Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
File: wa5jZUn1bYSFj_lsixYw6MuKSK8.mft (raw, json)
Hash identifier: QwxNsVT8gN2rADMqarp82gtx/PPmzTBUZXH4O2bo30w=
Subject key identifier: 04:A5:60:76:73:35:0C:0D:A3:3B:E0:0E:51:7E:4D:67:C2:BA:17:B4
Authority key identifier: C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
Certificate issuer: /CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Certificate serial: 019A722627ED0780773FFD5382C37FCF4F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:34 +0000
Manifest this update: Tue 11 Nov 2025 09:01:34 +0000
Manifest next update: Wed 12 Nov 2025 09:01:34 +0000
Files and hashes: 1: hC6THvKHe5uSDROMW6kLELYwxL0.roa (hash: WD5tslYZuls5xxVxHqrkg7m1jUZOFnnaeXM0AUBhaiI=)
2: wa5jZUn1bYSFj_lsixYw6MuKSK8.crl (hash: ghDJEG0aLbYG13+fSwO+iM2C95FkiJ7fHx3KB8+4wU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:27:ed:07:80:77:3f:fd:53:82:c3:7f:cf:4f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Validity
Not Before: Nov 11 09:01:34 2025 GMT
Not After : Nov 12 09:01:34 2025 GMT
Subject: CN=04a5607673350c0da33be00e517e4d67c2ba17b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:3c:55:80:32:c9:bb:0b:20:fa:28:36:f0:
3c:6c:29:9d:d9:47:93:d3:b1:35:22:85:43:a7:67:
f5:4f:5f:85:bd:59:23:b4:70:09:37:8e:4b:fe:f0:
54:2b:ca:ab:9c:9c:3e:e4:e3:6e:aa:92:be:67:ef:
61:b8:c6:85:13:f4:9b:0e:24:e1:d3:d1:00:e7:c5:
23:3d:f5:b3:89:dd:35:30:8c:21:32:db:c7:da:1f:
de:d6:75:37:b7:4f:45:2d:09:67:12:bc:23:59:40:
fc:85:b3:1d:51:e3:00:6e:95:e7:01:ad:37:ed:95:
3e:87:c9:16:64:64:8f:f1:75:77:d8:12:68:ea:3e:
a5:1c:89:6d:c8:b7:a7:3e:7f:1d:46:c2:ed:fb:d2:
33:6a:0e:b8:84:a9:8d:be:25:a8:48:79:e7:29:7b:
f9:90:38:35:3e:8b:b2:d5:09:8c:0b:18:3b:07:9e:
f7:9f:05:3c:d2:80:de:45:6e:f0:23:c8:30:a8:7e:
5c:5a:40:83:6c:d7:f0:fd:8b:4e:84:0c:5d:4b:06:
96:43:d3:16:0e:4d:59:ef:5a:78:f3:10:26:e4:83:
f7:c4:7f:ee:35:08:b4:79:32:21:8b:d3:cc:70:9c:
dd:16:24:d3:69:80:04:32:21:40:c1:fe:f0:42:c8:
1d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A5:60:76:73:35:0C:0D:A3:3B:E0:0E:51:7E:4D:67:C2:BA:17:B4
X509v3 Authority Key Identifier:
keyid:C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d9:72:8f:e8:df:da:6b:c3:c0:11:ca:51:0b:ed:87:51:66:
25:9b:1a:21:21:10:92:1c:5a:f6:dc:9d:30:77:14:a3:7e:e8:
58:f1:c6:1b:f8:ad:0f:9d:f3:0a:7b:a4:eb:7d:71:3b:91:2b:
a0:63:0c:03:03:cf:50:f8:c8:5c:84:a1:48:61:7f:2d:97:fa:
b8:4c:08:64:73:6a:0f:07:62:9a:e8:43:e6:e0:22:4e:e3:d3:
78:d3:a7:65:cf:10:a0:25:8a:2d:94:a6:55:dd:9f:a5:da:cf:
5e:f7:04:a4:ee:19:bd:b3:89:dc:1a:03:90:28:42:b7:98:a2:
18:a2:19:81:35:44:d7:c1:17:b2:85:c2:f5:6c:07:bf:95:17:
b7:bd:e4:aa:ff:97:c1:c3:6e:76:7d:94:ac:60:9c:30:12:dc:
9c:ea:76:57:93:05:e7:9e:1e:64:af:e9:b3:ea:b6:34:27:4e:
b4:f5:82:ec:4a:b3:19:b2:9c:8a:e2:74:4d:4d:60:f4:58:53:
69:4e:c8:ce:cb:52:26:32:b1:2d:27:ab:c2:0a:ea:86:6b:ce:
ae:7e:3d:d2:a5:95:18:a5:b9:0a:7e:d6:03:0c:1b:ec:37:57:
15:64:b8:f9:6e:c9:68:9a:5c:30:03:cc:28:d0:38:e9:3e:00:
0a:19:3e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:18 2025 by rpki-client