Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
File: wqkR1pxPZFehCd53scdSSdxTDhc.mft (raw, json)
Hash identifier: BKeKI/gIW0N4RByFpAfPEaKvnHc3p9NmGPqZvVsQ+y8=
Subject key identifier: 4E:92:43:26:CB:53:55:04:BC:97:13:57:CF:3B:C2:E8:5D:FE:9E:64
Authority key identifier: C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
Certificate issuer: /CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Certificate serial: 019A500719EE3EFFECA640B47FDF69885482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
Manifest number: 0980
Signing time: Tue 04 Nov 2025 18:00:33 +0000
Manifest this update: Tue 04 Nov 2025 18:00:33 +0000
Manifest next update: Wed 05 Nov 2025 18:00:33 +0000
Files and hashes: 1: JlMTszQ0SriAWERqlr9FMnp6WvU.roa (hash: M6WDGwhPPqHvkOqSI6cVPu36gkAbrulfoDxAqaGV7po=)
2: wqkR1pxPZFehCd53scdSSdxTDhc.crl (hash: wFW8c7IO+nz0e8FhPvlpv5P1wmUWeD5nWrELrlqCfUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:19:ee:3e:ff:ec:a6:40:b4:7f:df:69:88:54:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Validity
Not Before: Nov 4 18:00:33 2025 GMT
Not After : Nov 5 18:00:33 2025 GMT
Subject: CN=4e924326cb535504bc971357cf3bc2e85dfe9e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:e7:b5:e8:c9:34:ff:14:7e:ac:4d:dd:7c:
b3:f6:e2:a2:b0:75:bd:9d:70:0b:a2:4b:a5:64:77:
95:b0:3d:ba:56:19:d1:0e:12:9f:12:e2:3e:ad:5a:
28:4c:d0:3a:0a:65:67:0d:93:c4:11:a9:6e:83:a5:
87:05:27:31:bd:ec:d6:3b:2c:95:a5:e7:71:e1:8f:
53:13:c0:55:df:34:40:5e:ea:50:c6:a6:c4:cd:0b:
18:92:71:03:0d:e4:e0:17:b8:b7:de:0b:c2:cc:86:
57:95:38:45:61:56:ea:96:02:96:52:bf:1c:e3:c4:
b3:26:ce:8e:b1:53:1b:0d:8b:e8:ef:14:ac:f9:af:
fe:5d:78:2a:7c:b2:de:49:b0:38:69:d7:80:6b:20:
67:8c:b6:5e:87:72:aa:42:c2:c6:1e:b5:56:07:f3:
cd:7c:02:05:7b:43:9d:ed:dc:fa:18:ac:e1:19:0d:
fb:05:28:fc:23:34:6f:06:7a:64:ab:cf:a1:9c:6b:
c7:d5:88:0d:4f:61:da:cf:e6:af:9b:e3:84:a5:ba:
fe:7f:aa:d6:1e:e9:e8:6a:2f:d8:1d:ab:6d:85:c0:
0e:ba:32:51:e4:b5:89:18:d1:a3:f3:a0:3d:1d:e3:
53:3c:87:80:18:e2:6b:19:90:68:1b:57:a7:79:7a:
57:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:92:43:26:CB:53:55:04:BC:97:13:57:CF:3B:C2:E8:5D:FE:9E:64
X509v3 Authority Key Identifier:
keyid:C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:d3:c9:1f:2a:46:99:53:ce:43:d1:b6:8f:15:e7:a3:69:01:
4f:1c:17:71:1e:e0:fc:49:ee:15:b7:e3:c5:9b:78:9a:2f:7a:
e0:0a:be:b6:71:34:2c:26:c9:a2:63:2c:21:83:43:14:86:72:
53:05:e8:93:94:bc:92:42:f3:1a:42:12:9e:87:b6:3c:9f:af:
8a:f8:e8:5d:5e:e0:72:b8:cb:d0:df:fe:99:03:f4:e6:03:f0:
89:9f:2d:47:fa:de:0b:c9:c4:50:a4:0c:be:86:00:21:8f:17:
48:45:4c:ec:f3:35:3c:85:18:13:b6:bc:6b:45:98:55:19:a7:
3c:49:4b:7a:f7:e0:be:cb:35:10:28:94:32:50:66:ec:83:c3:
c4:0f:38:93:bd:46:0f:e7:64:55:8a:01:5e:2c:ca:24:d7:f3:
c3:5c:97:2e:28:79:e6:c2:5d:f3:58:86:24:ae:3b:91:20:88:
8d:96:32:df:95:a4:40:b5:3d:d3:bf:36:90:ea:c1:56:6a:d9:
34:19:df:52:1a:39:b0:da:7e:78:dd:6c:ca:9c:13:e8:05:45:
95:99:42:00:08:83:ef:d6:15:34:08:e4:36:0c:1d:45:f7:3f:
4a:9d:fb:47:0f:8f:71:f3:66:a7:78:1b:8a:bb:af:d3:03:cc:
da:dc:1f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:25 2025 by rpki-client