Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
File: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft (raw, json)
Hash identifier: XYDeRm8e749gZTm0KA39iPmxD7EB7PLm2DGdRhqVoMA=
Subject key identifier: 97:23:D8:D5:FF:C7:8A:86:7D:95:9A:94:CA:E7:E8:94:05:59:49:7E
Authority key identifier: C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
Certificate issuer: /CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Certificate serial: 019A71B8888C27E73F4AAF25D23C34C18255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
Manifest number: 11A3
Signing time: Tue 11 Nov 2025 07:01:50 +0000
Manifest this update: Tue 11 Nov 2025 07:01:50 +0000
Manifest next update: Wed 12 Nov 2025 07:01:50 +0000
Files and hashes: 1: bXwup2eDRWJRx9GTrYPVFoErhfk.roa (hash: UbhOIugJ4oofUAz2tZciGbACV9Kgx7pGWE+kfVDs8E8=)
2: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl (hash: Zh5Hqd+pTtqK+NwktapfPbiLL3MCjWegjjs5lAUK738=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:88:8c:27:e7:3f:4a:af:25:d2:3c:34:c1:82:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Validity
Not Before: Nov 11 07:01:50 2025 GMT
Not After : Nov 12 07:01:50 2025 GMT
Subject: CN=9723d8d5ffc78a867d959a94cae7e8940559497e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4e:9f:53:49:96:59:e3:a6:1d:8f:6b:47:a8:
1c:f0:cc:e1:f4:0d:e3:2d:c8:9c:71:c4:3e:db:af:
a0:d5:61:30:8a:d8:b6:8a:6a:d0:fb:36:25:e7:f9:
2b:02:57:93:89:59:ba:9f:e4:79:03:ef:ad:2a:2a:
d9:be:9e:f2:34:cc:92:2f:bc:0f:aa:82:73:b7:8a:
b8:7c:6a:31:6f:da:2f:5f:2c:8f:9a:25:ff:07:5a:
5a:5d:3b:3a:3c:a9:5b:b7:ae:2f:7c:91:a6:ed:9e:
94:72:80:73:5b:94:25:fd:27:a4:b8:7d:7b:51:23:
1b:d5:d2:cf:4d:1f:cd:dc:88:3e:d1:74:80:50:c7:
de:83:aa:99:d7:b3:95:9e:28:aa:9d:08:7d:cc:b6:
38:ff:22:7d:65:65:10:c9:d0:47:54:c9:44:86:41:
40:32:0e:df:a6:83:cf:29:88:46:cc:ff:71:91:2f:
90:87:8d:62:d3:bb:cf:48:5f:a8:70:a0:99:78:e6:
5a:9d:67:88:4f:b6:09:03:43:9f:3f:af:42:38:ec:
2c:cc:68:e2:ad:8b:c6:1e:9e:2c:bc:d8:dc:29:a8:
de:62:f0:a5:3d:34:cc:8e:7a:3a:7e:9d:1a:88:4a:
7d:61:b4:6f:fc:35:56:c4:15:40:7d:12:87:86:2c:
a3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:23:D8:D5:FF:C7:8A:86:7D:95:9A:94:CA:E7:E8:94:05:59:49:7E
X509v3 Authority Key Identifier:
keyid:C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a1:9a:06:88:d2:d1:73:c9:f4:8f:f4:e7:00:e2:1b:1b:17:
f1:d8:17:49:35:47:c4:a2:d3:38:57:d8:a2:bc:fa:d9:4f:0d:
b9:bd:44:3f:0e:e7:9a:f3:22:eb:df:4b:ca:61:f3:2e:46:7a:
39:cf:da:77:3d:f5:ad:13:35:b0:25:93:54:b2:e3:62:5c:4f:
7b:26:f7:f4:58:64:4d:a8:ed:ba:a7:50:6b:b3:be:1b:da:a1:
db:0a:88:66:85:28:fe:30:a8:bb:a1:98:ca:34:7b:ec:7b:09:
81:9e:77:2c:34:ac:c0:9a:b7:79:29:ee:b3:e1:f4:1b:06:2f:
7f:10:7c:f3:37:2e:12:88:39:6d:1f:cd:b4:16:16:5d:a9:c3:
ae:50:db:03:53:ea:e6:16:31:6a:1d:1a:e2:96:4b:69:ed:f3:
fc:69:5b:2a:63:84:38:13:de:19:97:30:06:79:22:ae:2f:7e:
f8:d2:73:b3:ca:78:34:68:46:62:8b:c0:43:96:14:b2:87:93:
f9:29:db:22:5a:94:dd:20:97:b2:d5:60:b7:0c:ce:d9:aa:ab:
02:de:25:30:fb:29:90:bb:a9:da:63:6d:f7:c0:7e:a8:2b:4a:
db:96:20:49:90:6b:d3:a2:8d:0d:d6:3f:0c:d0:50:aa:1f:ef:
e6:8a:10:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:58 2025 by rpki-client