Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
File: WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft (raw, json)
Hash identifier: 7PNE+coBoxaXndfDFbKSx7A/f+oHgAG0TAhRKo2QBrA=
Subject key identifier: 03:58:A1:4E:11:AD:12:D5:20:60:C4:DC:F7:6D:7B:FD:11:E3:42:D7
Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
Certificate issuer: /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Certificate serial: 019A5375AA618AE0BEC1E137B11520A2CF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 10:00:11 +0000
Manifest this update: Wed 05 Nov 2025 10:00:11 +0000
Manifest next update: Thu 06 Nov 2025 10:00:11 +0000
Files and hashes: 1: WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl (hash: +nfFd7Rzg9zOwNa0hgYk6f5N82aLvkyt427DwI2Md/0=)
2: p2E40VAywU1E-b5C3yq5INQnhfY.roa (hash: +wh8lIkPmW8LdXYFPZaG+wiXZeTnTUYIdRcRymup/Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:aa:61:8a:e0:be:c1:e1:37:b1:15:20:a2:cf:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Validity
Not Before: Nov 5 10:00:11 2025 GMT
Not After : Nov 6 10:00:11 2025 GMT
Subject: CN=0358a14e11ad12d52060c4dcf76d7bfd11e342d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:db:fa:45:0e:73:52:a3:94:df:b9:64:84:
25:f4:cb:55:db:0a:dd:7d:7c:7f:eb:ce:5c:49:78:
b7:33:29:e7:68:b4:cc:4e:ee:5d:56:29:7b:f8:74:
9c:45:34:71:14:58:3d:d7:fd:07:f8:39:26:43:7b:
2e:61:98:2f:27:49:c1:b9:d8:6a:58:ff:41:04:56:
1b:b2:65:25:47:13:5e:1f:75:f9:01:9c:d0:33:b6:
d2:5e:d3:fe:fd:44:ea:77:25:20:9d:5d:d5:f5:5d:
6e:0f:82:b4:b7:a1:10:5d:1d:94:52:2b:d2:01:15:
8b:13:98:42:6c:69:4b:b8:ee:8b:ad:78:7f:1c:8a:
e3:35:58:76:53:72:bb:e5:80:33:55:36:f2:1c:70:
44:c9:28:f3:49:a4:e2:cb:34:09:de:b6:f4:54:a4:
f7:5e:5b:d4:71:3b:8e:64:f2:20:94:d3:02:a1:fb:
b0:88:77:d9:07:17:16:62:2e:5e:66:cb:08:7d:7a:
18:8f:75:42:f7:b8:1c:6e:1d:43:03:32:f2:db:9a:
06:7f:24:6f:fd:7b:ec:60:1e:b0:e2:f2:61:57:8a:
73:fb:6c:9b:89:a2:1d:0f:3e:46:21:77:de:d5:f5:
9e:34:50:cf:d3:ac:77:cf:fa:af:a4:fb:17:63:64:
ed:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:58:A1:4E:11:AD:12:D5:20:60:C4:DC:F7:6D:7B:FD:11:E3:42:D7
X509v3 Authority Key Identifier:
keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8a:8c:7e:d3:f5:68:53:bf:86:db:85:7b:5a:ee:00:05:67:
a5:20:d6:29:51:fb:e4:a2:b5:6f:ed:66:98:37:82:2c:61:f0:
68:44:9a:12:7d:ab:58:30:cd:ce:6b:f6:ad:26:88:6a:ec:e6:
9b:93:2a:20:ca:3c:3a:d7:52:ae:90:24:46:07:5f:c7:7a:8b:
96:52:76:70:61:b7:87:cd:35:ee:87:03:fc:3c:81:84:98:e8:
6e:17:a2:59:51:e9:14:a6:53:c4:3a:3e:8e:8a:6c:7a:60:43:
5a:bb:09:05:93:9f:43:7c:7c:3c:42:ef:58:fc:5b:2b:d9:d9:
c5:7d:75:28:b1:3c:bb:6a:4c:97:d9:c3:ad:99:62:d1:ec:aa:
db:f4:48:15:4c:55:b6:91:de:ba:66:e2:d2:23:a9:70:ad:a3:
6a:db:24:22:24:1d:4c:ba:5e:b6:5f:0b:ec:d5:5e:ed:c6:44:
3c:27:b2:22:9e:09:8b:61:32:eb:14:36:37:c0:79:ea:b7:3a:
6b:02:e8:18:19:a6:0b:c2:f4:8b:69:5f:a0:8d:dc:96:90:1d:
18:f6:70:6c:b3:92:5f:60:2b:5a:f5:86:33:ac:16:fa:e2:d1:
86:ea:ea:1d:0f:33:10:b2:63:e6:0c:ea:26:5b:f8:42:55:90:
84:d4:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:56:30 2025 by rpki-client