Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
File: we7iyrhrXuQPwncMqMtcUMYrdVs.mft (raw, json)
Hash identifier: 4k8NI5Axyt8z7ktL4rbYqK47XKSgyij1/zyf9rF0rvs=
Subject key identifier: 8E:B9:EC:B3:96:80:94:93:38:1B:EF:05:DB:8F:4E:C4:6B:93:E9:E4
Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Certificate issuer: /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Certificate serial: 019A4D3D2F1B27F8DC29C11CB7012EF55981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
Manifest number: 1386
Signing time: Tue 04 Nov 2025 05:00:46 +0000
Manifest this update: Tue 04 Nov 2025 05:00:46 +0000
Manifest next update: Wed 05 Nov 2025 05:00:46 +0000
Files and hashes: 1: C82fBmTW8-iwXu5pgvR1VTX1CPI.roa (hash: VxKUMucn3gu4aXap48afqVYi1a/XU7LxwPuTbOudfsE=)
2: we7iyrhrXuQPwncMqMtcUMYrdVs.crl (hash: gkUyCilwb0P9ZDYhSYKKH35m4oYrs2u3yS9oJ4rVt90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:2f:1b:27:f8:dc:29:c1:1c:b7:01:2e:f5:59:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Validity
Not Before: Nov 4 05:00:46 2025 GMT
Not After : Nov 5 05:00:46 2025 GMT
Subject: CN=8eb9ecb396809493381bef05db8f4ec46b93e9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7a:d7:e0:6c:79:88:1d:93:88:e2:22:94:03:
d8:7c:83:d9:d1:21:87:64:3a:a1:1e:ae:31:43:80:
e4:ac:1c:62:17:c1:9d:95:a8:e3:9d:65:f9:f6:9b:
1a:12:36:c8:be:d1:87:ce:44:22:f9:d8:0d:1b:7b:
37:c7:00:52:ba:08:75:25:d9:dd:e9:cf:f3:86:35:
8f:04:3a:50:3d:3f:12:7a:a2:12:4c:2f:1b:42:ce:
67:37:92:fb:e8:1d:3b:06:fe:e5:d9:90:83:ad:d2:
67:8f:b1:12:25:a7:43:44:c1:e2:bb:fe:a2:c5:af:
dc:e1:51:c6:94:28:8b:46:7a:a6:2a:42:d3:1b:c7:
6a:1b:04:d9:32:1d:27:0b:6a:89:7d:d6:0f:37:6e:
99:86:f1:74:5c:f1:d3:63:31:42:a6:0e:bd:37:30:
51:9b:f7:1d:bc:62:5c:f6:f5:93:4b:51:bd:05:f9:
6f:bf:91:6b:72:96:c5:0b:db:67:f2:67:65:8c:67:
98:16:53:d0:2e:37:ce:eb:c6:1d:a0:03:42:bf:62:
91:77:75:06:56:12:81:99:08:b2:6b:e6:e9:be:c4:
9d:20:2a:5a:f1:f9:67:9e:a8:a6:f5:88:c3:4b:84:
9b:e8:04:b5:02:e3:54:5a:f1:d5:df:35:97:ee:1f:
8e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B9:EC:B3:96:80:94:93:38:1B:EF:05:DB:8F:4E:C4:6B:93:E9:E4
X509v3 Authority Key Identifier:
keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a2:8e:ee:31:59:7f:7a:59:17:9c:30:99:9e:d3:48:1e:4a:
8e:9a:ea:da:eb:42:c0:ec:27:3f:5d:65:fd:ce:da:ad:d4:76:
aa:df:d9:4e:67:25:56:06:9d:34:87:5a:8a:c2:69:60:d8:d2:
83:cc:0b:f7:e8:49:cd:2f:05:44:25:79:f4:0a:7a:ff:a0:65:
4c:c0:e6:b1:28:8b:85:f6:a4:da:ae:bc:b6:06:67:be:26:27:
f2:0d:16:af:fd:19:be:52:db:1c:41:5b:a0:98:2b:ac:79:3e:
ca:8b:0d:63:37:05:9a:e9:c9:b9:58:53:85:a1:10:c0:09:5f:
80:36:de:0e:c1:fb:39:c8:55:ae:53:08:14:83:3d:b9:67:b7:
77:9d:e1:92:f9:31:72:c4:d1:e7:82:bd:c4:a7:d7:d1:ca:00:
76:0d:e7:3f:44:a6:2e:d6:d1:a1:61:c9:ce:fd:de:41:0a:42:
22:3c:b7:9b:2f:78:64:0b:77:9d:10:f3:09:33:cb:35:82:c7:
58:67:46:8b:0b:0a:1d:55:ea:8c:1d:0c:46:ec:bf:38:3f:cd:
33:4f:cf:50:9a:eb:6f:3b:84:1c:ec:04:8e:1c:fc:78:89:2c:
10:d0:4a:60:46:7c:0a:96:b3:66:bb:6a:f5:de:af:4f:02:c5:
ae:90:db:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:30 2025 by rpki-client