:fe:42:c2:ab:4b:b4:ec:29:c1:aa:73:59:75:14:b2:df:fa:
7a:12:f2:0e:8d:ce:2f:97:a3:fc:db:5e:0e:a9:36:e6:53:7c:
02:f6:d0:0c:e0:15:9f:92:f3:e3:d7:93:99:53:61:5f:78:a5:
6b:fa:1b:f7:82:62:b3:f8:cd:18:dd:3f:e8:cf:c9:c1:18:71:
74:e3:f4:81:e7:63:a2:d6:be:7d:19:0a:9a:9e:9a:2b:4b:3e:
8d:07:4d:8e:a5:c5:8f:de:1b:df:84:f5:6f:74:a5:25:f1:43:
66:2e:88:db:9f:f7:cc:93:28:a5:9e:ee:dd:db:2d:e3:82:08:
92:eb:61:ec:7e:66:81:eb:09:b6:70:77:f0:06:68:95:cc:bf:
b5:1d:c9:72:81:48:5c:9d:01:a5:59:80:08:b6:63:6b:0d:7a:
79:ff:2c:63:9a:f3:30:30:a9:2e:dc:61:ae:bf:32:26:a3:19:
07:0c:79:38:c9:b1:ce:7f:95:8b:3f:79:87:75:2b:ed:67:ee:
75:bb:02:5a:fa:7e:a6:7b:e8:4c:da:9f:09:3e:32:0c:8c:a8:
3c:c2:2b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:33 2025 by rpki-client