Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
File: WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft (raw, json)
Hash identifier: k0Gzf+g4ES9O7kL9GcjdKkjE+m0TtNWrek7S6jbXXFM=
Subject key identifier: 8A:02:03:37:2B:90:29:27:F1:A0:CF:0F:35:40:1B:B9:1E:80:77:79
Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
Certificate issuer: /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Certificate serial: 019A006C0981DCF18DB65A299814CDF49518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 07:01:11 +0000
Manifest this update: Mon 20 Oct 2025 07:01:11 +0000
Manifest next update: Tue 21 Oct 2025 07:01:11 +0000
Files and hashes: 1: WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl (hash: XkNelg7Cd/D450IEpTL1lFwaysMEdIzu4xniiccMUEU=)
2: p2E40VAywU1E-b5C3yq5INQnhfY.roa (hash: +wh8lIkPmW8LdXYFPZaG+wiXZeTnTUYIdRcRymup/Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:09:81:dc:f1:8d:b6:5a:29:98:14:cd:f4:95:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Validity
Not Before: Oct 20 07:01:11 2025 GMT
Not After : Oct 21 07:01:11 2025 GMT
Subject: CN=8a0203372b902927f1a0cf0f35401bb91e807779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:2b:b1:74:f1:86:7b:7f:06:d7:55:4d:5d:
5e:5b:a9:ef:0d:ba:77:f8:ce:6a:71:34:2c:ce:20:
4f:15:95:e2:1c:83:ae:d4:f5:8e:fa:b5:ea:9b:38:
67:42:4a:ea:5f:f7:df:d7:eb:e4:b8:43:13:08:e7:
9d:6f:1c:69:e7:8b:10:08:c8:55:e9:e6:dc:c4:94:
44:a6:0c:c6:57:06:b9:c4:6e:63:5f:ff:c0:f1:13:
29:95:35:27:e4:d6:df:2a:8c:c0:2d:21:20:e1:e4:
22:91:9f:4b:53:9b:9f:4d:e7:2a:0a:c4:a3:b9:35:
f4:1c:55:07:9f:ec:1e:eb:8d:ca:8b:e9:11:8d:e9:
32:92:ba:08:46:71:9b:df:9b:52:e5:64:6e:78:73:
9c:7e:69:f5:4c:3f:e9:2f:26:c7:72:cd:7d:8d:d3:
8b:52:79:d9:7c:a3:59:71:db:b5:f0:01:ee:d7:e6:
e4:05:d2:74:a3:40:af:6d:d1:3a:91:7d:41:34:8a:
7d:4f:df:14:b4:eb:91:ba:58:60:33:ba:9b:dc:ad:
87:ea:6d:83:0c:23:c5:b6:16:01:fb:2f:9a:fe:d6:
0b:8f:42:e7:6a:7e:98:80:da:3b:b3:77:a9:47:a3:
46:cc:ee:fc:98:f7:1d:c9:5e:cb:2a:2c:33:e0:29:
16:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:02:03:37:2B:90:29:27:F1:A0:CF:0F:35:40:1B:B9:1E:80:77:79
X509v3 Authority Key Identifier:
keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d8:63:9d:51:c7:66:d4:6b:cb:12:6e:b0:8a:f4:9b:dc:79:
84:02:fd:44:1f:8e:28:e5:ad:63:c9:56:bb:ba:01:3c:bd:cf:
3f:aa:fe:d6:3e:72:56:09:bd:a4:50:c9:9f:c8:0f:79:0b:6b:
b1:13:97:21:ae:97:57:5d:02:93:3e:f2:ce:6c:c0:02:8e:dd:
15:3b:e6:68:ca:e3:67:be:91:2d:f5:f4:56:11:a5:ad:28:e3:
cc:63:a4:54:d2:5a:11:ef:8c:f9:9a:69:7e:dc:3a:94:56:82:
22:91:93:31:43:60:ad:a5:54:b8:b7:e4:88:84:21:cd:93:37:
58:41:27:6b:36:33:b6:99:68:cc:74:34:e8:93:98:ff:d5:34:
5f:7a:17:1c:f2:1f:91:e4:56:20:31:37:12:9e:07:b7:ef:10:
86:af:c5:88:b0:75:8f:e8:ce:fc:ee:c5:f2:ae:92:40:ba:26:
89:3d:7e:32:bf:7d:f6:8d:09:78:ee:5d:89:b5:25:8e:00:c3:
f7:ba:c7:11:78:a2:b5:7a:5c:34:33:52:8a:79:f2:8b:e2:fe:
d9:8b:ab:54:6c:a9:c2:7e:cf:c8:de:01:fa:e4:6d:e9:43:70:
f1:d2:fc:8f:ab:6f:90:88:9a:9b:5c:e2:c1:e4:32:c1:55:dd:
95:a8:74:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:11:56 2025 by rpki-client