Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
File: WtYtZLAg5sARSELydiZePAfT6lw.mft (raw, json)
Hash identifier: Qb2nyx9Zkz12d6tOWm18r32jXZE5W/tgGHVsYjXCPnA=
Subject key identifier: 3C:ED:FE:74:D4:87:0D:AB:00:87:AC:AD:F9:BC:C7:FB:6B:A0:C0:56
Authority key identifier: 5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
Certificate issuer: /CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Certificate serial: 019A4DAA7A0E82A5CF0656FF86181B144358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
Manifest number: 031E
Signing time: Tue 04 Nov 2025 07:00:09 +0000
Manifest this update: Tue 04 Nov 2025 07:00:09 +0000
Manifest next update: Wed 05 Nov 2025 07:00:09 +0000
Files and hashes: 1: WtYtZLAg5sARSELydiZePAfT6lw.crl (hash: N8bRUwTXavyh9qgij9dIjjhzfmofS9iYdIDAn1gIJlY=)
2: lZfbUbYtdAwEvAPz9QgaQ6AiUzc.roa (hash: 95YPoU3EnMBScsmNlHgLSHa16IwnjsnV9FN8H0xyPaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:7a:0e:82:a5:cf:06:56:ff:86:18:1b:14:43:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Validity
Not Before: Nov 4 07:00:09 2025 GMT
Not After : Nov 5 07:00:09 2025 GMT
Subject: CN=3cedfe74d4870dab0087acadf9bcc7fb6ba0c056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:65:99:36:78:79:2b:b9:7a:95:87:76:f3:
6e:96:1c:72:ed:66:8d:cc:09:89:6d:67:59:52:bb:
ef:8f:55:0a:c6:f0:be:66:60:a2:5f:d6:98:6a:a0:
17:56:57:a2:fb:92:9b:a4:c0:da:55:46:06:1b:db:
1b:62:68:3e:76:bd:ec:df:55:4e:61:29:86:4c:4a:
80:d8:46:3f:8c:a8:1e:8a:f7:4b:5b:80:75:4a:e8:
19:f0:34:c6:ff:a7:9e:e7:6f:e9:13:44:25:bd:5d:
eb:a2:e1:9d:e9:89:37:7e:b2:7c:53:51:d3:06:23:
43:f6:85:3a:0e:76:0d:8a:19:bc:56:a9:ad:03:62:
20:0d:fe:de:d0:5c:66:82:6a:53:13:4e:02:f9:cc:
09:f9:68:af:60:ff:25:c2:93:b4:4a:87:d9:c9:81:
ce:40:ef:39:b5:85:d4:87:62:af:41:bd:41:0d:13:
04:c4:08:79:ca:41:76:6c:9f:10:fb:cd:31:7e:73:
81:ef:da:86:b1:7a:51:64:b6:9a:d1:c1:6d:2f:70:
90:c8:93:d4:d9:8d:bc:57:53:bc:dd:6d:4c:92:65:
50:c3:c9:a1:ce:8f:d8:d2:4e:25:3d:f9:2d:52:85:
0e:a4:10:27:e3:15:69:af:32:e6:bc:9e:05:ee:cf:
f4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:ED:FE:74:D4:87:0D:AB:00:87:AC:AD:F9:BC:C7:FB:6B:A0:C0:56
X509v3 Authority Key Identifier:
keyid:5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:25:4a:d4:f4:b3:e2:0f:90:c0:65:f0:0e:71:fa:a5:c0:da:
45:72:77:1f:27:13:aa:e4:a3:56:50:87:11:06:14:f3:11:82:
a0:b7:4d:64:51:b7:05:90:2f:c4:23:70:cc:d7:b2:58:df:63:
69:ce:da:44:7b:92:6a:da:51:13:88:3a:41:fc:b8:39:72:c9:
b5:2e:c1:ae:51:31:2e:29:b7:ad:04:ce:76:46:cf:ff:ce:9c:
10:69:e5:b9:da:76:a0:1c:42:6d:c5:e0:6c:65:ad:c8:c4:e1:
e8:77:81:03:8a:82:fa:23:8d:51:67:94:74:b4:fe:3e:70:ac:
d2:b2:3b:a4:1c:11:17:99:7a:4e:7a:9f:ca:1a:53:18:05:64:
b6:2e:6d:f3:c8:76:32:46:f9:13:fa:e2:f1:4c:d2:4f:ca:6c:
69:fb:3e:bd:72:04:5d:1e:5d:b9:4c:ea:e9:dd:99:06:73:ac:
b3:c2:8b:34:2b:d9:b6:ec:57:09:9c:cd:75:e7:07:73:ce:1f:
fd:4a:e5:60:06:05:c1:16:3e:b8:75:10:df:cf:86:5d:ba:67:
fe:51:6c:b9:6a:d9:17:08:96:99:9b:e0:5c:3b:33:44:b5:19:
26:3b:90:ae:a6:be:d8:9c:06:f0:71:80:fa:d1:2e:49:6a:29:
2b:f1:84:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:33 2025 by rpki-client