Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
File: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft (raw, json)
Hash identifier: o6psuKlbfemer1SePhw47LuqxaKejMCXcrbZs/1Y+X4=
Subject key identifier: 24:F4:07:D7:D4:76:68:FC:49:7F:D6:F4:0B:1E:E0:28:A6:1A:B0:4D
Authority key identifier: 5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42
Certificate issuer: /CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42
Certificate serial: 019922FAD8A0203D9BDB15C256962A4E50C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
Manifest number: 0EA1
Signing time: Sun 07 Sep 2025 07:01:28 +0000
Manifest this update: Sun 07 Sep 2025 07:01:28 +0000
Manifest next update: Mon 08 Sep 2025 07:01:28 +0000
Files and hashes: 1: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl (hash: styxd7eHF8St6xoHJkpZ/0fvlxLZSKmj2bSsd/f4f+w=)
2: sKACgvTr5E2KmqilEPnCMtDVWp0.roa (hash: GFqzFhApZWxNeYshDRfyRg5L0vTOIJdMwgZ8ZtOAg9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:d8:a0:20:3d:9b:db:15:c2:56:96:2a:4e:50:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42
Validity
Not Before: Sep 7 07:01:28 2025 GMT
Not After : Sep 8 07:01:28 2025 GMT
Subject: CN=24f407d7d47668fc497fd6f40b1ee028a61ab04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:5f:0d:c0:dd:cd:08:c9:40:d0:8d:54:7a:
4e:67:69:20:c9:ca:80:ff:89:65:15:22:6f:c5:19:
a8:97:dc:98:24:38:25:b8:82:29:70:be:f8:14:50:
9b:7b:6b:d4:9d:f5:4d:f6:77:8a:9b:b2:ff:54:ff:
03:89:3a:6a:fc:f8:55:54:2a:6d:ab:c3:8f:56:4a:
5b:4a:d9:14:05:20:53:dc:28:5f:9c:e2:08:3a:ea:
28:ec:ae:41:00:dd:76:6a:c4:31:25:21:b6:d9:cc:
eb:a7:64:b3:56:02:6f:6a:44:da:95:ea:b2:93:1f:
9a:b3:96:35:e6:5b:9b:a4:f0:55:81:5f:0e:18:a9:
90:58:c6:b4:22:f4:8b:df:f3:db:12:e1:98:64:a2:
a1:4f:d7:cb:d2:af:51:b7:3d:3d:31:43:7a:62:ed:
b1:b6:9d:d4:af:1c:63:3e:44:35:8f:42:d6:6d:d7:
dd:03:a5:6d:82:29:44:f7:8b:d8:97:e6:e3:13:6a:
dd:8e:73:9c:62:97:98:db:35:9a:83:23:6a:1f:be:
b7:17:89:5d:41:9e:22:e3:db:72:2e:04:9a:cc:1b:
a2:d1:9f:77:53:14:73:8b:ef:8b:e4:f5:6c:7e:76:
96:13:28:a2:eb:ba:04:8d:1d:6b:0c:21:aa:94:e5:
bf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F4:07:D7:D4:76:68:FC:49:7F:D6:F4:0B:1E:E0:28:A6:1A:B0:4D
X509v3 Authority Key Identifier:
keyid:5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a3:fb:81:24:a5:3d:e0:5b:31:92:a4:c1:e8:f9:23:c1:6e:
51:3b:73:c3:51:9b:34:d5:de:32:4b:79:6c:af:88:6c:f6:c2:
1f:16:c1:49:82:db:a8:eb:13:b3:aa:65:91:46:a7:9a:2e:45:
65:62:57:f6:18:4d:32:a2:01:a3:dc:03:5e:83:14:4b:b3:33:
10:2d:a7:58:08:0b:30:0d:aa:69:dc:3e:c2:e4:dc:ae:8f:06:
f5:fb:2d:78:53:b8:1c:4e:1b:5a:8b:d6:66:f7:76:f1:60:d8:
02:6c:69:28:54:0d:53:80:25:db:b7:44:3b:06:e9:c6:b2:02:
ea:79:ba:c2:1d:33:c4:b1:1c:89:66:90:bb:b8:44:e6:1b:9f:
3f:79:ed:76:97:6c:78:92:36:96:b1:58:5d:74:fd:07:d1:ed:
db:e1:29:24:c3:26:f9:6c:cb:77:c4:21:a6:3d:5c:63:e3:f5:
22:a8:7e:51:2b:d6:2c:f6:b7:a9:52:f8:07:96:a8:45:a1:3d:
bc:67:fe:89:3f:dc:46:7e:8a:ef:88:a3:49:11:4a:d8:3c:41:
3f:8c:4e:39:4a:14:e6:c8:1e:54:ca:d1:61:2a:bf:ea:9b:1f:
75:08:7d:2b:53:e7:e8:a3:ed:f9:0b:9b:3d:0f:f8:95:60:a8:
05:c4:c5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:20 2025 by rpki-client