Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
File: WqtKKPwphT3SPHa9Hi94zpmZoVo.mft (raw, json)
Hash identifier: c6RmuJZ7501VVaqekLUZuniwGIoEKu78Wx6i0AGUCBQ=
Subject key identifier: 8C:CA:A2:36:3A:5A:81:C2:B6:5A:8E:4C:08:AA:0E:CF:F0:5A:9F:F5
Authority key identifier: 5A:AB:4A:28:FC:29:85:3D:D2:3C:76:BD:1E:2F:78:CE:99:99:A1:5A
Certificate issuer: /CN=5aab4a28fc29853dd23c76bd1e2f78ce9999a15a
Certificate serial: 019A7225C852433929D026504996B821A6C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
Manifest number: A7
Signing time: Tue 11 Nov 2025 09:01:09 +0000
Manifest this update: Tue 11 Nov 2025 09:01:09 +0000
Manifest next update: Wed 12 Nov 2025 09:01:09 +0000
Files and hashes: 1: WqtKKPwphT3SPHa9Hi94zpmZoVo.crl (hash: FjTUP4DKd6Osxl6sBfCICiTz5aOSzT5f6xvyKk9ZzGY=)
2: n3BgyUulT02071hYFOzA1unhxoM.roa (hash: BPb0g/1bWdgtULRInakuHMpgQ/U61gydQ46sGmWxZGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c8:52:43:39:29:d0:26:50:49:96:b8:21:a6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aab4a28fc29853dd23c76bd1e2f78ce9999a15a
Validity
Not Before: Nov 11 09:01:09 2025 GMT
Not After : Nov 12 09:01:09 2025 GMT
Subject: CN=8ccaa2363a5a81c2b65a8e4c08aa0ecff05a9ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:35:93:20:ce:a0:f9:e0:c3:2d:e2:2b:d8:
30:4d:40:99:cd:38:1c:d0:fa:ff:d1:c0:47:88:a7:
03:b9:de:de:d4:7a:5d:e4:aa:2b:46:ab:9f:3c:62:
56:dc:f0:7f:41:5c:42:9c:50:8d:79:66:c2:02:07:
be:cf:1e:6b:fa:26:5c:2a:4a:ec:1a:55:96:4e:1d:
00:6f:9f:73:02:74:45:cb:d2:de:b2:e7:fa:8d:f8:
b2:53:49:6a:c4:e2:9b:bb:24:ef:9d:88:15:79:89:
b6:5c:1d:af:a7:37:95:ef:1f:a3:c1:1d:17:99:af:
e5:b3:41:2b:96:60:56:6a:9c:ee:fb:87:86:9b:80:
4c:a2:b0:8a:43:b9:4f:8e:c5:69:d7:84:dd:42:71:
48:58:b1:1c:e4:a7:23:b7:b2:0d:2d:65:70:1b:ce:
80:3e:52:20:c8:05:ca:92:d0:1a:2e:1c:5c:d9:37:
a4:77:17:51:6e:54:e6:1d:71:aa:8d:69:11:f8:8e:
a2:1f:01:9b:d8:a1:82:60:9a:7a:32:e1:cd:04:32:
6e:e3:48:24:95:0e:3a:d2:e0:e8:97:de:8b:fc:e3:
ee:38:ab:85:6b:ad:57:6b:4b:86:85:f2:a1:5e:39:
8d:f7:ed:ca:82:21:f1:ca:b1:fb:e5:34:e8:1f:7b:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CA:A2:36:3A:5A:81:C2:B6:5A:8E:4C:08:AA:0E:CF:F0:5A:9F:F5
X509v3 Authority Key Identifier:
keyid:5A:AB:4A:28:FC:29:85:3D:D2:3C:76:BD:1E:2F:78:CE:99:99:A1:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:eb:82:d8:d4:d6:77:26:3e:c6:1c:c8:00:f7:e9:fd:01:ea:
99:38:9c:fa:f7:18:d7:13:29:57:f0:01:be:49:df:00:17:7f:
da:fe:de:83:16:d5:58:4d:58:5e:20:c1:d5:68:9b:3f:e8:8f:
3f:28:62:92:cd:80:d8:82:b4:e6:77:aa:07:bf:fe:06:09:4f:
1f:19:b1:0e:88:3d:ad:09:c3:0f:89:29:5f:5d:91:59:71:d2:
96:ed:04:65:5a:d3:0e:3e:83:34:18:58:07:d2:91:ce:68:c3:
fb:b8:f7:35:d2:30:82:0e:ff:e7:5b:e0:65:8b:09:01:2c:0c:
5f:3a:ea:7b:40:94:53:74:8e:1a:34:01:2f:a2:0e:7e:f9:77:
91:2b:de:fd:82:50:f4:9d:45:98:e4:44:cc:fc:6a:cb:ff:98:
9c:32:34:f5:6e:2f:90:8d:64:23:16:9e:fd:33:71:a8:10:e8:
80:1c:b8:f7:a8:eb:c2:c3:a2:2f:f3:2f:59:5f:5a:83:bd:21:
01:f2:11:82:93:87:75:56:94:1a:1d:b4:6e:51:9d:c3:63:b6:
a8:5e:5c:17:99:19:f7:f6:63:aa:39:16:99:d6:2b:ad:12:f1:
cd:55:1d:db:ff:ef:e2:43:e7:b5:aa:3f:1a:75:05:58:da:63:
a7:61:b5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:36 2025 by rpki-client