Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: 1r3znBdStKR6KXZ5coo+F9fDwlGfrgjUDyDwt6z39B8=
Subject key identifier: FD:EF:67:A9:67:AE:50:5B:3A:BD:BD:2B:62:2A:3A:09:69:61:26:C7
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 019A32A147218B0941DABB6DD0E7FA03D42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 04D0
Signing time: Thu 30 Oct 2025 01:00:21 +0000
Manifest this update: Thu 30 Oct 2025 01:00:21 +0000
Manifest next update: Fri 31 Oct 2025 01:00:21 +0000
Files and hashes: 1: 84jYv05HnlXjbNLOmoRHkF8n8LQ.roa (hash: /X9ewNFlsp/9ZFMAjrGm5l3SwfH8c42hlaaVDkUgEww=)
2: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: c+bKvY+pAOFtIFvXq4vTk2Z7N0s6132SOFT+WYItFic=)
3: y8uNxN4Qz-KJWpwgdJjEk856rFg.roa (hash: gCH8Gmi7LtX/qDiok3OTFvIkgdYcX5Le/2ybuhXBvN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:32:a1:47:21:8b:09:41:da:bb:6d:d0:e7:fa:03:d4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: Oct 30 01:00:21 2025 GMT
Not After : Oct 31 01:00:21 2025 GMT
Subject: CN=fdef67a967ae505b3abdbd2b622a3a09696126c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:89:ae:f3:dc:27:a5:bb:03:8c:db:a4:46:d2:
99:2a:64:5d:18:85:da:f2:a3:11:31:0b:7e:86:aa:
d3:7e:b8:a4:15:e9:66:b2:5f:11:43:40:d8:6e:41:
98:d2:fa:e8:35:1c:69:f3:ea:72:63:a5:d2:b4:84:
f5:5d:41:65:8a:ce:3b:54:3f:3c:d8:f6:63:4a:23:
52:0d:56:98:19:77:1c:cf:4a:0d:4a:df:d6:47:d2:
3b:17:10:09:d4:69:4a:c5:3f:3a:39:f5:fd:3a:82:
1b:eb:3c:d7:ec:a5:64:6c:2c:a0:78:98:e2:d3:cc:
95:e7:91:99:68:ce:ae:59:61:5c:ea:a4:27:24:d2:
66:30:07:9a:e3:73:70:b2:10:ee:e2:7c:b8:49:75:
b9:36:d0:e2:60:2c:a6:5d:d6:a8:96:0a:13:50:ac:
9a:df:3e:5d:5b:4e:6a:9d:7b:44:21:50:12:15:30:
9a:4e:94:d1:e2:84:b1:d5:c8:5e:7b:39:5d:49:53:
e1:9e:f4:44:64:b7:a8:54:fb:ce:41:e0:85:bf:e7:
e1:6d:97:62:54:59:e5:56:0c:5f:06:70:c7:fd:a3:
90:6f:42:54:a2:e9:d1:84:dc:79:cd:59:98:fa:0b:
fb:3c:b2:f9:0c:a6:c0:f2:88:a5:ec:a5:b9:8f:9a:
17:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EF:67:A9:67:AE:50:5B:3A:BD:BD:2B:62:2A:3A:09:69:61:26:C7
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fa:fa:9c:bb:a1:da:65:76:a7:91:b5:1d:86:f1:2e:44:af:
47:9a:4f:ee:5f:e5:5f:d5:5d:2c:ae:d5:de:7e:57:43:34:b2:
f7:1f:6b:e2:7d:82:f9:c1:b2:56:6f:49:b3:07:57:65:5f:b4:
68:37:8c:95:c6:f1:ba:23:46:45:7b:48:28:7c:d7:65:15:e9:
09:2c:e9:09:ae:73:67:21:10:04:9b:6a:cc:07:83:b0:e5:a2:
9e:9e:5d:4c:b1:df:65:9e:1a:81:70:a3:20:b8:7a:aa:24:40:
9b:84:58:51:cf:b9:21:28:fe:00:3e:37:cd:a7:72:7c:58:c5:
73:1b:ed:61:3f:7c:fc:27:04:35:1c:d8:9c:03:58:b8:17:0a:
0c:e4:30:2b:07:ff:8a:f0:57:d1:5a:8d:8e:c2:d2:eb:58:35:
6a:dc:2b:9f:48:b4:fb:99:0d:07:c9:cb:fb:fd:ab:1b:1e:a4:
15:66:4c:07:d1:f5:56:e4:97:c0:7d:10:35:1e:09:75:20:8a:
f3:03:15:33:f7:ed:4a:e1:f2:56:bd:65:64:ec:27:36:9e:74:
1d:16:1c:41:23:ee:b1:78:50:24:5f:65:4c:f1:ef:6c:58:1b:
9b:36:6c:fa:d2:d3:34:7b:18:cf:66:5a:10:1e:7e:af:2f:35:
78:bd:97:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 05:22:20 2025 by rpki-client