Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
File: wqkR1pxPZFehCd53scdSSdxTDhc.mft (raw, json)
Hash identifier: A2tt2XCzz9R2iKIKcJddaAsDxsO2nPAlwCk6rYIMJmM=
Subject key identifier: A5:69:A1:0F:81:50:B8:8E:E1:B5:8B:90:F2:7B:D6:7B:05:72:C0:05
Authority key identifier: C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
Certificate issuer: /CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Certificate serial: 019954F9718455CC8C423382453B61C8BFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
Manifest number: 08FE
Signing time: Wed 17 Sep 2025 00:00:57 +0000
Manifest this update: Wed 17 Sep 2025 00:00:57 +0000
Manifest next update: Thu 18 Sep 2025 00:00:57 +0000
Files and hashes: 1: JlMTszQ0SriAWERqlr9FMnp6WvU.roa (hash: M6WDGwhPPqHvkOqSI6cVPu36gkAbrulfoDxAqaGV7po=)
2: wqkR1pxPZFehCd53scdSSdxTDhc.crl (hash: mFsqf5P5k/+LlvUOs3RwWuPXIIna+vsJemZU1ABcwcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:54:f9:71:84:55:cc:8c:42:33:82:45:3b:61:c8:bf:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Validity
Not Before: Sep 17 00:00:57 2025 GMT
Not After : Sep 18 00:00:57 2025 GMT
Subject: CN=a569a10f8150b88ee1b58b90f27bd67b0572c005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:ff:f7:d3:9f:10:97:1e:3d:63:5c:eb:29:
23:fe:49:80:6f:74:4a:be:6e:2f:ee:03:92:75:a1:
cb:7b:53:a3:d2:f7:54:7a:49:df:45:70:6c:1e:77:
13:03:6e:6d:d6:ec:6d:b9:37:9d:37:1e:3b:e1:ed:
06:5f:20:bc:40:0a:3b:17:ad:0d:51:2c:90:58:19:
e6:a7:97:ab:c4:19:21:fa:e0:70:9d:52:dd:63:25:
41:a6:be:a9:c2:c9:04:d8:b4:a5:a7:b3:1c:d6:5b:
4c:53:c3:0b:a6:f2:01:eb:3c:74:fa:0d:93:d4:7a:
32:6f:bc:46:7c:ec:1d:40:43:ca:a9:01:82:fe:a0:
95:ed:a9:6b:49:93:16:80:1e:c9:32:4d:a2:bd:ad:
aa:f0:24:e1:24:5f:71:d9:87:65:30:75:02:a7:67:
ee:33:2c:bf:85:bc:c3:13:8b:d0:c5:ba:bd:4c:fc:
17:11:0e:81:f0:ea:37:40:dc:94:3f:86:d5:6d:bf:
6c:d0:ee:79:30:f3:87:59:a4:2e:cc:62:87:1d:0a:
7f:0a:13:b3:c5:84:69:14:9a:f8:93:93:7c:b5:ba:
dc:12:21:1a:d1:14:53:04:d2:c7:f1:ae:70:80:b5:
d0:84:07:3c:38:2b:c1:76:fe:49:93:16:dd:ce:69:
11:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:69:A1:0F:81:50:B8:8E:E1:B5:8B:90:F2:7B:D6:7B:05:72:C0:05
X509v3 Authority Key Identifier:
keyid:C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f7:d5:18:ed:4f:73:63:3f:4b:eb:aa:2c:87:70:71:3a:d9:
06:d9:a0:65:da:e8:4d:59:a1:ea:55:eb:99:5c:13:8a:3e:6d:
9b:67:ca:94:d6:db:d8:27:54:4b:dc:bb:4d:76:45:64:fc:db:
0b:94:0c:ed:6f:c8:67:46:c2:ff:a8:9f:49:f2:9e:b3:34:e5:
5b:8f:6b:79:e7:aa:47:65:8d:50:2f:bb:0e:8a:96:65:d2:8c:
9b:a2:9e:96:87:6d:73:db:5f:9a:d7:67:e6:d8:28:d2:3d:54:
e9:bc:90:07:69:e7:14:aa:4a:19:1c:0c:c4:76:84:5e:0d:c2:
46:55:66:c3:e3:b3:18:e7:ec:a3:e7:5c:ef:2e:dc:78:ff:88:
00:11:c4:49:b0:cf:5e:2a:34:33:d9:ae:41:10:61:b5:77:eb:
3c:92:9b:ca:d7:20:37:f4:e4:5e:88:20:5a:8e:9f:73:2b:51:
02:e7:85:f9:1f:cf:70:a8:88:af:93:f4:c7:8f:68:90:05:5d:
1a:e8:5c:d9:56:b0:fd:72:62:48:06:7c:61:46:3e:c5:98:89:
9b:99:5e:e6:1e:e8:fd:50:5a:40:85:90:0a:72:eb:8e:ed:ff:
39:d4:ce:e5:08:a4:76:f9:f0:88:fe:84:e2:68:fa:cc:d8:66:
1f:09:b7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 07:05:56 2025 by rpki-client