Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
File: wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft (raw, json)
Hash identifier: onqmeFa2f5zSY3Ig3e/KCyw6303W9gOJGDbbFVv+A+Y=
Subject key identifier: 7B:8D:79:EA:F8:56:AD:90:16:56:E5:16:1D:16:0A:9B:A0:F4:83:99
Authority key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
Certificate issuer: /CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Certificate serial: 019A714A041E366AE401A330615172C15529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:01:07 +0000
Manifest this update: Tue 11 Nov 2025 05:01:07 +0000
Manifest next update: Wed 12 Nov 2025 05:01:07 +0000
Files and hashes: 1: 9Z5tAyPoNAUrhK3XQbPirY-i870.roa (hash: JYdT76bIYS9WiRnbn5ANGOhlwfQ42Z47wnU1M4quBe4=)
2: wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl (hash: Zw950wzdsrUVNboWA1AOPdshcjEFRVwLcuf0FDgN9yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:04:1e:36:6a:e4:01:a3:30:61:51:72:c1:55:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Validity
Not Before: Nov 11 05:01:07 2025 GMT
Not After : Nov 12 05:01:07 2025 GMT
Subject: CN=7b8d79eaf856ad901656e5161d160a9ba0f48399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:d4:f8:de:8f:54:2e:52:5e:8d:a9:d3:26:
5f:78:ad:58:18:0e:81:c0:33:f8:c4:31:97:fa:ea:
de:44:58:ff:74:b5:ab:4a:4a:cf:5e:7b:b1:06:75:
c6:ee:d0:f2:05:d6:eb:0c:1a:bd:1f:42:58:a4:c8:
2c:ab:85:d8:22:e0:48:da:41:c4:a4:5b:a6:c3:d4:
2c:36:5c:f4:fa:13:5e:64:65:a4:7f:3c:f3:c0:c0:
c5:ef:e7:7c:25:59:12:0a:d5:33:54:c8:70:4a:3b:
0b:91:6d:a7:ab:71:04:3e:04:63:25:2b:b3:98:83:
ba:24:99:a4:ee:0d:90:c0:fb:b5:5a:eb:41:4d:d4:
dc:2f:c1:59:65:cb:db:75:24:8c:00:ce:64:57:18:
8e:94:d5:48:bd:14:c6:b1:c4:f0:06:c8:99:57:10:
55:de:78:d4:86:3d:3d:eb:cc:9e:fb:5e:3d:42:fc:
15:e8:e8:a1:31:83:b0:f9:91:e7:35:3f:be:1c:15:
40:53:08:c4:bf:64:ef:99:6d:45:eb:fe:4b:1f:30:
fe:a6:9a:2b:36:0a:c5:d1:52:ca:8e:13:8f:f4:c5:
8c:78:a9:a2:55:47:ae:21:a6:c0:6f:b3:88:0e:14:
64:ec:c9:a5:b5:7b:0a:41:18:e5:af:79:68:41:73:
db:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8D:79:EA:F8:56:AD:90:16:56:E5:16:1D:16:0A:9B:A0:F4:83:99
X509v3 Authority Key Identifier:
keyid:C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9a:5d:2b:b1:e2:41:02:23:24:9f:44:b3:ae:be:f7:29:0e:
25:51:76:ea:31:14:e4:c7:7f:44:e6:33:d3:63:fc:73:bf:3f:
fb:4b:f1:ae:96:95:5c:d4:f4:db:04:d2:a4:a5:c3:0b:54:c4:
4b:24:0e:ab:c8:1c:74:96:fe:22:12:7c:4c:33:24:f2:7b:51:
31:44:34:3e:f8:c5:0b:87:62:b9:47:a2:24:8f:71:60:aa:ed:
35:cc:ba:d4:7f:03:f6:19:eb:b3:f9:5d:d0:94:3d:8b:11:66:
17:03:15:a3:67:a5:8a:97:f8:31:7a:1b:23:18:b4:1f:50:f6:
2d:0e:28:19:1c:2b:92:29:e4:33:cd:5d:d1:34:90:e6:61:c3:
fa:74:19:b5:65:60:84:5e:e2:15:d7:42:50:8e:d2:9d:a4:96:
92:6d:d3:fe:9b:cf:f3:4b:56:80:a2:59:66:cd:ea:51:b4:49:
7e:35:e4:86:97:74:2b:2c:1c:43:1b:d5:20:3d:51:53:c1:f2:
fe:28:f0:d9:8d:56:8f:db:81:3a:56:b1:3a:20:2a:39:5b:ea:
e7:03:ea:2b:18:84:da:f4:1c:af:06:42:9f:91:ec:be:be:6c:
08:77:50:6e:12:5f:b3:18:d9:c0:e3:0d:ec:6b:ae:b3:70:e6:
4d:48:90:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:53 2025 by rpki-client