Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
File: waskfGNq04m_n4xQdMgiAjDo7cw.mft (raw, json)
Hash identifier: CjArzheWUMTJ/zhibjMVnoiJU9TEL8P75N2hMTDM4zw=
Subject key identifier: 5A:86:D0:04:0C:E6:4B:DD:81:08:32:C0:22:7C:60:97:91:BC:73:32
Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
Certificate issuer: /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Certificate serial: 019A4FD005160101D2C471CDE51E8A8A9950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 17:00:24 +0000
Manifest this update: Tue 04 Nov 2025 17:00:24 +0000
Manifest next update: Wed 05 Nov 2025 17:00:24 +0000
Files and hashes: 1: YhlJJJSXn0316GXMCt3evKM4RRA.roa (hash: GoRGuSI9MFxsC15qVirr/MrX3xBRfDPgJUjig6NxAVs=)
2: l9EgD7Cv7e532Hlt9LLUu3z8_dw.roa (hash: 4Xh0ogOpmmD0jHDBdjnr8Hc05bJosT/Z9VheuQZJvIw=)
3: ux1IC1yxeTUgRbCsz7aKGJRUxDA.roa (hash: Cbk3gKO+GYUzaeJI/vrLpgkHk9pkTZFjphWYEpQbc/Y=)
4: waskfGNq04m_n4xQdMgiAjDo7cw.crl (hash: XcfHhzqZEi5AXg1VWPUUOhioYlvCO7EjwVkxD7Oyx80=)
5: xPSDuA4Q8aGWwP6K3N_nyK74gDo.roa (hash: UU3ufwB67xN9A6E6STJlvefFGKYdsphPt8rIQ8rp99U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:05:16:01:01:d2:c4:71:cd:e5:1e:8a:8a:99:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Validity
Not Before: Nov 4 17:00:24 2025 GMT
Not After : Nov 5 17:00:24 2025 GMT
Subject: CN=5a86d0040ce64bdd810832c0227c609791bc7332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:56:bd:69:ea:31:ea:3e:78:36:00:7f:37:39:
15:57:87:bc:a9:b6:07:1e:24:38:b4:39:b8:2e:4a:
1a:8f:96:e5:96:07:8b:b5:e4:f7:6d:d1:57:54:a5:
6f:37:16:61:fc:06:fd:42:d6:c9:37:7b:5d:07:4e:
fa:f9:d1:5b:bf:9e:7b:bf:1b:aa:2c:4a:68:92:14:
39:e9:c8:39:7a:01:69:7b:12:42:6b:8b:44:fd:d5:
07:a7:fb:de:91:37:6b:cc:2d:36:f7:e1:d5:04:0d:
23:e6:dd:02:b3:d2:80:d3:72:b6:59:ed:6a:a3:7b:
f7:13:85:76:7b:c7:21:78:04:bf:ef:7f:66:b4:dc:
c3:56:c8:2d:60:e0:f0:51:a2:08:7f:c5:d4:2b:35:
84:6d:0f:9f:bc:41:07:59:8b:3f:78:b5:81:80:c3:
99:3e:d5:5f:2a:d9:d0:f3:15:97:d2:2e:df:7c:6a:
e2:0f:b6:09:9f:68:a8:fd:c6:5d:fd:30:a2:25:87:
cf:96:b7:03:92:cc:01:93:ed:04:55:21:e3:fc:67:
ae:aa:41:21:c8:04:29:68:b8:5f:1c:66:13:6c:a6:
c5:5c:20:92:53:9e:50:29:1a:ff:80:eb:12:61:26:
bc:8f:8e:e7:35:32:8a:cc:54:a3:67:d4:3c:2b:be:
16:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:86:D0:04:0C:E6:4B:DD:81:08:32:C0:22:7C:60:97:91:BC:73:32
X509v3 Authority Key Identifier:
keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:75:bc:4e:4e:8a:8f:7b:21:67:56:de:96:d3:83:1f:44:17:
0c:da:7f:42:b4:64:09:b1:9a:e1:3b:22:ea:78:80:66:ac:0e:
b6:db:25:a5:b5:97:94:0b:ea:a6:e8:f0:6d:98:03:30:c2:b5:
9d:55:e1:4b:ff:1c:6d:96:54:c3:ac:20:79:00:0c:28:df:89:
e7:fd:b2:d2:91:e3:23:76:9b:bc:86:0d:dc:0c:8b:08:7c:7c:
c5:4e:bc:67:fb:4a:cb:c7:d5:41:f8:ad:48:98:fb:c5:72:56:
14:d6:ed:10:d9:7b:b5:8f:71:1e:b5:56:2e:c2:e7:16:af:b6:
af:dd:19:bc:84:b2:d1:f6:de:68:87:15:4b:fb:02:f7:a3:6f:
f8:e0:15:ec:1f:73:db:c2:ec:8c:a9:ec:4b:6d:01:e4:7a:25:
30:90:26:60:9e:5e:66:42:87:c2:f8:b2:15:d6:5b:3e:dc:b0:
92:21:d0:1d:2f:fd:ee:2f:31:94:28:67:97:3a:ce:0b:a6:bd:
4b:75:a2:fc:af:5c:7c:4d:26:1e:93:a9:05:ec:26:c4:2c:72:
ca:51:11:2a:21:07:f2:7c:98:51:62:98:43:68:f2:53:66:87:
0e:d9:12:26:d1:52:bb:79:4c:a6:65:5d:40:82:5b:1a:1f:61:
ee:71:7d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:07 2025 by rpki-client