Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
File: wq_BTc5FCwXshsfFMHDNa7bbx-4.mft (raw, json)
Hash identifier: 7nOaoTqh7fZXyvCrKfWuJMyjDYH9L5kPcD6BoR95wKI=
Subject key identifier: 48:3D:95:C8:E4:13:A4:6B:CB:99:14:94:B5:3C:08:41:29:77:20:46
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Certificate issuer: /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial: 019A503DA75CB31CF33C82F67F8B3D0C4C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 19:00:09 +0000
Manifest this update: Tue 04 Nov 2025 19:00:09 +0000
Manifest next update: Wed 05 Nov 2025 19:00:09 +0000
Files and hashes: 1: 9R7u9NYY_fdGGu9OLtebIHbh-p8.roa (hash: EvXc+WkKL+opgKBNfenegjbhQJ0LX3U13qSmBaz/xEY=)
2: L9HnYDWvNpMZS4pIu5zArdvE5v8.roa (hash: 0/PRNPNH9PE5TqzwlxbNtq6foN9oanZ3LsojHdx7xuw=)
3: khRg4MYEnETJ2jPimtqut6SDcfI.roa (hash: Nu5ttQZeyOdAqpRtT8J7JzoHpXrE1o2QevNWAJZ6hBk=)
4: wq_BTc5FCwXshsfFMHDNa7bbx-4.crl (hash: wZuPvg6qcudnRunfZjtvq7UdaoUtykZwr7BuHbBxJxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:a7:5c:b3:1c:f3:3c:82:f6:7f:8b:3d:0c:4c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Validity
Not Before: Nov 4 19:00:09 2025 GMT
Not After : Nov 5 19:00:09 2025 GMT
Subject: CN=483d95c8e413a46bcb991494b53c084129772046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3a:8b:49:3e:f0:9b:05:2a:c0:b3:f9:1b:9b:
65:a7:a8:6b:b9:88:bf:f7:41:0b:34:39:0c:82:bd:
bb:6f:3e:3f:22:48:95:2e:8c:2c:48:ee:f3:52:d0:
82:0c:75:a9:ce:72:11:12:df:b2:af:99:ff:54:b6:
31:5f:a6:58:c5:26:dd:0c:51:5c:54:cd:15:b4:ff:
f4:34:87:e2:ee:17:83:36:54:72:3c:3f:1e:30:be:
cd:d9:a8:c0:69:08:81:fa:29:ec:da:bb:9f:9a:a2:
c0:f1:fa:67:99:ba:4d:5d:69:7a:c6:09:d8:e2:2e:
19:c6:92:05:43:fb:e2:51:7b:69:27:eb:ef:0f:ef:
ed:2e:cf:4b:28:05:db:49:12:0d:13:d9:8d:01:47:
e2:cc:90:86:ee:1a:6b:ad:b1:1d:c0:90:6e:0f:4d:
af:79:d3:18:77:e4:8a:5c:e4:0b:ce:c9:00:e6:d8:
2e:20:99:24:be:ca:f4:40:52:e1:0b:38:b0:3a:64:
c3:70:e4:8c:e5:dc:a9:8e:17:8d:55:42:e9:77:01:
e8:fb:c5:56:fa:f7:79:72:d7:27:ef:ff:e2:f2:ea:
2d:b1:52:da:0f:9e:53:94:2f:90:11:d6:d4:9d:c8:
f0:5f:7c:e3:30:2d:d3:d5:c1:4d:3b:0e:73:90:0e:
54:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3D:95:C8:E4:13:A4:6B:CB:99:14:94:B5:3C:08:41:29:77:20:46
X509v3 Authority Key Identifier:
keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5f:b1:82:81:84:b4:09:f7:b9:ff:13:c2:28:bf:fd:3d:66:
f6:75:53:33:c0:9c:d7:03:d0:bb:dd:c8:57:b4:8a:99:fc:68:
cc:a9:78:cc:36:cf:7a:d1:18:90:bf:74:58:41:07:74:b8:31:
bb:52:56:e3:e5:87:59:c3:d8:14:49:35:88:6a:5c:63:0a:a9:
77:e9:1a:c2:82:07:e4:96:0a:7e:4d:19:6b:1c:d1:0d:b1:d0:
d3:cf:73:f2:bd:e8:5e:ca:d4:fa:90:b2:b7:17:66:e6:28:e0:
55:5c:f9:7c:28:d0:32:19:3f:51:26:1b:84:8c:51:ad:66:61:
97:72:4f:67:8a:64:2f:1b:86:42:5d:08:94:9b:1c:c7:08:b8:
e2:4f:80:58:88:e0:19:73:f4:d3:df:4b:e9:ab:3f:00:98:11:
1f:d0:2a:b9:b6:e7:ca:2e:cf:a1:32:97:a3:04:42:79:cb:f9:
cd:96:ca:41:83:79:e2:be:f5:21:03:6e:56:c3:ce:ce:89:d3:
7e:13:f4:24:4e:b3:80:53:2b:72:26:95:a6:8b:6d:43:79:01:
95:c3:c9:d3:be:e4:f2:26:60:99:f1:08:27:7e:80:e0:b1:cb:
02:c8:45:58:91:f7:69:31:86:28:6e:69:60:00:56:a6:a0:c8:
44:b6:b4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:08:07 2025 by rpki-client