Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
File: weOkSujPAkPx3_4mhOPdWo_IXXk.mft (raw, json)
Hash identifier: p79/ap7uvmdoQdAy7HAVf+Y3RdfGFOVd3CO0EIxK3Fc=
Subject key identifier: 29:FC:63:4E:51:CF:58:2D:4D:65:D5:A7:FD:A6:B2:77:9C:79:57:B9
Authority key identifier: C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
Certificate issuer: /CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Certificate serial: 019A70A4DAA3E13D31DC3A0DAFBA931E68E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
Manifest number: 1596
Signing time: Tue 11 Nov 2025 02:00:43 +0000
Manifest this update: Tue 11 Nov 2025 02:00:43 +0000
Manifest next update: Wed 12 Nov 2025 02:00:43 +0000
Files and hashes: 1: 8SCwalNOCtaX1GmWAS6VFuVHGa4.roa (hash: MCBdmn43q9v0IHNEMsKZZxueWeuhZImr9/xukqPZ3tY=)
2: weOkSujPAkPx3_4mhOPdWo_IXXk.crl (hash: HB2p22qN7Pz7sToI4vHx6AGk07yLPqZCuMgVkArrR/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:da:a3:e1:3d:31:dc:3a:0d:af:ba:93:1e:68:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Validity
Not Before: Nov 11 02:00:43 2025 GMT
Not After : Nov 12 02:00:43 2025 GMT
Subject: CN=29fc634e51cf582d4d65d5a7fda6b2779c7957b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:8b:22:b3:5b:23:42:f2:a4:bf:4f:cd:9c:
16:f6:db:ea:c3:db:f4:23:74:ca:ca:44:14:b1:a9:
7d:43:8a:62:83:a7:b5:6a:ea:4d:67:9a:b7:35:c6:
89:65:3f:0c:f6:c4:1c:29:e6:5f:b4:c5:0a:fa:01:
bb:26:c1:2a:bc:1c:54:de:95:82:45:53:1e:06:fe:
01:4d:43:df:88:d7:67:c0:c1:42:1a:ef:44:fa:d8:
2b:7a:26:a2:68:7a:b2:43:bf:42:8a:3a:2d:d8:de:
65:cf:65:cf:45:ba:76:bc:cb:92:e4:c5:5b:ec:4d:
7e:13:90:da:2c:e5:14:42:f7:f8:b2:58:87:30:69:
8f:81:39:d5:79:7c:f1:d0:c6:de:76:50:a0:94:b5:
d0:72:42:37:77:bc:79:db:98:fb:df:d9:0b:bb:a2:
55:a9:bc:22:2b:69:c9:e8:93:a9:bb:78:24:3c:b9:
43:b4:6d:26:aa:c0:e2:ca:1a:c0:98:5e:42:b5:3a:
81:c6:40:32:70:33:e2:c8:ca:e1:13:ed:cf:22:6f:
28:2e:18:ff:c7:de:54:02:76:04:f7:78:9c:9b:b2:
07:2a:4a:e9:f0:3c:e7:5d:00:99:fa:14:28:31:cd:
56:5d:72:cb:4a:a9:6f:8e:89:9d:db:a8:f6:3b:dd:
e3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FC:63:4E:51:CF:58:2D:4D:65:D5:A7:FD:A6:B2:77:9C:79:57:B9
X509v3 Authority Key Identifier:
keyid:C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:83:60:97:24:ea:78:b5:c1:b6:c0:96:ea:7a:45:86:17:05:
bb:50:54:f6:1e:28:81:92:86:2e:2e:a1:77:72:c9:c7:50:df:
6a:8d:06:6e:0e:1b:06:7c:ea:08:a1:52:82:3b:27:f5:55:9e:
40:a6:bf:20:98:7d:c9:13:9b:c1:8c:f8:8c:53:34:7e:28:75:
68:48:d7:dd:0c:b7:ee:67:94:22:16:fc:98:14:33:72:d1:ad:
93:3c:e0:2d:7c:cc:b9:89:0c:2b:32:68:7b:fb:62:c5:14:b3:
13:8e:d4:fc:c6:b6:7f:b8:36:2a:71:e7:1a:b0:47:66:84:77:
3c:4f:ab:93:a0:64:73:3a:da:cb:ec:00:12:15:5c:11:6e:74:
e3:3a:de:aa:5e:da:a0:1f:bd:1e:5f:3e:4c:7c:34:22:d8:9c:
b7:79:b2:f7:cb:92:b8:54:c6:cf:a2:91:32:d3:ca:f5:93:c6:
55:af:32:fc:0c:7f:b9:4b:94:cf:74:71:5b:e8:bc:52:b1:cb:
12:ce:e9:d0:ce:39:f1:10:46:e9:e1:11:20:68:c3:50:f2:ab:
99:25:0e:1b:43:4f:68:59:49:f0:04:86:f6:36:fe:19:9c:78:
42:6a:14:6d:29:09:80:79:93:0b:dd:fc:ff:72:2d:ff:5a:13:
d5:7d:a5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:36 2025 by rpki-client