Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
File: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json)
Hash identifier: /uRVmQcKVpi9DubW1PkAbHNz2XqnkAp10OSie83PbOA=
Subject key identifier: B4:64:42:3F:AC:3B:82:B0:60:55:24:B4:5E:DA:2A:54:6F:80:07:04
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Certificate issuer: /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial: 019A30455C74078DFF732FCFB648EE6761D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
Manifest number: 16FD
Signing time: Wed 29 Oct 2025 14:00:43 +0000
Manifest this update: Wed 29 Oct 2025 14:00:43 +0000
Manifest next update: Thu 30 Oct 2025 14:00:43 +0000
Files and hashes: 1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: cA5l4ZIFlWgrfMTEcLaixTgWDy+kxlNiIoPVR49Tuu0=)
2: s9vftAOB-g2w5mpIAbtd2ux_YeM.roa (hash: vWHWtXPoZqDrxtoN/353NMnYSKtaPj8wKrdcVBwN80A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:45:5c:74:07:8d:ff:73:2f:cf:b6:48:ee:67:61:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Validity
Not Before: Oct 29 14:00:43 2025 GMT
Not After : Oct 30 14:00:43 2025 GMT
Subject: CN=b464423fac3b82b0605524b45eda2a546f800704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:71:07:4d:06:c3:7a:fd:a5:93:e3:bc:44:
c7:a4:00:db:19:ab:4c:43:9f:81:8c:db:e9:03:e5:
aa:14:4a:e3:a6:75:07:09:45:6b:7f:30:17:ff:10:
c9:19:45:68:07:79:93:9d:81:39:74:ab:3b:71:85:
74:76:42:12:9e:5f:92:7c:d7:9d:79:ed:2b:b3:50:
ac:e6:bb:43:66:aa:08:ca:66:cd:a3:44:a0:a5:28:
8e:22:5b:e1:a4:f0:0b:80:fe:9b:bf:ae:0d:9a:39:
a9:94:20:9a:38:be:d4:a4:f2:73:6a:bd:c0:cf:97:
8c:3c:90:80:cf:12:80:0a:98:f6:41:81:7b:9f:b7:
bd:95:b1:16:49:97:02:c1:70:5b:5e:46:14:69:15:
80:f3:a9:68:9b:dd:16:04:25:b3:ab:0b:6d:0e:5f:
dd:6e:61:fb:93:84:dc:4a:c3:9e:02:69:f4:a5:0f:
43:02:39:06:4a:3e:46:5f:c7:09:c0:02:9d:fa:5a:
fb:9e:a5:e9:c7:9e:07:4b:1b:8e:22:a0:d9:a5:a9:
33:a6:72:ca:8b:2e:1f:c0:93:cb:95:4e:e6:44:0a:
e9:bf:ed:1b:fd:6c:87:ff:3b:96:24:39:c0:51:54:
47:58:ce:fc:b8:c1:e2:64:9b:7b:f5:f8:4b:fc:cd:
fc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:64:42:3F:AC:3B:82:B0:60:55:24:B4:5E:DA:2A:54:6F:80:07:04
X509v3 Authority Key Identifier:
keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:79:43:b8:06:30:e3:b3:22:89:45:b5:a2:45:9b:17:f1:55:
8b:0c:d7:92:86:b1:a4:e3:34:85:30:69:69:2b:51:80:7e:23:
ad:04:12:23:21:e9:dc:29:ce:49:53:f7:15:73:f2:2a:ac:57:
30:36:55:2b:73:2b:ec:17:c8:e9:be:df:cf:81:31:54:16:0f:
06:af:26:da:4f:70:74:5e:22:69:fd:b0:a1:c3:41:46:6e:7d:
ef:cf:f0:fe:cb:28:71:08:eb:e8:f4:bd:fd:fb:e9:18:65:fe:
a2:5b:db:25:14:be:9f:47:93:74:09:f5:71:f1:6e:36:83:4d:
77:eb:50:15:42:0d:da:d0:95:ad:f8:0e:75:bd:33:9f:26:a2:
fb:72:75:2f:0c:a5:24:83:62:6a:43:4a:ae:a8:53:52:75:83:
e6:5d:81:85:c4:17:3f:aa:e1:46:ad:7a:11:28:75:ab:e5:c8:
e0:00:67:ae:f7:6b:11:b8:8e:b6:34:b6:ef:86:a5:0d:fe:c2:
a7:e0:ad:93:31:6a:c2:63:58:52:48:e8:e8:1b:e7:a1:5d:17:
6f:46:e1:24:4b:5c:34:7d:0c:d5:22:29:23:0f:1f:92:05:c8:
79:ca:70:02:2b:c5:f2:11:99:3a:1c:52:de:18:39:72:ec:68:
e5:42:15:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 17:37:24 2025 by rpki-client