Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
File: _WNpJxttE6au3Koj67KeKbeWpGs.mft (raw, json)
Hash identifier: xLS2KcJXdXcU+XVZZ3YTOF9FkuJGayfy51VuNiOwIjc=
Subject key identifier: FB:EF:05:19:45:70:9C:BA:09:62:4A:FA:0E:99:1C:35:7D:C3:BF:B8
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Certificate issuer: /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial: 019A7225AB2083C0FA1302F4D3725FBFAF0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
Manifest number: 1155
Signing time: Tue 11 Nov 2025 09:01:02 +0000
Manifest this update: Tue 11 Nov 2025 09:01:02 +0000
Manifest next update: Wed 12 Nov 2025 09:01:02 +0000
Files and hashes: 1: _WNpJxttE6au3Koj67KeKbeWpGs.crl (hash: DwKkf8aPdqGFEIvv1Uh//PCZmBUcNkYRNRy3/9TkFfU=)
2: jJZ2HGBh9sf4zKvFBoawkCSE36M.roa (hash: /j0hgJuEgbh9wJPPT5skbRnDVTk4N5FaC35FuOjVz1M=)
3: lhJ5RbjQbCIcx6Snzw8-3JVMgGE.roa (hash: VcH6B7wbqshRYaE0Py9Bav3UnTpHMEOSu603CVWuDjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ab:20:83:c0:fa:13:02:f4:d3:72:5f:bf:af:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Validity
Not Before: Nov 11 09:01:02 2025 GMT
Not After : Nov 12 09:01:02 2025 GMT
Subject: CN=fbef051945709cba09624afa0e991c357dc3bfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b0:08:5f:b9:70:10:d7:c5:8b:68:ff:8e:6c:
3f:5a:84:64:0d:e9:92:60:49:46:41:01:69:3f:eb:
31:98:ef:c1:42:c4:6c:14:96:a5:73:38:27:26:f6:
6f:14:ce:63:26:fc:91:82:f8:3e:1e:f1:b6:d2:43:
48:86:6b:f3:dc:8d:8c:e1:74:4b:84:e7:92:37:3a:
a4:5c:c3:c9:26:ba:15:4a:fa:90:ec:fe:0f:6f:88:
a3:48:d9:c5:0d:75:ed:04:8f:34:db:13:07:9c:a8:
ad:83:61:04:ca:7a:78:9b:7b:c5:1d:8c:15:e5:98:
b4:0d:1a:1b:54:88:00:69:13:34:3e:5b:27:de:52:
6d:4b:9d:17:0e:90:49:4e:ff:75:c4:b0:c4:a5:cd:
e5:df:f6:35:83:d6:98:59:01:c6:28:b1:11:e9:94:
3a:1d:31:19:00:dc:a8:f7:8f:a9:0e:e4:26:a3:a2:
2f:ea:c8:b8:3e:07:54:16:e3:fb:0b:91:04:82:6e:
19:d2:dc:50:a3:85:05:52:db:19:2c:f4:6a:e8:2c:
e0:15:98:36:b6:f4:21:4c:83:a0:ad:6d:8f:ac:3c:
7d:93:de:49:9c:a6:9c:de:63:98:73:2d:01:91:b0:
cf:5e:64:53:71:2b:65:7e:d7:f7:90:73:66:05:62:
72:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EF:05:19:45:70:9C:BA:09:62:4A:FA:0E:99:1C:35:7D:C3:BF:B8
X509v3 Authority Key Identifier:
keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d4:d5:2b:28:a8:0f:0a:09:3d:ad:26:9c:2a:32:1e:59:db:
2b:1f:62:b8:1d:da:40:68:d5:29:fd:65:fc:02:3b:f0:8e:de:
77:de:4c:7c:23:7c:d5:78:16:2b:8a:1e:5d:ad:60:8f:3b:a4:
ee:ce:42:95:b1:c8:40:61:92:c6:f3:db:d6:e6:a2:ae:f6:6a:
bb:4e:52:6f:53:c8:bd:1e:fa:66:5a:8d:ac:ff:33:8a:86:6c:
a7:a1:2d:57:52:ad:03:ad:92:6c:d1:d4:5f:1e:34:f2:45:0e:
12:65:06:d0:34:83:db:2a:53:1a:e8:b7:26:2b:48:ad:8b:7a:
d9:e6:79:cb:1d:8a:ee:5a:7d:28:45:8b:34:63:9a:6d:1c:84:
ed:02:c2:2e:d4:bc:df:48:d6:58:2b:d1:35:cb:0c:93:d7:cd:
82:07:ab:6f:cb:6b:e1:e5:c0:dc:8a:87:a2:1a:ae:19:e8:9c:
9a:89:8e:99:eb:5f:51:20:b8:7a:8c:c2:53:34:a4:2a:2f:8b:
12:7f:ca:ca:49:f6:e8:ed:80:cf:89:e8:01:2e:44:33:a0:d6:
c2:22:2f:64:97:c8:66:fd:91:e3:24:5a:ee:4e:cd:a0:12:cf:
0f:c4:ae:ef:4a:11:3b:1c:09:d9:d7:10:ee:d7:59:e8:ab:f6:
9b:de:3e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:51 2025 by rpki-client