Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json)
Hash identifier: wig1GQ6EgwBulYPCaoelpi34LZMcxvYfpEYtX33NKSE=
Subject key identifier: 56:5E:47:CC:97:F5:0D:78:8A:00:69:6E:35:6C:F3:F2:05:22:24:28
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial: 019A4E86A6EDA27926905BAC507A615D4172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
Manifest number: 04F0
Signing time: Tue 04 Nov 2025 11:00:38 +0000
Manifest this update: Tue 04 Nov 2025 11:00:38 +0000
Manifest next update: Wed 05 Nov 2025 11:00:38 +0000
Files and hashes: 1: RhPTeugmZDfkfUBJoLhRret8XmI.roa (hash: H4OyvWIew7LAcqrSk19ToeJf4eN45LOuyTBAz8MK5+Q=)
2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: RYF70qw+HRscYt0vXilYFsnAmDZbU6SNGZlfIdlB8HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a6:ed:a2:79:26:90:5b:ac:50:7a:61:5d:41:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Validity
Not Before: Nov 4 11:00:38 2025 GMT
Not After : Nov 5 11:00:38 2025 GMT
Subject: CN=565e47cc97f50d788a00696e356cf3f205222428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:f8:7e:52:ea:f5:9d:3c:f1:ad:c7:f6:62:
7a:d0:36:6f:d1:b8:8b:ca:a5:dc:40:e2:36:af:7d:
6c:98:28:c8:d5:a2:f8:c0:84:c2:29:21:e2:a3:d7:
4d:94:80:c2:2b:20:60:3c:fb:97:55:ac:a3:44:02:
20:03:7e:64:7e:61:e9:a0:87:94:b4:19:7e:57:02:
bd:51:01:16:31:4e:c1:c1:91:f7:b4:3c:e7:75:49:
27:88:13:8e:b9:3e:ba:4d:d0:a4:ed:9e:8b:7b:4a:
e0:16:d6:57:a3:90:7a:7a:67:2c:be:72:41:8e:95:
7c:5d:63:20:7d:e6:44:f3:d5:92:4f:2c:c8:70:c4:
5e:11:40:62:d8:7e:59:49:fe:97:67:47:1f:87:dc:
0d:47:67:c0:26:20:36:0e:e0:55:3d:f7:c4:d3:aa:
6c:38:7b:d5:fe:b7:5f:b6:01:7b:11:77:49:7f:81:
15:56:4a:e4:8e:14:73:93:71:86:a6:1e:44:6a:9f:
c6:7f:42:e0:82:bc:a7:3a:d0:20:2f:bd:de:51:7c:
ec:02:7a:54:bf:81:99:ed:97:ed:e4:79:35:fa:d3:
30:b4:0f:18:61:fb:1d:54:c1:e0:77:c8:7e:9f:6a:
70:36:41:69:82:33:0e:f8:71:91:b2:51:67:ed:49:
e4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5E:47:CC:97:F5:0D:78:8A:00:69:6E:35:6C:F3:F2:05:22:24:28
X509v3 Authority Key Identifier:
keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a5:ea:f5:4b:2e:cc:5e:a8:9d:de:da:a3:f1:c0:a1:9c:50:
26:a3:4e:cd:42:06:6b:6c:35:2d:56:02:94:9e:c6:f5:dc:5d:
2f:aa:1a:19:53:aa:7b:08:8c:3b:48:81:e8:27:63:88:49:03:
ad:ca:25:18:3c:07:d2:c0:a1:d7:81:37:01:3d:36:0f:f2:ae:
4d:01:e5:c2:a8:67:45:b1:69:d5:bf:49:3e:c5:67:b3:15:5c:
e6:8a:9b:5f:d7:0e:9f:cd:85:7c:56:e7:a4:7f:10:7b:23:ed:
a2:aa:51:77:ff:23:a1:31:11:8a:37:6e:ca:2b:6d:ff:6f:dc:
5b:73:59:0a:1c:69:10:d3:c8:89:13:f4:d0:33:c7:58:df:a8:
1c:99:ee:78:75:2e:3e:24:62:35:55:33:91:c8:f5:a4:7f:e0:
e3:e4:31:ea:07:48:61:97:7b:38:b3:23:ac:13:62:a2:f3:0e:
24:25:78:ff:20:d5:46:67:51:24:d6:bf:ae:2b:d4:52:59:0b:
f4:44:b1:68:6c:b9:2e:2c:ff:03:c6:a5:1d:b8:05:ba:69:c3:
f9:f5:93:3d:32:d8:fc:1a:19:c8:b9:01:c3:d5:4e:24:e0:17:
86:5f:ef:5c:fb:c5:34:54:5c:3e:63:9d:85:d0:87:67:63:14:
14:06:73:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:32 2025 by rpki-client