Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
File: WArULGTE9V_s54skJwcf5mhMIMk.mft (raw, json)
Hash identifier: K9knrZsMGYigEysyRUXqhZ9N1r1tSTPyAuRZoJnMB30=
Subject key identifier: DB:E3:F2:F4:CC:51:1A:35:AC:6A:D0:0E:6D:CD:2E:71:D1:CC:A6:97
Authority key identifier: 58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9
Certificate issuer: /CN=580ad42c64c4f55fece78b2427071fe6684c20c9
Certificate serial: 019A473B17A88DF5399968911CDB932162CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
Manifest number: 170A
Signing time: Mon 03 Nov 2025 01:00:46 +0000
Manifest this update: Mon 03 Nov 2025 01:00:46 +0000
Manifest next update: Tue 04 Nov 2025 01:00:46 +0000
Files and hashes: 1: WArULGTE9V_s54skJwcf5mhMIMk.crl (hash: duDIhV1Ovzku1BJX3/TfBx1wcH6ly9YxIRSdzPVZSjU=)
2: oz4j6XAA3JSDTaFAUqvMD6Q_gKU.roa (hash: alaiQ7nYgvlQJD63x0493TKwZeIQqdX8mBDJEuCO9ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:47:3b:17:a8:8d:f5:39:99:68:91:1c:db:93:21:62:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580ad42c64c4f55fece78b2427071fe6684c20c9
Validity
Not Before: Nov 3 01:00:46 2025 GMT
Not After : Nov 4 01:00:46 2025 GMT
Subject: CN=dbe3f2f4cc511a35ac6ad00e6dcd2e71d1cca697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:24:3d:a4:95:ed:bf:2f:91:a0:4a:ed:7c:
2a:67:8a:fc:22:fb:b1:19:a9:e6:64:92:54:0f:2a:
ec:b7:a1:8f:6a:ba:e0:cb:e4:c6:b5:ea:1d:33:a3:
9b:ec:17:f5:45:c1:d0:51:b4:17:1d:33:86:16:48:
ee:a6:d7:92:8d:18:83:05:60:03:80:aa:8f:cf:9d:
f2:5a:72:dd:70:c6:a2:ee:50:91:93:67:a6:99:e8:
a4:ce:f9:71:a7:87:59:9c:67:96:e4:c7:d9:80:85:
c9:c4:3d:88:94:c6:50:1b:c3:75:fb:1c:6c:d0:1e:
10:af:e5:61:f0:3c:75:8e:ae:2c:2a:25:69:59:97:
67:a0:f4:41:e9:13:20:ab:a3:44:d4:79:22:51:47:
de:72:dd:21:49:80:d2:db:90:d2:a7:f7:63:91:af:
86:2d:02:69:7c:45:23:92:4a:1e:e1:df:85:12:d8:
9f:e8:78:94:60:23:e2:59:d8:e2:23:f2:d6:2a:3f:
de:e5:a7:34:f4:d8:c4:a7:54:0a:e4:fa:41:e6:0a:
be:07:b5:b5:fc:41:5c:cd:5e:b0:fb:24:c0:63:24:
89:43:53:ba:92:b3:be:a2:09:f0:a9:26:50:8e:c6:
59:53:55:15:08:fe:5c:d9:2a:2d:4f:82:8b:ae:68:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E3:F2:F4:CC:51:1A:35:AC:6A:D0:0E:6D:CD:2E:71:D1:CC:A6:97
X509v3 Authority Key Identifier:
keyid:58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:0a:3f:88:fd:01:59:24:0b:59:0c:b5:2f:bb:0a:c3:ce:75:
64:06:fa:78:13:b8:41:60:a5:ad:75:02:eb:0e:f7:af:a8:6c:
6b:9f:8b:07:1b:82:1a:8f:08:48:76:53:54:28:89:44:fb:b2:
57:82:66:d5:c1:01:61:ef:ac:ef:60:c7:ec:ac:0b:f0:63:15:
cd:77:f4:e2:8f:29:4b:f9:63:86:d6:c0:1d:78:48:51:e7:50:
ed:9a:c1:94:f1:1f:5f:a0:ef:46:ec:e7:c2:06:11:62:f1:68:
2e:d5:e0:37:98:b2:8d:52:4d:08:b3:e5:ac:e3:18:e3:90:2c:
dd:4e:75:4d:e5:3d:41:c9:fc:b9:d1:69:05:fc:97:90:1a:ec:
bc:77:a8:bc:a1:96:71:1c:ad:82:79:bf:9d:97:03:bf:65:49:
3f:2c:8c:91:ab:35:a0:06:ee:87:33:98:f1:9f:ff:c8:22:e7:
3d:ba:1e:25:9d:34:7b:f2:6a:89:e7:ea:37:19:b0:ff:46:c5:
83:d6:5d:8c:4a:f8:dd:d9:6f:3a:a5:ce:5b:14:f4:76:4f:5a:
22:a7:d4:7c:d9:a0:ae:6f:29:7a:cd:76:84:e9:82:f7:f1:93:
5a:40:d6:95:b0:88:44:fd:7d:03:06:bc:b3:72:53:35:9f:4f:
41:70:b6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 07:56:02 2025 by rpki-client