Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
File: waGQUEttntnBgJaEBCWxHXsi3_Q.mft (raw, json)
Hash identifier: MdtR4VxpXBorhLJkxQKgeeHfJ1TCEPV0qdG+ehGKNWE=
Subject key identifier: B6:C5:8D:C4:69:45:99:3F:14:44:8F:19:1E:96:07:80:FC:C8:98:59
Authority key identifier: C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4
Certificate issuer: /CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
Certificate serial: 019A71B80AD3B7FE2C90E5BF069CCF2053EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:01:18 +0000
Manifest this update: Tue 11 Nov 2025 07:01:18 +0000
Manifest next update: Wed 12 Nov 2025 07:01:18 +0000
Files and hashes: 1: A9fopaXO-fVQpKdJ8LHIGXii_SU.roa (hash: 8zkX8M3Fk6VQlJpwJIcZtNmfIBhTghba03PireQiTxw=)
2: waGQUEttntnBgJaEBCWxHXsi3_Q.crl (hash: ULiUvOwuQvjH+8Al6xFnZF7OMIDa5LSVo6tHAOxk/Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:0a:d3:b7:fe:2c:90:e5:bf:06:9c:cf:20:53:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
Validity
Not Before: Nov 11 07:01:18 2025 GMT
Not After : Nov 12 07:01:18 2025 GMT
Subject: CN=b6c58dc46945993f14448f191e960780fcc89859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:be:c6:71:68:5f:38:c7:ac:7a:61:86:0f:
a6:93:3f:bb:68:15:9a:f0:8a:46:6f:4b:83:dd:aa:
74:c9:da:7a:13:59:fc:04:63:bf:1f:2a:d7:c5:be:
35:13:65:f6:bc:a6:c4:c1:bb:fb:8b:e4:19:b4:0f:
37:65:6e:26:63:b2:4b:cf:73:8e:7a:e2:21:ff:f2:
7b:a0:60:3d:0e:f3:21:9e:82:22:f8:be:56:93:09:
35:26:ab:54:03:b2:1d:0b:19:6d:99:9e:b7:06:0e:
29:ac:27:25:f9:75:f2:d7:c5:d3:47:76:85:35:ef:
4c:dc:ec:65:e9:c7:47:81:a3:b3:4d:f9:8d:2c:1f:
f1:15:6f:62:29:87:0f:bb:a4:a7:ee:4c:65:49:ce:
10:ee:68:67:13:c1:a2:fd:fc:0f:70:11:b2:da:a7:
42:14:40:34:c1:eb:6a:0e:18:03:7a:0f:35:3f:69:
f7:4c:26:8b:31:9f:19:c0:18:74:78:4f:22:13:04:
18:81:1a:80:cd:8c:63:34:9e:3c:2e:a0:b0:7d:5a:
0e:cd:09:05:b2:fb:2c:64:48:14:0b:b2:11:77:7e:
61:d7:f6:32:1f:2f:fb:b9:66:a6:2e:7a:4d:7d:25:
60:b8:dd:b4:d8:27:a1:78:58:ca:45:8f:40:38:99:
23:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C5:8D:C4:69:45:99:3F:14:44:8F:19:1E:96:07:80:FC:C8:98:59
X509v3 Authority Key Identifier:
keyid:C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:17:8c:6f:6c:e1:5b:85:63:69:64:b6:d7:e5:06:54:61:d5:
22:83:b0:85:9f:1a:53:36:9c:58:f1:92:5f:36:9c:5f:43:89:
d4:87:11:e3:b1:3a:7f:d0:91:a8:14:b6:8b:f9:44:0f:f6:d2:
28:7c:a1:0b:30:8f:92:76:ea:16:03:8f:dc:48:75:7a:18:a0:
09:50:fa:f1:0f:2a:4a:70:aa:b9:bb:01:5b:37:2c:dd:e3:ab:
4f:93:36:b8:ef:53:c6:a9:9a:7f:54:e6:be:aa:9c:af:41:10:
10:ff:d8:0d:6c:57:06:8c:ab:24:bc:e6:86:36:de:01:d2:cc:
fb:bd:e0:b3:b4:d2:44:90:c6:e3:c2:f6:a8:f1:2a:6d:31:0b:
f2:13:5a:b4:4f:3d:f5:13:85:f3:4c:0f:16:e7:07:63:52:ef:
e8:39:d8:f7:56:70:ac:e9:8a:8a:e3:9c:49:68:ab:51:40:e6:
1b:19:93:c3:6f:1a:f7:79:2b:37:de:19:29:23:e7:be:71:ec:
e2:3b:fe:90:3c:d5:b7:e0:6d:84:b4:96:9e:c3:5f:62:8c:37:
cb:56:80:d9:11:43:bc:84:27:87:27:ad:e7:b5:75:24:59:7e:
e4:5c:86:19:33:10:7c:a7:c2:09:bc:27:4a:ce:ac:39:7f:d2:
c8:62:d5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:52 2025 by rpki-client