Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
File: WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft (raw, json)
Hash identifier: TmG6o6pj4GPx3PEVJIsvyIoWm0H5tUmFYTy4me5J2XY=
Subject key identifier: 81:9C:1E:6F:C0:C1:C6:5B:5B:56:51:48:37:61:2E:06:A6:B3:8C:8B
Authority key identifier: 58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
Certificate issuer: /CN=584d44ad55c262d84efd442dc8767b0413e1b162
Certificate serial: 019A7293A3EEF5709F0728A0AA858C238566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
Manifest number: 0342
Signing time: Tue 11 Nov 2025 11:01:09 +0000
Manifest this update: Tue 11 Nov 2025 11:01:09 +0000
Manifest next update: Wed 12 Nov 2025 11:01:09 +0000
Files and hashes: 1: NlmDLH5wWMGr_vzUkJAwntWEnjQ.roa (hash: 1/yiZpsUjLuoNGo0Ku/rpHLpaDxTkI6zMzawihAJCgI=)
2: WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl (hash: 5vThnDV6R4iU340bKEUGzIrt5IwqSqkrGfbxS6Xvw/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:a3:ee:f5:70:9f:07:28:a0:aa:85:8c:23:85:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=584d44ad55c262d84efd442dc8767b0413e1b162
Validity
Not Before: Nov 11 11:01:09 2025 GMT
Not After : Nov 12 11:01:09 2025 GMT
Subject: CN=819c1e6fc0c1c65b5b56514837612e06a6b38c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:a4:e5:96:3d:41:14:d4:05:48:a7:d9:fe:
fb:e3:2e:9e:2c:10:2d:a1:18:a4:83:23:36:70:9e:
f9:27:8e:9c:c9:7a:99:51:b0:a0:79:9e:ff:52:e1:
a6:dd:3d:58:95:e1:9f:32:3b:23:d9:6e:b1:71:fa:
7e:76:08:71:ba:68:39:72:11:39:61:d5:d4:b4:60:
2f:7b:72:2d:c3:18:38:0c:8d:83:12:49:e6:22:19:
b9:18:8c:1c:d2:f1:11:32:af:8e:93:c4:ff:3e:01:
54:28:78:a8:fd:66:27:53:01:bb:88:06:86:3a:61:
36:99:89:6a:e8:a5:a5:ff:3a:7c:d1:f4:90:7e:61:
e8:3e:f2:71:e2:dd:79:44:c9:f8:ba:b9:ad:35:af:
1f:49:70:97:ed:f5:91:d9:4f:76:8a:00:07:3c:cc:
1c:bc:cc:2a:09:cd:66:a1:61:69:05:c5:4a:1d:e8:
7e:f2:c8:f6:46:01:30:49:7c:24:df:ca:48:be:54:
b0:06:7e:3c:fe:bc:49:29:2d:8b:93:a0:37:a7:04:
42:2b:a5:a9:b3:09:63:50:7d:be:3d:d7:96:60:64:
f7:4b:99:9a:7f:4d:ed:a5:63:b0:d7:6c:b2:1b:dd:
3e:43:54:e1:06:00:33:35:93:c7:e8:c1:76:2a:5b:
48:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9C:1E:6F:C0:C1:C6:5B:5B:56:51:48:37:61:2E:06:A6:B3:8C:8B
X509v3 Authority Key Identifier:
keyid:58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:bc:d4:f4:d7:c1:88:f3:db:03:88:07:fe:53:f5:20:e6:1f:
51:95:b0:74:e6:05:ca:f7:61:e0:ed:31:b6:c5:60:b1:8f:f1:
91:4f:14:b5:57:89:ff:75:08:d1:70:ba:9e:a8:f6:6a:15:53:
c3:be:03:fb:18:95:e5:21:cb:ee:88:7d:74:14:a0:c9:5a:03:
be:6c:3d:02:a1:e4:d5:54:aa:b8:3f:4f:01:31:82:ea:a5:2e:
ea:63:b1:c1:bc:a6:38:d5:80:cd:7e:ac:11:d5:90:e1:3f:bd:
45:9f:66:e0:38:53:47:88:f9:f0:4c:56:f3:4a:04:0d:67:f9:
98:d1:ee:48:3a:b3:10:62:9b:8a:27:97:44:37:16:c8:a9:f3:
e0:f3:29:d2:e0:26:a7:5a:90:6f:cd:e2:8e:8a:77:95:f9:13:
4f:85:b6:f6:29:e2:d7:c9:a0:ef:c6:21:47:bf:8e:cd:13:b9:
21:5f:8a:1b:dd:77:d9:2e:44:db:2e:5a:e9:09:0b:ef:f9:5f:
75:e4:bf:89:38:4a:eb:fe:f8:25:64:1b:40:59:6f:a9:5d:31:
b3:eb:97:26:b1:3d:38:e0:e7:80:a1:2c:8a:27:95:a9:a7:07:
ba:19:53:ea:4e:c2:b6:7a:b2:46:2f:db:67:d8:a4:24:f6:40:
1c:9a:b9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:52 2025 by rpki-client