Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: y6AxsArrjB3+/THtRajtD0ZdETmdbkwvy9FvF2K6Qq8=
Subject key identifier: E0:40:2D:51:1B:22:56:E9:98:54:02:FE:ED:B1:42:35:50:8F:74:B5
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 0199FD3482BB16548EE107D4D85E9B0ADAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 01E5
Signing time: Sun 19 Oct 2025 16:01:40 +0000
Manifest this update: Sun 19 Oct 2025 16:01:40 +0000
Manifest next update: Mon 20 Oct 2025 16:01:40 +0000
Files and hashes: 1: 1Fb4jd1urOHJo5_owKu58GeUbfQ.roa (hash: HWTH5r2vvToQGYptxfGymBxA0UDvVBAeiYA9Tehs7MM=)
2: bkgPAomj5Hty0jREj4Wi4CYSl34.roa (hash: xTOY7fOryKrBCrnTTY9ZhQG8l94maF649pWjsuI216E=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: x329ub/FFuDmbyKPY2s0VMF2I8bntB/50r5h/2Rmogg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:82:bb:16:54:8e:e1:07:d4:d8:5e:9b:0a:da:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Oct 19 16:01:40 2025 GMT
Not After : Oct 20 16:01:40 2025 GMT
Subject: CN=e0402d511b2256e9985402feedb14235508f74b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2b:34:f3:97:d1:12:9b:ec:8f:26:a2:2a:b8:
21:8e:bd:7e:ec:f7:2f:32:2a:a7:d1:00:7b:40:70:
81:cb:9c:ed:6e:16:f2:97:18:bc:12:83:09:ee:f7:
25:61:cc:9b:0a:47:f9:f4:61:ce:c0:51:70:48:a5:
db:0a:1a:1f:9b:bc:37:5b:15:ea:14:0f:e3:d4:33:
24:29:37:40:df:87:85:f7:e0:93:34:f5:bb:33:b4:
72:d8:12:fb:86:81:1d:4e:40:64:d3:b6:14:c1:23:
b2:2a:be:e5:a4:52:7e:cf:b3:80:5c:ac:b9:54:42:
45:db:03:9e:13:08:7d:5f:13:55:bc:7b:0f:b1:18:
99:54:51:52:01:2d:aa:58:ff:72:2c:99:89:f5:37:
78:96:7f:e8:8f:2d:d4:b2:27:98:4a:57:d8:75:b0:
01:87:35:0e:8a:b2:46:5f:96:d0:df:6c:1d:a7:f8:
41:3b:be:af:1d:94:ee:89:fb:42:6e:b4:39:c7:bd:
98:7c:98:5e:26:4b:ec:75:3c:6e:64:98:52:91:04:
f1:7d:d4:d0:8f:bd:90:94:5d:b1:8c:92:b0:89:a1:
c5:d8:a0:2f:cd:c7:1d:1e:f7:b5:59:2e:79:2a:e1:
f2:15:4e:d2:4d:c0:c8:ad:9b:33:37:3d:08:9f:0c:
c5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:40:2D:51:1B:22:56:E9:98:54:02:FE:ED:B1:42:35:50:8F:74:B5
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:39:de:c2:9a:c8:c3:d6:89:ef:25:74:c8:db:f4:ea:2e:6a:
10:a3:95:4e:f4:50:6f:89:16:dd:68:52:6c:07:13:ef:ed:a7:
41:f0:4b:3c:a4:a9:82:64:c7:43:0a:ba:d8:9f:4e:0e:ff:63:
f6:a2:f1:4d:bd:be:08:e2:12:e9:96:7e:fc:01:2f:3f:d6:00:
4b:c8:c4:6f:2f:ec:56:25:d8:22:51:e4:bd:6a:26:df:95:62:
ef:59:d2:cf:3d:32:c9:8a:0f:f3:a8:54:89:e6:76:f8:da:01:
47:97:db:37:53:e6:3b:45:c0:81:f9:62:84:ad:ba:95:64:59:
4b:65:4a:76:83:42:6f:c2:7c:0d:f0:f6:ed:c9:bd:9b:3d:50:
dc:f1:a6:fe:35:23:a0:c1:f3:e7:75:76:ce:3b:0f:db:49:30:
e9:58:ea:05:bd:d0:fd:e4:fa:f5:ed:d8:5b:7a:f1:a7:0c:1f:
89:1d:60:16:ad:9a:64:50:cf:30:82:a4:2a:8e:6f:6b:7e:61:
22:89:cc:44:1f:2b:aa:8e:30:07:da:39:1d:f8:41:df:af:b9:
66:ef:a0:68:c4:fa:13:7b:30:c1:28:42:26:5a:2b:3b:77:4e:
6e:8c:0a:d4:e9:08:88:40:96:6c:28:51:7e:67:8c:a7:76:f6:
79:12:00:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:09 2025 by rpki-client