Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: IiiSLJvVupb+3pECYGiPDs3VIVtHLvv8rLsn3QMAl/s=
Subject key identifier: 96:45:C8:33:B1:C0:DF:D8:8E:A2:21:5E:BF:22:C8:56:AC:3F:9E:7D
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 019A4F990EB33ED1BEF37FC07304270036DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 04DF
Signing time: Tue 04 Nov 2025 16:00:21 +0000
Manifest this update: Tue 04 Nov 2025 16:00:21 +0000
Manifest next update: Wed 05 Nov 2025 16:00:21 +0000
Files and hashes: 1: 84jYv05HnlXjbNLOmoRHkF8n8LQ.roa (hash: /X9ewNFlsp/9ZFMAjrGm5l3SwfH8c42hlaaVDkUgEww=)
2: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: zfJo6VJRjWyTBgI4FaE5KokseCtytwlv1IbqKqrF9ME=)
3: y8uNxN4Qz-KJWpwgdJjEk856rFg.roa (hash: gCH8Gmi7LtX/qDiok3OTFvIkgdYcX5Le/2ybuhXBvN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:0e:b3:3e:d1:be:f3:7f:c0:73:04:27:00:36:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: Nov 4 16:00:21 2025 GMT
Not After : Nov 5 16:00:21 2025 GMT
Subject: CN=9645c833b1c0dfd88ea2215ebf22c856ac3f9e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:92:70:be:bb:62:e2:b6:49:97:c0:81:03:
9e:06:e9:ab:ae:80:26:72:f7:0a:79:bd:ea:b2:78:
f4:7c:cb:dd:f2:4c:e9:33:de:ec:b0:b7:ff:e1:28:
67:24:2a:a9:c1:db:26:9d:b5:2d:38:84:24:ee:c7:
61:01:ea:a3:53:55:fb:b9:fa:df:8d:38:ca:e4:ff:
48:d2:55:69:a5:59:83:70:5a:4f:89:19:3d:2d:df:
01:e1:27:ee:0b:67:6b:ac:d1:cd:97:09:d3:71:25:
72:88:bb:ff:90:52:a3:0d:63:30:4d:e0:cb:ae:97:
98:5f:e0:ab:43:26:30:f5:68:ac:9f:57:0a:ed:64:
dd:08:14:fb:6b:e9:94:33:e2:6b:57:2a:23:d6:00:
1a:21:45:36:4b:04:3a:23:6a:f2:26:d5:71:89:e1:
a7:61:20:9d:77:24:24:fc:55:29:59:81:9e:94:83:
7d:4c:08:28:11:e7:61:72:34:78:d8:ce:00:99:5d:
de:b8:da:e2:28:c7:44:88:a6:58:93:1b:4a:b3:68:
fc:4a:b3:c5:cf:d2:f7:bb:84:7c:97:1c:da:8f:43:
d3:fb:6f:79:57:6e:f2:e9:d4:44:2d:88:df:e2:c3:
b7:f7:72:f6:1f:22:fd:b3:15:a4:b9:e6:7b:45:1b:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:45:C8:33:B1:C0:DF:D8:8E:A2:21:5E:BF:22:C8:56:AC:3F:9E:7D
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:94:a4:e8:71:e4:ab:d6:c2:f2:93:62:c4:b1:ec:0c:0f:ca:
16:dd:47:ed:92:01:89:8d:c6:e3:a8:b2:98:f4:f6:df:f4:22:
db:04:47:0f:14:b9:6b:87:20:81:f1:7e:16:cd:22:f2:c0:fa:
bb:6b:7e:4d:bd:d8:47:15:68:6e:83:66:48:76:d6:97:6d:58:
a2:a1:fd:fd:0f:44:59:7c:b8:89:e5:47:a4:d5:c6:83:c8:42:
b5:f0:fc:29:fd:fa:56:fd:87:bb:55:65:4e:75:01:76:a0:e1:
5d:dd:4f:23:ba:fd:47:b8:d3:57:8b:91:3c:07:7f:35:fa:c6:
5d:29:2a:d0:51:e2:f3:2e:ec:f8:89:8a:67:b1:10:5f:e4:e2:
42:c1:5a:57:f3:d3:9b:33:5e:bb:45:1c:b9:25:3f:47:9b:10:
6f:1f:2c:13:ba:8b:87:05:92:4e:f2:e7:62:0e:60:78:f2:95:
e8:62:85:72:13:22:3c:e7:ef:5d:14:79:92:c9:d2:6a:c0:15:
a1:17:e5:1a:ac:92:07:ee:95:75:cb:c1:93:87:3f:79:6d:ce:
b0:16:fa:62:e8:34:db:43:3c:5c:f3:76:27:55:85:aa:18:c2:
bc:85:d8:ff:28:69:8b:45:bc:5f:4c:66:03:c3:80:a3:74:66:
60:f6:30:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:12 2025 by rpki-client