Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
File: WqKpJUebz8vBloipUqJDAfTnaDk.mft (raw, json)
Hash identifier: Kf7yDbCIcK/aXrWkGxBPNwNruz2c2UOFEbEuDtyL/x8=
Subject key identifier: D7:86:16:26:E9:AD:A3:74:08:8F:07:21:2D:FE:E3:77:BD:65:CE:9A
Authority key identifier: 5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39
Certificate issuer: /CN=5aa2a925479bcfcbc19688a952a24301f4e76839
Certificate serial: 019A4C60DEBB624BBB35413F2A94A14D5DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
Manifest number: 0863
Signing time: Tue 04 Nov 2025 01:00:08 +0000
Manifest this update: Tue 04 Nov 2025 01:00:08 +0000
Manifest next update: Wed 05 Nov 2025 01:00:08 +0000
Files and hashes: 1: WqKpJUebz8vBloipUqJDAfTnaDk.crl (hash: nXrqEm/Of1r3vzOAbFS8MXNiUi0Lk0yJATPjy/mGYsI=)
2: jYQY-U25B3NSBy3Axt-DvgoJjdQ.roa (hash: zP4WnXpWxsW1++MaE9e5/n5ALBQb36qRJjvWEAaaUiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:60:de:bb:62:4b:bb:35:41:3f:2a:94:a1:4d:5d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa2a925479bcfcbc19688a952a24301f4e76839
Validity
Not Before: Nov 4 01:00:08 2025 GMT
Not After : Nov 5 01:00:08 2025 GMT
Subject: CN=d7861626e9ada374088f07212dfee377bd65ce9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:a3:36:e9:89:c4:9c:f9:89:96:cd:e4:ea:
b1:31:94:79:e6:73:3e:02:ab:18:0d:29:27:dc:ae:
ea:5f:23:2a:64:5f:91:1a:2c:7e:87:83:59:ae:da:
92:ce:8a:00:e8:36:86:b6:6b:8e:9a:0c:dd:8d:db:
3f:d3:8b:9a:bd:93:12:89:f7:15:07:8a:69:41:ec:
9d:67:2a:e1:a4:1c:40:5e:2f:60:3d:e4:ce:c1:1e:
56:6f:38:dd:98:93:91:d1:ba:8f:0c:e6:03:a3:81:
d5:7a:ad:82:78:3e:8e:04:55:d7:28:9b:e5:8c:e1:
8a:66:70:fc:d2:05:f8:93:94:de:1d:4b:45:88:0c:
8e:11:a9:f7:d4:2e:65:37:7e:15:1d:da:4c:91:c0:
40:83:57:a5:c8:26:fe:78:a4:b4:91:eb:80:9e:69:
93:00:68:58:16:e9:5e:bf:67:6b:56:34:ef:a1:51:
ec:da:72:e1:56:b6:24:95:48:99:06:dc:93:ff:ba:
cc:36:9d:08:78:73:65:2c:ea:98:b0:be:87:f8:72:
fe:00:f1:e5:18:8c:6c:8a:f3:50:9b:ff:68:d3:cb:
b4:97:55:86:66:f2:5a:d9:8a:ed:ea:b8:31:65:3e:
04:b8:dc:27:ab:04:ae:fc:6b:85:2e:99:78:a5:ea:
2c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:86:16:26:E9:AD:A3:74:08:8F:07:21:2D:FE:E3:77:BD:65:CE:9A
X509v3 Authority Key Identifier:
keyid:5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e0:d7:2a:e2:19:f4:a3:33:71:f9:0a:68:72:8e:0e:9f:7b:
27:76:69:59:fc:18:2a:e4:c0:40:c8:6a:80:30:fa:e3:68:28:
6b:b8:6a:2e:24:c1:3e:0b:9b:47:b4:d1:02:0a:9a:a7:fb:fe:
eb:b2:d8:f9:49:23:f5:31:3a:68:b3:6c:48:84:7a:07:90:d9:
f3:ae:33:25:7f:fb:fa:13:0b:a9:6e:53:98:af:1f:8e:f0:67:
10:9e:e7:58:ad:fd:fa:19:fd:cf:b2:71:a8:a7:27:e8:c8:fc:
87:a9:db:1d:ec:0a:93:c8:08:24:2c:31:1f:11:ea:fd:22:51:
4c:9f:5e:63:f1:d9:3b:75:8c:fe:1e:2a:ff:84:2a:bd:bd:78:
fb:2f:83:38:90:86:3f:ca:82:30:91:95:b0:e4:6b:26:4c:04:
ba:89:19:08:4c:bd:7a:14:3f:55:e1:aa:8e:e0:57:64:b1:af:
3b:14:c8:ac:e4:f9:08:ba:30:bc:14:50:14:28:68:13:12:4c:
50:db:1a:a3:3f:32:67:d9:92:94:4c:2d:8e:f0:20:b5:4f:88:
08:7f:0d:52:4f:49:db:f4:07:f9:14:fe:18:02:0f:cf:83:16:
4c:d8:2e:7e:c7:a1:bc:fe:90:f1:79:f3:65:2b:f5:a2:66:80:
50:73:83:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:17 2025 by rpki-client