Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
File: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft (raw, json)
Hash identifier: i0cWcDfVNAUTkV6reyk8uRLtJATump8pghiUl/vZiro=
Subject key identifier: 5F:9E:B9:C6:3E:66:08:4A:63:FC:DD:49:1D:8E:39:C0:C3:78:38:09
Authority key identifier: 5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42
Certificate issuer: /CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42
Certificate serial: 019A7112D74A608747E330D4C53CDB9DFCA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
Manifest number: 0F4E
Signing time: Tue 11 Nov 2025 04:00:51 +0000
Manifest this update: Tue 11 Nov 2025 04:00:51 +0000
Manifest next update: Wed 12 Nov 2025 04:00:51 +0000
Files and hashes: 1: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl (hash: PpTB5mrUWyc7+IqD8BTP+nJfbOhmJ0Ga613PwA601CQ=)
2: sKACgvTr5E2KmqilEPnCMtDVWp0.roa (hash: GFqzFhApZWxNeYshDRfyRg5L0vTOIJdMwgZ8ZtOAg9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d7:4a:60:87:47:e3:30:d4:c5:3c:db:9d:fc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42
Validity
Not Before: Nov 11 04:00:51 2025 GMT
Not After : Nov 12 04:00:51 2025 GMT
Subject: CN=5f9eb9c63e66084a63fcdd491d8e39c0c3783809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:44:20:45:e1:c5:3a:49:ab:ca:fe:8f:8b:
a9:a5:cf:ad:c4:a9:7f:cf:84:4c:d7:49:08:18:0f:
f5:a6:cc:7f:cf:ec:55:7c:47:e8:e0:ec:e0:45:21:
0e:45:e7:6c:88:90:e4:19:df:13:7e:c6:de:a7:10:
cb:fb:9f:54:5b:2d:be:8e:56:fa:b2:66:96:0a:f5:
2c:8e:be:73:00:78:78:7a:2c:e9:f7:73:52:60:67:
e1:04:a3:94:3d:fa:17:34:9a:38:5d:17:f9:1d:ee:
f5:da:d5:f4:ec:36:73:a8:d7:fd:3f:21:14:75:3e:
54:da:c2:01:f7:a6:92:f2:1f:4e:e3:a0:96:7d:d8:
b2:81:ad:de:3f:1b:d2:0f:74:74:1c:b4:2f:09:5f:
fa:8b:fe:a4:85:21:54:1d:68:10:8f:e5:99:63:6c:
78:c0:48:33:43:0e:4e:6f:82:80:73:6f:1a:7c:bb:
b2:74:d0:53:dd:5a:f8:65:f3:0b:be:6f:3d:a8:aa:
a5:36:1f:c1:d0:b1:96:4a:5e:f9:5b:ef:22:8f:34:
23:8f:45:f7:66:36:03:f3:9d:5c:c4:b2:e9:ae:75:
c9:04:22:69:f4:d9:f7:c3:f5:fb:b5:f3:cc:48:69:
2d:23:7b:34:c4:a1:2a:0e:c6:46:24:17:d3:de:42:
f6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9E:B9:C6:3E:66:08:4A:63:FC:DD:49:1D:8E:39:C0:C3:78:38:09
X509v3 Authority Key Identifier:
keyid:5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:45:8c:a2:8b:87:47:e1:d8:bd:1e:09:18:51:5f:8f:3c:84:
10:0c:b4:41:94:b0:c4:40:d0:fc:a5:d2:54:70:60:45:1f:1e:
61:b3:b5:d5:6b:24:0c:f2:6a:bf:9c:df:36:cd:29:51:b4:ca:
30:53:75:72:44:00:a3:d6:cc:cd:5e:2f:80:d5:21:31:58:1a:
70:a6:3b:4c:bd:7a:74:65:22:1c:36:5e:ac:53:b2:f8:54:94:
b4:73:39:37:17:d2:db:cf:0a:e0:d6:10:34:70:e1:81:df:4c:
98:03:54:4e:e4:1a:c2:a9:ff:52:04:f7:ab:d9:2d:d4:bd:f7:
ad:2c:25:ff:70:21:e1:c5:37:cf:4a:24:2f:b7:ae:ee:eb:18:
38:65:9e:4e:7d:9f:fa:e1:5b:07:e8:4e:93:d3:38:fa:eb:6b:
97:d3:91:ab:cc:1f:76:ac:9f:3c:c6:e3:2c:7b:85:d7:7d:23:
d7:ff:65:bc:df:44:6b:f1:54:2a:a5:90:4a:ec:31:f5:15:e7:
13:4c:48:5e:71:f3:60:9b:ee:bf:70:d5:c1:15:dc:bd:a7:b3:
b2:9e:63:69:31:17:30:ef:ac:4b:9c:8a:64:a6:3a:6d:fb:d5:
16:e6:10:97:c0:32:32:ee:54:70:7d:e5:ab:23:50:e2:10:14:
fe:23:69:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:03 2025 by rpki-client