
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
File: weOkSujPAkPx3_4mhOPdWo_IXXk.mft (raw, json)
Hash identifier: 1f5BjSrbRhQwiWvrRKw1kzNYo84E0FLb38EXW5ZN+y8=
Subject key identifier: 25:60:4A:BC:9B:88:9F:63:44:55:76:75:A1:6E:74:5A:52:40:A2:D5
Authority key identifier: C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
Certificate issuer: /CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Certificate serial: 019A4DE1656B282D906A3D78A736ACC7B701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
Manifest number: 1584
Signing time: Tue 04 Nov 2025 08:00:08 +0000
Manifest this update: Tue 04 Nov 2025 08:00:08 +0000
Manifest next update: Wed 05 Nov 2025 08:00:08 +0000
Files and hashes: 1: 8SCwalNOCtaX1GmWAS6VFuVHGa4.roa (hash: MCBdmn43q9v0IHNEMsKZZxueWeuhZImr9/xukqPZ3tY=)
2: weOkSujPAkPx3_4mhOPdWo_IXXk.crl (hash: yIbGR0PnyR7+CA/eA+ETCX1LU1mTh3xjtBaoDHPkFcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:65:6b:28:2d:90:6a:3d:78:a7:36:ac:c7:b7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Validity
Not Before: Nov 4 08:00:08 2025 GMT
Not After : Nov 5 08:00:08 2025 GMT
Subject: CN=25604abc9b889f6344557675a16e745a5240a2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:c0:51:78:11:7a:d7:6f:ab:c7:b8:72:29:
af:0d:27:f3:c4:d1:f3:3a:3f:54:e8:f8:f0:73:37:
5d:d2:60:c1:d5:db:5b:16:73:70:e7:d6:32:24:82:
27:1d:b5:65:87:02:82:6e:76:85:3a:82:32:52:1a:
c1:ad:90:bc:5b:97:48:71:f5:30:e2:3c:db:75:03:
ba:50:5b:ec:e5:ce:62:23:c1:12:b1:be:29:f9:73:
27:3c:8b:5e:e8:08:f4:9b:15:36:e1:5b:63:67:8c:
e3:ed:1d:63:e0:58:c4:a0:3c:25:73:e4:59:fa:1b:
a3:54:83:e4:b6:74:30:67:f5:7f:93:25:1d:4d:8d:
11:d2:83:81:e8:9f:6b:51:c3:93:4f:0a:1b:5c:27:
51:ee:48:d1:2f:c0:19:a4:1e:d5:35:d1:70:96:6a:
31:1f:af:ae:f1:c1:55:2b:a4:fd:2f:3c:6e:2a:52:
0f:16:df:31:60:98:43:0e:81:9c:78:04:c1:ec:ff:
c1:ff:59:b3:38:e3:d1:3a:db:bc:17:bf:7c:87:86:
fb:49:ce:77:c9:45:7e:35:3f:04:46:4a:d0:f6:d6:
2e:49:a3:20:06:1a:b2:a6:6d:d3:8e:15:28:76:4f:
26:ae:3c:ec:06:e5:53:e4:1a:14:16:66:e4:14:80:
b3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:60:4A:BC:9B:88:9F:63:44:55:76:75:A1:6E:74:5A:52:40:A2:D5
X509v3 Authority Key Identifier:
keyid:C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:81:ba:09:7f:da:b8:bf:63:ae:0a:c4:f4:79:30:bf:5c:1b:
4c:48:20:69:07:d4:7c:61:4a:4a:0b:6d:dd:b3:ec:69:a6:2f:
c6:ad:36:4c:01:a1:5e:10:e4:f3:71:82:c4:50:cd:98:23:b2:
a2:51:a0:4b:f2:6b:c8:5d:ae:6f:8a:8a:34:8b:93:61:e6:50:
06:bf:5e:36:88:b3:d6:f2:fb:0c:bc:6b:80:80:bb:dc:dc:42:
76:61:4a:82:a8:8d:d3:e4:cc:81:f2:23:53:14:8d:2e:13:b0:
85:c6:05:f2:0a:fa:14:02:c1:53:60:a9:97:e7:93:69:0c:85:
90:1e:99:c7:6c:f3:2f:e2:f9:f2:3d:ce:e6:24:34:43:ff:a9:
54:dc:ed:b0:65:e7:7e:0d:bd:5c:28:fc:39:60:c3:47:2f:9a:
f9:1d:d0:e7:11:ba:9e:e2:50:05:8a:0d:8b:a7:33:d5:35:77:
f5:e8:fa:02:04:39:88:b7:f2:2a:70:b4:ad:dd:b8:1f:ed:04:
c1:26:f2:7a:7b:73:e6:c3:c6:78:19:1b:f2:bc:9f:3f:0e:75:
e0:f9:fe:66:04:1e:99:71:07:a4:fc:04:0d:49:32:02:b4:1f:
64:90:98:e8:68:3b:ac:9d:53:96:cc:01:b1:66:4c:9b:82:e8:
00:1e:0d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:49 2025 by rpki-client