Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
File: WueVPpRZ3AlIbw3cWfKkBbVmklA.mft (raw, json)
Hash identifier: y/rP0xq2YwU0KeIUkrJPP/KdyeeE7NwjUUBluJkNvyg=
Subject key identifier: 6B:DA:63:32:F0:25:2A:10:1D:E4:81:B8:46:CA:19:BA:58:D4:2E:9E
Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
Certificate issuer: /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Certificate serial: 019A4B8583318E68FFFD342A66E8CF34CAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
Manifest number: 1672
Signing time: Mon 03 Nov 2025 21:00:32 +0000
Manifest this update: Mon 03 Nov 2025 21:00:32 +0000
Manifest next update: Tue 04 Nov 2025 21:00:32 +0000
Files and hashes: 1: DBk26ni3rWAWrcHCnCAPZ2xkK4Q.roa (hash: Qk/2nxHHAgzzRwHK2tRfQQjLdz8MwTUa/j75IBrERBE=)
2: WueVPpRZ3AlIbw3cWfKkBbVmklA.crl (hash: /oQwpMlYXBtwF8qlb8xCeHqPEvJM48VPhMHDV6YZ6aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:85:83:31:8e:68:ff:fd:34:2a:66:e8:cf:34:ca:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Validity
Not Before: Nov 3 21:00:32 2025 GMT
Not After : Nov 4 21:00:32 2025 GMT
Subject: CN=6bda6332f0252a101de481b846ca19ba58d42e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:15:a1:ce:43:65:8c:54:91:d7:f0:a1:ac:39:
30:ef:47:67:98:de:a5:e4:5b:5f:fa:ff:53:40:b3:
35:5f:c6:9d:6a:80:07:d5:68:13:ab:87:07:5d:d8:
00:57:29:83:cc:4e:8c:7c:d0:9a:8e:40:d6:51:64:
82:96:fd:23:d6:03:8b:7f:b2:b5:fe:11:a1:79:d8:
1b:13:83:59:01:0f:32:bc:aa:c1:a6:6b:79:dd:35:
54:07:2a:31:c9:99:4a:a1:d9:b4:e8:f7:ba:78:97:
ae:8d:f2:aa:b1:a4:cc:51:19:aa:6a:71:4b:f6:95:
90:f6:74:84:d0:ab:fc:bb:23:ab:06:fe:3d:dc:04:
34:59:11:e9:bf:91:b8:fc:7e:78:35:71:b7:62:fb:
3d:4d:86:1c:40:59:b1:ce:eb:1a:28:a3:3a:af:c8:
6c:d4:b3:a5:e0:e9:73:dd:92:d2:ac:58:36:7f:bb:
54:e7:98:af:11:c4:a0:04:3c:fd:2b:4f:0f:5e:81:
5c:85:62:19:32:de:0f:65:f5:7a:a9:29:f1:cb:5a:
20:ee:b7:4c:32:4c:9e:11:4a:c4:71:97:a7:7e:b8:
6f:e3:0d:a1:0c:c8:32:3c:e2:5d:1c:5e:51:0f:81:
f1:af:39:9a:c0:6e:07:8f:45:2c:3f:c2:f2:47:80:
ef:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DA:63:32:F0:25:2A:10:1D:E4:81:B8:46:CA:19:BA:58:D4:2E:9E
X509v3 Authority Key Identifier:
keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:82:83:0f:3f:10:6a:98:a6:e2:4c:b8:15:c6:b0:15:eb:93:
62:25:44:37:07:57:de:8c:a9:dc:b9:cf:fe:b5:7c:74:5d:1d:
d2:90:10:88:cc:10:07:ee:92:76:7d:8b:6d:7d:dc:30:8d:27:
21:26:96:b0:de:b7:c8:df:dc:10:14:c2:30:34:c9:00:7b:76:
36:f8:39:51:6d:4c:23:9d:62:74:92:c0:f5:fe:0b:59:45:c6:
01:47:cc:80:05:84:3a:7b:70:18:0e:5f:17:23:39:eb:9e:5b:
59:8a:19:e2:f2:37:d3:49:dc:6c:48:c0:8d:06:a9:2a:8e:04:
9d:2c:ef:57:75:d3:e2:04:0f:cf:49:65:70:4b:81:59:e0:d7:
da:e4:1a:cc:42:40:ca:c2:fc:0b:0e:ae:42:31:08:7a:7b:9e:
43:92:e9:6a:c0:65:55:6d:2d:ee:38:71:25:d5:34:fe:ad:ef:
d0:da:5b:d1:94:d7:35:f5:cc:7d:fe:63:59:5c:6e:03:41:a7:
02:75:73:6f:f7:cf:25:d4:b2:13:65:02:53:e6:04:a2:87:58:
74:30:8f:83:2c:eb:b1:05:fc:f5:2a:77:c9:f3:df:d9:be:0a:
c1:e8:79:cd:27:53:f3:73:0e:e4:72:16:69:cc:93:ad:cc:f4:
fc:bb:fc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:43:34 2025 by rpki-client