Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
File: we5gO3itcrp4VWgsorgGrA5-mP0.mft (raw, json)
Hash identifier: al28mwV8bFe1e1M/DQwWK5gy2UY4+MXjXVnF+ZHbkEQ=
Subject key identifier: 77:D4:E8:E1:A1:6B:AC:4A:12:39:96:90:0B:F8:56:6F:55:5C:75:88
Authority key identifier: C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
Certificate issuer: /CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Certificate serial: 019A725CCB234E7A7ACCD5880519C2C08317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:01:15 +0000
Manifest this update: Tue 11 Nov 2025 10:01:15 +0000
Manifest next update: Wed 12 Nov 2025 10:01:15 +0000
Files and hashes: 1: 8P5ffqPLJKYYNJnQChMlI7ALdn8.roa (hash: HRZiFpkQQ+Nr6MCSY7lvsFCZFVTwCo1gLy31/BQbop0=)
2: we5gO3itcrp4VWgsorgGrA5-mP0.crl (hash: 1fSeDE4rSGd+gSZIU3KFVNveaNIgLcUVp4saK4WDiag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:cb:23:4e:7a:7a:cc:d5:88:05:19:c2:c0:83:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Validity
Not Before: Nov 11 10:01:15 2025 GMT
Not After : Nov 12 10:01:15 2025 GMT
Subject: CN=77d4e8e1a16bac4a123996900bf8566f555c7588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:19:24:dc:56:e8:ee:f8:28:b5:30:6a:a9:
c7:20:eb:35:e6:b1:a0:c9:2e:99:87:dc:b2:33:95:
cd:2c:e8:b5:a1:df:f7:80:66:67:a3:73:0b:de:59:
0a:0a:9a:0f:4c:b6:1e:98:cb:26:dd:41:a5:84:aa:
10:7f:69:c5:c5:d7:b5:77:9d:93:c4:b8:2e:13:d0:
b5:58:e8:e3:88:91:1f:8c:88:ee:0a:84:2d:e5:bc:
68:bb:a1:b5:20:8d:0d:02:bc:e1:97:fb:b1:e9:6d:
d4:07:58:e8:fe:53:42:aa:8d:37:3e:37:31:57:ba:
13:2f:2b:8c:5c:45:8b:a1:7e:c9:c7:54:b7:dd:ba:
70:c8:7e:7a:0f:11:01:a0:fc:7d:71:26:60:3d:60:
6f:7f:c7:15:24:da:50:1e:43:4b:52:4d:d5:f5:df:
d0:b4:28:2a:a5:05:3a:51:41:e4:a3:0d:a0:60:56:
6b:f7:5d:fd:79:15:d0:c4:e2:94:12:b5:e6:e6:24:
04:6c:45:12:2e:1c:27:3b:a9:05:c3:01:7c:46:be:
1f:bc:ab:7a:eb:2e:40:a0:69:3f:85:8d:e1:b0:e6:
f3:d5:0d:12:61:bc:2c:b5:f6:53:ae:26:26:28:61:
79:9a:7b:3b:ff:62:86:4a:ac:4d:ab:db:1b:f5:df:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D4:E8:E1:A1:6B:AC:4A:12:39:96:90:0B:F8:56:6F:55:5C:75:88
X509v3 Authority Key Identifier:
keyid:C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e8:ae:c1:75:1f:04:e1:26:2b:80:54:ca:c0:71:55:9d:b3:
82:30:97:0a:30:ac:34:63:19:b8:ea:b2:bf:8c:49:f8:9d:d8:
07:d0:90:67:f1:0b:64:d4:91:26:08:5a:bf:0d:7a:bf:5c:f9:
b0:0b:f9:6d:d6:16:5d:a8:bd:fe:71:f2:c8:e7:75:24:ed:d2:
c3:8e:de:19:d6:d8:0f:22:b2:d8:d1:a1:56:bd:2a:5d:3f:58:
2b:28:98:08:f4:18:1c:cd:5d:d1:48:3a:d1:a0:d5:41:9e:b6:
2d:f1:ab:fe:6f:26:80:bb:05:d9:9b:f8:e0:9d:af:56:e5:23:
f4:ab:8e:12:ed:17:8f:ad:e9:04:85:d7:bc:b5:ae:3f:1a:ad:
bf:1e:3c:d5:f7:56:7b:14:aa:48:59:00:57:00:dd:c5:e8:73:
ed:96:a1:01:d2:cb:f4:1f:f7:fe:9d:97:76:8b:4b:48:04:a6:
48:e4:f3:5b:a1:29:37:93:b3:9b:c9:45:5e:86:86:a7:d1:05:
3c:72:87:93:87:ca:a5:3e:e2:ff:18:5e:32:c7:3c:16:26:4b:
4b:26:6f:39:87:b7:3b:64:d6:58:bc:49:40:68:b1:96:a9:15:
fa:a0:64:ac:f9:11:54:21:e5:3e:88:6f:a9:aa:da:31:ca:c9:
13:89:fe:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:22 2025 by rpki-client