Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
File: 1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft (raw, json)
Hash identifier: M4rSTzvYv5OjJgK7KzKUuN9Av2LxNcm0rie6XftWsY8=
Subject key identifier: C3:11:57:D3:31:19:FC:5E:2A:D6:06:1F:F0:13:C8:D1:CA:48:81:2F
Authority key identifier: F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
Certificate issuer: /CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Certificate serial: 019A4EF5E3530EDAA0DCB9325E38F00511C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
Manifest number: 16E1
Signing time: Tue 04 Nov 2025 13:02:08 +0000
Manifest this update: Tue 04 Nov 2025 13:02:08 +0000
Manifest next update: Wed 05 Nov 2025 13:02:08 +0000
Files and hashes: 1: 1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl (hash: XNLYUVxtCkcwReutZZRxkrWPSovDU6/5siIpL2X6BiA=)
2: RE9prd7FLL4SwOjjJYHPgR-KjRA.roa (hash: Sw7bEXCnPMRdQGTTvTVklNLKC4QRIicMav6wH2FfRDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e3:53:0e:da:a0:dc:b9:32:5e:38:f0:05:11:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Validity
Not Before: Nov 4 13:02:08 2025 GMT
Not After : Nov 5 13:02:08 2025 GMT
Subject: CN=c31157d33119fc5e2ad6061ff013c8d1ca48812f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:1d:64:b6:d2:40:0b:cf:89:1f:b9:22:36:
e3:28:0c:0f:d0:e2:f0:8a:fb:76:5c:dd:a8:43:16:
b7:6f:a4:85:8b:56:7c:86:09:c3:7e:08:6d:ba:28:
43:a1:be:09:d3:48:1a:d9:59:c8:73:06:52:6d:5b:
4d:05:7a:b2:87:d6:4c:dd:72:5a:99:18:03:a9:22:
9f:d7:6b:1b:aa:cd:7d:09:06:94:c5:9f:ea:bf:f8:
26:ac:c5:ae:75:0e:b1:cf:7c:2a:12:ff:fd:3e:e2:
17:30:f3:f9:c7:3a:d9:f8:8e:b5:40:99:dd:70:d2:
82:ac:60:f1:17:dd:eb:00:ad:61:05:9c:b7:4d:1b:
24:a0:de:8d:88:7f:d4:47:c9:34:04:b1:14:52:68:
cb:a8:b8:55:50:76:64:0d:1a:d2:bc:57:3a:d2:8e:
3b:c0:e8:85:75:36:59:7c:fc:8e:ab:38:b9:e2:1a:
ef:7f:ad:26:a3:75:c3:08:8c:55:7d:b4:7c:1f:ad:
2a:89:0e:a6:6c:68:20:c0:bc:f5:8b:19:76:12:ab:
27:99:88:c2:f6:f0:60:83:d0:52:7f:16:c7:4c:34:
2a:fe:d4:f9:1f:fe:6d:85:0c:1a:10:ce:d4:04:ed:
e4:25:d4:4e:bd:f3:46:e0:95:21:9f:a3:b1:b6:d1:
9a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:11:57:D3:31:19:FC:5E:2A:D6:06:1F:F0:13:C8:D1:CA:48:81:2F
X509v3 Authority Key Identifier:
keyid:F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4e:a3:b2:b4:2b:64:ae:90:07:e3:00:e2:4c:13:27:6e:68:
73:e4:2c:98:7b:4e:d8:20:d3:04:82:bc:79:87:b7:79:0e:99:
7f:4b:c5:1d:6d:3a:ba:5a:63:bf:83:ad:76:78:a9:81:1f:f0:
2f:50:9b:4b:c3:20:3b:54:ea:c9:87:3b:ff:32:85:07:ed:a8:
38:76:b6:dd:92:6c:d4:a3:55:5d:24:1f:bb:9d:60:e8:c1:07:
b8:69:7a:80:8a:e2:ad:d6:2f:2c:c7:7d:0e:95:e8:62:fc:a8:
fd:f1:f3:0e:c8:cf:7d:df:d8:8e:ad:1f:e2:3c:28:40:71:fb:
3f:18:f0:30:ec:57:1c:51:9b:36:6c:da:ec:94:43:f3:26:c6:
06:31:db:fd:6e:6e:67:8c:cc:3c:ff:07:44:ed:33:02:94:40:
9c:ec:58:a3:83:43:5f:6e:6b:37:b4:bb:de:81:e3:f6:cb:4e:
ad:12:b5:d7:58:10:7a:80:c2:f5:0d:c7:04:1f:1c:d6:a7:f1:
4d:38:2d:ad:e8:12:4c:ff:59:fd:e8:39:e4:19:ce:2d:6f:ec:
89:63:df:da:01:56:5b:73:92:f9:4f:8d:17:39:03:d9:1c:8f:
34:37:e3:f6:ae:a5:cb:33:35:0b:40:84:45:de:ce:95:75:fa:
fa:0e:9b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:27 2025 by rpki-client