Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
File: weJGTdbQQjCVFffltk6mXAibRhY.mft (raw, json)
Hash identifier: JNG6RA35cz6o0d496IFoFuc225HchBrtXvov8/cATFI=
Subject key identifier: B1:E7:39:47:8B:57:92:B5:01:AE:A7:16:87:18:81:57:9E:B9:72:EB
Authority key identifier: C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
Certificate issuer: /CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Certificate serial: 019A72259ACDC3805C364EC0A7D5E1EB3D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:00:58 +0000
Manifest this update: Tue 11 Nov 2025 09:00:58 +0000
Manifest next update: Wed 12 Nov 2025 09:00:58 +0000
Files and hashes: 1: DgGyGbwI_Z-hbBwqBMhZZb6vSwc.roa (hash: YoSjsmqBi7UGbr0YdaEV1pXh33zn8N/CDmlmvP42wg0=)
2: weJGTdbQQjCVFffltk6mXAibRhY.crl (hash: eKvLO42glshfQgfmweUPPKXFnp0Qz7P+pMBn6oyHh5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9a:cd:c3:80:5c:36:4e:c0:a7:d5:e1:eb:3d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Validity
Not Before: Nov 11 09:00:58 2025 GMT
Not After : Nov 12 09:00:58 2025 GMT
Subject: CN=b1e739478b5792b501aea716871881579eb972eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:ed:bf:0c:7b:9a:90:9d:c3:a5:a1:4a:8d:
16:43:69:a4:b6:29:20:79:36:27:71:fd:c1:0c:2b:
89:fa:91:8f:3a:da:63:18:90:e4:5a:ff:37:cc:f6:
fb:23:db:e7:28:79:13:6a:ea:30:e6:ca:32:7a:c9:
1a:13:3a:16:29:d3:f5:9b:d1:93:7b:ee:f3:06:d7:
30:65:e6:b2:e5:95:39:5d:cf:d6:c2:71:76:e5:d6:
50:45:e7:02:22:72:d9:3a:f6:28:1d:82:50:9f:e2:
32:d2:8e:4b:6c:89:0a:df:ea:ba:ad:19:e2:09:14:
ae:9b:ce:ba:54:f1:68:7a:07:93:ec:d6:fc:bf:a2:
7a:a8:7a:23:fb:f5:3d:be:76:d2:fa:12:33:bf:f7:
72:77:67:2f:1d:21:e9:00:3c:8f:f0:ca:c7:ea:0b:
3c:8f:1d:a7:a1:a4:09:36:5c:82:c4:68:8d:52:b9:
ae:14:cf:de:7a:c2:2b:f2:63:aa:d1:36:e3:98:d9:
3c:a4:6d:e3:08:06:b2:a6:ce:1e:70:b2:60:65:18:
6f:03:f9:4b:d4:98:8a:ac:8c:78:4d:29:e9:54:8d:
56:37:ca:1f:34:8a:a6:eb:21:e2:19:d1:6f:ba:df:
e8:3e:37:38:85:8a:ee:14:0c:37:28:70:a7:b2:ab:
a4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E7:39:47:8B:57:92:B5:01:AE:A7:16:87:18:81:57:9E:B9:72:EB
X509v3 Authority Key Identifier:
keyid:C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a5:03:81:f9:3f:af:7f:db:24:c6:47:01:16:b1:77:33:28:
e9:d2:c1:41:af:17:c9:a2:ae:b5:ae:32:6b:86:6d:c8:8e:6c:
af:9e:c9:d0:4c:94:ed:77:18:51:ab:3d:89:b5:d8:d9:fa:d4:
37:53:aa:21:75:39:9e:65:db:5b:75:db:ac:56:6d:74:d0:c1:
a1:f4:9a:b5:9f:3b:33:11:ad:b7:20:ee:95:bb:3a:37:ec:d2:
dd:ec:e7:b4:d1:8e:75:2b:bb:75:92:42:59:56:f7:2e:74:d2:
58:4c:b9:c9:20:c8:4f:3d:89:00:ef:36:2a:d3:2b:d6:e3:ba:
af:a4:7d:19:e3:bd:ad:d1:51:4a:4b:01:bc:15:f9:e6:55:a3:
a9:49:07:74:d6:8f:b6:03:e5:94:a9:a7:0c:5c:e5:81:76:d9:
0f:82:c1:8e:93:e8:8f:70:a2:86:1b:63:19:ae:8e:74:fb:44:
9a:64:75:4b:1d:b6:25:10:56:69:79:26:9c:99:2a:3d:60:9a:
8f:fb:3a:40:2b:1d:cf:e4:5d:ba:a6:f1:f9:12:70:57:e7:45:
94:a3:69:0d:dc:5e:c7:cb:49:9a:f9:4a:a8:3f:72:4d:88:b3:
ee:d5:49:b4:ef:82:b1:48:de:7e:f0:f9:4e:9b:bc:a1:78:00:
07:8b:99:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:42 2025 by rpki-client