Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
File: wADaNsWELOEw_QaJEuv8DGnnZgY.mft (raw, json)
Hash identifier: cfCsgvtlJtRKMUOWISXqtgotTBWB6Lo0eRJT68lx7xU=
Subject key identifier: 88:28:D2:87:A2:F0:4A:0A:53:AE:80:E1:20:7D:F6:4C:88:84:37:E6
Authority key identifier: C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
Certificate issuer: /CN=c000da36c5842ce130fd068912ebfc0c69e76606
Certificate serial: 019A706E259E921219CEB9857074596FA8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
Manifest number: 05A9
Signing time: Tue 11 Nov 2025 01:00:57 +0000
Manifest this update: Tue 11 Nov 2025 01:00:57 +0000
Manifest next update: Wed 12 Nov 2025 01:00:57 +0000
Files and hashes: 1: YwPa7fIjOxU3w2nMuyLflIyituY.roa (hash: bzaGLCEsglB24IqcrTEilteAr5hqEsn8c1gGVkcmknA=)
2: wADaNsWELOEw_QaJEuv8DGnnZgY.crl (hash: 3XWgSSX3dorPMf9x2c/CYLu1n/XXBMyL9+MxJbxMOM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:25:9e:92:12:19:ce:b9:85:70:74:59:6f:a8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c000da36c5842ce130fd068912ebfc0c69e76606
Validity
Not Before: Nov 11 01:00:57 2025 GMT
Not After : Nov 12 01:00:57 2025 GMT
Subject: CN=8828d287a2f04a0a53ae80e1207df64c888437e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:d8:10:d4:c7:a0:53:b6:14:75:0e:74:68:
5a:43:36:f0:29:b2:8f:81:0d:a3:15:02:1e:c5:3b:
25:49:da:52:a0:87:0b:d5:82:84:0c:0d:43:e7:5f:
2d:81:e9:44:b2:88:5d:45:65:6a:7a:2f:33:58:d3:
22:96:20:2b:c7:58:90:7b:27:34:12:cb:96:c3:d9:
e7:45:40:40:6b:15:50:be:b5:f3:b8:58:1b:6a:1c:
bb:a4:fd:19:5b:34:c7:74:44:66:ba:b3:51:7b:3b:
41:6e:88:a3:b0:51:20:00:3a:ce:6a:71:d8:34:f8:
f6:87:a8:2a:ca:51:1d:98:42:8e:6d:21:48:1b:2a:
19:35:67:66:90:47:72:61:7c:3b:f6:98:af:14:9b:
ce:6d:d2:7a:c1:58:a6:2b:0d:b8:c1:33:e9:fd:45:
62:09:31:46:de:f9:28:38:c6:21:85:53:38:f6:ad:
63:8c:83:81:b1:d4:c3:23:8c:f6:74:41:10:8d:73:
cd:66:78:9b:d7:0f:0e:d5:00:49:dd:64:01:d6:c7:
17:3b:6e:68:d4:2d:1b:8f:2b:71:db:aa:9a:2f:e8:
01:92:cb:e2:53:18:f5:f2:fc:ce:57:b1:65:85:51:
8c:aa:9d:b0:e9:bb:79:17:51:7c:4a:e5:2e:64:aa:
92:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:28:D2:87:A2:F0:4A:0A:53:AE:80:E1:20:7D:F6:4C:88:84:37:E6
X509v3 Authority Key Identifier:
keyid:C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:92:2f:cf:99:85:bf:91:26:56:4d:c6:3d:a5:de:57:bb:a1:
22:fa:3f:4d:56:5e:9b:c7:9f:c4:d0:2a:b7:af:41:52:ed:11:
62:78:9b:cb:a3:f5:62:26:14:e6:48:d5:fc:32:e0:e7:81:c8:
c5:6e:5a:4b:cc:6d:f5:0a:3a:06:1a:11:ee:72:5f:6a:a1:57:
15:4d:47:6a:c4:52:3b:78:34:8d:2a:16:9a:dd:d1:72:c6:9b:
6a:f6:d1:24:19:37:78:37:5b:bd:17:d3:d8:64:cc:8d:dd:08:
fb:a0:75:a8:9a:e9:0e:7c:16:8a:fa:ed:b6:5b:61:f2:45:55:
9c:52:db:08:68:86:7e:30:6d:ab:bc:41:d1:7d:03:9f:7f:58:
b4:3d:93:d4:d5:7c:62:f2:89:3d:7b:fa:26:2d:d5:b8:21:dc:
fe:94:c3:e9:da:90:eb:46:bf:bf:70:31:2a:31:19:cd:f4:6b:
ce:dc:e5:2d:37:27:11:fc:6e:bd:5d:c0:2c:c4:8b:96:46:bf:
12:77:ab:3c:b6:38:4e:e1:fc:2a:8c:fd:0e:d0:c0:88:fa:f6:
e3:f6:aa:80:72:b3:1e:ff:aa:df:ed:ba:63:1c:39:b6:a7:30:
9e:4e:4d:84:8a:3e:be:14:80:1e:a4:33:65:1c:b8:97:dd:ed:
b2:5a:20:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:42 2025 by rpki-client