Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
File: 1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft (raw, json)
Hash identifier: v2T1eUBOLHbKZvbUhuGENfjmnoNk76MvuJecNETFLAk=
Subject key identifier: 0D:27:88:24:35:E6:B9:1D:C2:54:34:79:F9:E1:F7:65:47:AA:7B:31
Authority key identifier: F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
Certificate issuer: /CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Certificate serial: 019A71B84DCBFD3D629C49F6A62483ECFA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
Manifest number: 16F3
Signing time: Tue 11 Nov 2025 07:01:35 +0000
Manifest this update: Tue 11 Nov 2025 07:01:35 +0000
Manifest next update: Wed 12 Nov 2025 07:01:35 +0000
Files and hashes: 1: 1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl (hash: nNarcx60PBua68ad1rL9dQxcUQ3ltWp5brQMPzQMGJQ=)
2: RE9prd7FLL4SwOjjJYHPgR-KjRA.roa (hash: Sw7bEXCnPMRdQGTTvTVklNLKC4QRIicMav6wH2FfRDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4d:cb:fd:3d:62:9c:49:f6:a6:24:83:ec:fa:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Validity
Not Before: Nov 11 07:01:35 2025 GMT
Not After : Nov 12 07:01:35 2025 GMT
Subject: CN=0d27882435e6b91dc2543479f9e1f76547aa7b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:0a:1f:0b:95:7c:d6:8f:71:b2:4c:09:08:
cf:a1:9a:59:ea:9c:0c:53:5b:23:f3:98:18:01:78:
6e:0f:9c:73:9a:bf:1e:86:ed:8b:e3:07:2a:52:d3:
67:ba:c8:27:43:b2:13:e7:bc:6d:47:0b:9e:10:a0:
32:bb:9d:fc:71:38:dd:2d:e0:f7:7e:27:be:b9:2a:
5f:09:4c:cd:62:d4:ca:ea:22:56:30:e3:04:28:c0:
08:15:2e:16:af:b6:06:69:34:13:ec:63:92:43:1b:
d2:fa:4c:4e:93:c3:a8:3f:0b:95:ab:b5:f2:e7:78:
ce:38:80:2b:7a:da:dc:b1:0f:e2:1b:25:14:ad:03:
20:89:5c:8d:b3:65:10:ca:8c:b2:d1:1a:cf:13:56:
e8:74:f5:5f:5e:f5:d0:75:9c:4f:cc:c1:36:14:e3:
81:28:99:14:51:bd:7b:22:ce:ef:48:e2:85:0d:af:
e9:4d:2f:d1:40:77:e1:d4:00:a3:bc:4a:5d:8e:bd:
1f:11:8d:74:78:08:ff:73:ea:c1:14:d8:a9:dc:ee:
94:dd:66:c3:bc:82:9e:d7:1e:cc:75:a4:bf:1b:7c:
6d:68:f2:22:82:ac:8a:e3:fc:af:66:59:c3:a4:78:
45:9d:5f:50:7c:9f:0b:70:7f:48:ad:05:ca:d1:6a:
55:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:27:88:24:35:E6:B9:1D:C2:54:34:79:F9:E1:F7:65:47:AA:7B:31
X509v3 Authority Key Identifier:
keyid:F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:40:3e:19:66:de:23:a0:6f:9a:f8:c7:09:5e:3d:70:f1:61:
41:22:4f:6c:59:c2:d5:30:cb:be:d8:fe:c4:c8:ae:4a:d4:b7:
06:92:6f:b4:05:a3:d0:9f:db:6c:ac:8e:60:e1:ea:2a:ee:2e:
c8:73:ff:0c:57:b3:3c:5b:0a:e5:c6:e8:3a:f3:09:9c:f2:a2:
e5:08:b3:59:77:a4:49:af:0c:9b:f2:2f:9e:7a:12:17:11:74:
f6:07:fc:51:19:dd:d1:30:35:7a:59:c1:6e:a4:a0:ea:e8:6f:
94:3a:e7:ad:4c:ec:46:bf:40:11:cb:83:2a:80:35:f7:48:cd:
ff:eb:f6:3e:cb:ef:f7:a5:7d:90:c1:7b:42:68:07:09:50:fc:
2b:bc:e1:2f:09:73:61:92:54:03:01:d9:b9:94:2d:f3:b2:76:
a3:95:22:be:0d:6b:29:32:12:41:5a:9d:f0:fa:43:95:6a:32:
0a:e4:0d:86:67:33:84:57:49:c4:a6:55:e5:4b:90:1b:4e:ea:
b6:50:6c:df:5e:3c:e6:39:32:a2:37:68:7e:74:ae:a3:d7:b3:
47:50:d6:ba:44:a8:ee:e9:bd:72:5d:73:50:8d:eb:87:06:ee:
3e:06:0a:f3:e4:f7:f1:cc:29:1a:9b:e7:06:20:70:71:c1:b3:
66:02:c3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:53 2025 by rpki-client