Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
File: wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft (raw, json)
Hash identifier: 6xW+F0XQrKi/rtYNyV1LR3grV7RTry4YYXcPJMzIiBw=
Subject key identifier: 5A:FF:AA:AE:B6:24:92:1F:D7:FB:BA:67:B7:0F:50:05:48:FF:56:5B
Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
Certificate issuer: /CN=c13b90faac5efcf93195619da16f3a47effe99fe
Certificate serial: 019A2AB0A44A45B5A3A6C5AA25DB3E100BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 12:00:10 +0000
Manifest this update: Tue 28 Oct 2025 12:00:10 +0000
Manifest next update: Wed 29 Oct 2025 12:00:10 +0000
Files and hashes: 1: iyuy2kmWqZNHXuAfcuh0lwdEN5U.roa (hash: 80r40j4f0TX0nXOpgOJuceIx9IUXe6MHRj3CO+H5lVg=)
2: wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl (hash: 8gv/dIPGuDCyfOMb63R6og9gNQKdx+sJ+0Ydx0vHaM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b0:a4:4a:45:b5:a3:a6:c5:aa:25:db:3e:10:0b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe
Validity
Not Before: Oct 28 12:00:10 2025 GMT
Not After : Oct 29 12:00:10 2025 GMT
Subject: CN=5affaaaeb624921fd7fbba67b70f500548ff565b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:77:49:d2:cd:0c:ed:a4:7f:9d:7e:d4:0f:b4:
08:89:21:81:db:e5:98:5b:34:f1:8a:33:45:ce:1c:
55:a5:ab:0b:47:8e:13:77:51:12:61:19:28:40:56:
89:91:cb:8c:6f:3b:57:f8:bd:4d:43:e0:15:63:88:
b5:e1:39:62:0a:46:9e:56:4f:bc:0c:52:6e:0f:8c:
98:89:6c:a4:01:08:51:4f:b1:79:03:2c:8c:e6:5d:
c7:6c:97:07:e3:ce:a2:1e:94:36:8a:d7:69:8d:b3:
07:b2:2e:34:40:d7:a7:28:a4:2f:f0:27:d4:6e:a7:
4a:be:84:80:f7:73:db:06:2b:0d:f2:50:83:fa:9a:
8f:dd:e5:f1:81:b8:67:27:2d:04:65:bf:ef:ee:12:
1a:e5:ab:a8:ac:96:0f:3b:c3:cf:c2:9f:8d:43:22:
ca:43:f5:66:72:b8:03:55:bd:76:ab:a9:83:f8:31:
0a:6e:10:10:ec:19:40:fe:1a:a0:9b:70:bb:59:c7:
70:b0:8c:7d:69:a8:ea:4e:97:56:d2:5a:6e:e0:43:
a9:22:1e:aa:ad:26:66:dd:a9:07:30:1c:79:ec:c8:
f0:cb:9c:eb:19:56:bf:a6:07:f0:6a:b0:ea:eb:2a:
82:55:93:24:a2:fc:3d:12:5e:ac:c1:79:ea:da:94:
90:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FF:AA:AE:B6:24:92:1F:D7:FB:BA:67:B7:0F:50:05:48:FF:56:5B
X509v3 Authority Key Identifier:
keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:91:2d:52:97:b7:c0:cd:15:ba:15:95:3e:75:de:a7:7e:a2:
64:94:5c:09:de:1c:f0:15:78:ef:28:8d:68:90:29:25:cc:f1:
2c:45:fc:49:d4:a1:17:0d:c9:10:dd:47:31:bc:4d:e3:fa:a0:
ad:63:93:48:8a:03:a3:dc:eb:d9:f6:f6:68:40:5f:d6:0c:e0:
8b:d7:5b:0c:d7:9a:e2:4b:05:2e:a1:7a:75:fa:eb:1f:7b:e4:
69:86:f4:04:59:f6:d0:6a:90:94:b6:25:e0:90:3a:f3:62:da:
92:93:8e:be:18:20:9c:53:98:01:eb:a5:12:d3:59:c6:cf:55:
49:31:db:0f:15:0f:15:2f:04:3e:25:61:ee:11:12:f4:55:15:
85:93:b6:a2:f1:e8:f2:4e:7e:75:dc:ad:51:c0:62:32:b6:37:
30:72:7d:52:a1:82:1e:a8:cd:43:41:84:ac:05:91:00:4d:48:
3d:bb:a3:4b:c0:e9:0f:3e:dc:df:31:4c:e3:9e:0b:32:29:6a:
8b:ff:01:60:af:8a:4c:cf:25:57:99:6b:ee:83:ce:e4:a6:13:
9f:9d:8e:70:ab:da:21:d5:02:ad:b1:e9:a9:2d:ee:14:02:49:
4a:97:0f:92:cc:51:2c:80:54:4f:99:28:32:ee:45:be:cf:5b:
9b:24:39:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 20:19:37 2025 by rpki-client