Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
File: waGQUEttntnBgJaEBCWxHXsi3_Q.mft (raw, json)
Hash identifier: EIGkweFKSYEvi3j18+1Eu9txBQBoY0HOtRXQJIKulQc=
Subject key identifier: D7:05:6B:EE:A7:B9:1D:E0:DB:30:48:12:28:EF:A8:35:99:3B:7C:EC
Authority key identifier: C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4
Certificate issuer: /CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
Certificate serial: 019A4EF53AD2EB8ED1F2BECB7EF50EF0FA6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:01:25 +0000
Manifest this update: Tue 04 Nov 2025 13:01:25 +0000
Manifest next update: Wed 05 Nov 2025 13:01:25 +0000
Files and hashes: 1: A9fopaXO-fVQpKdJ8LHIGXii_SU.roa (hash: 8zkX8M3Fk6VQlJpwJIcZtNmfIBhTghba03PireQiTxw=)
2: waGQUEttntnBgJaEBCWxHXsi3_Q.crl (hash: 6kHoSlSFNUzKTpTX7NHODmx9MS746tJf/b64V9snQBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:3a:d2:eb:8e:d1:f2:be:cb:7e:f5:0e:f0:fa:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
Validity
Not Before: Nov 4 13:01:25 2025 GMT
Not After : Nov 5 13:01:25 2025 GMT
Subject: CN=d7056beea7b91de0db30481228efa835993b7cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:63:20:ab:9b:44:07:a9:fc:4c:50:21:13:ab:
f7:48:33:77:70:fb:5a:66:75:3c:a2:2f:8f:d8:ec:
88:dd:bc:42:9e:44:95:ef:42:1d:85:5f:f1:05:4d:
c2:9a:8d:8d:1e:e2:02:ea:cf:b3:6a:3f:d9:48:15:
f7:d3:10:b2:35:06:8b:47:a2:bf:ba:ef:7b:9e:94:
84:e8:04:c6:89:90:39:6b:fd:d4:3d:ee:15:8d:ef:
d0:37:5f:a5:1a:69:b4:09:55:32:b5:52:0a:02:fb:
32:cd:14:16:9f:ac:bb:79:dc:c6:83:ce:f3:27:7f:
ee:d3:ac:f4:05:ec:41:9c:b1:66:0b:64:03:35:8d:
e8:22:8c:1c:42:c4:c5:f9:24:13:42:7b:ca:d0:78:
07:d1:1d:de:5f:ff:cd:04:d6:b2:10:9c:66:c3:26:
fb:87:25:bd:a0:62:a1:d4:da:bb:68:e6:bd:d6:84:
2a:ff:7f:cc:54:a8:4a:21:5f:63:e8:42:ae:b9:f5:
85:f7:27:8f:f2:7f:28:58:97:89:84:c7:21:d5:14:
40:3f:53:26:ea:32:db:ea:1e:76:e3:9a:eb:63:30:
d4:86:7c:cf:5e:75:17:2b:3b:60:a1:08:2c:5f:1b:
5d:a5:25:f3:50:62:9c:92:14:24:04:37:7c:81:da:
35:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:05:6B:EE:A7:B9:1D:E0:DB:30:48:12:28:EF:A8:35:99:3B:7C:EC
X509v3 Authority Key Identifier:
keyid:C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:de:27:8a:8a:8a:d2:fd:bc:d4:fc:e1:17:5d:09:72:8c:06:
9c:5e:68:3b:67:32:d7:15:75:24:5d:00:23:bf:cc:1b:34:45:
dd:24:8c:54:3d:c5:e3:4e:30:5e:49:2c:71:bf:54:0e:5b:cf:
e1:e2:fa:06:6a:6c:3b:32:55:37:f1:0f:f1:0a:51:68:47:08:
ce:8d:a2:51:d9:f3:91:c5:70:3f:1e:3e:da:c5:48:ca:e5:2c:
48:d7:c4:0e:f1:b9:2d:c3:0f:ac:77:e6:c1:af:08:9d:62:6e:
f8:ca:8e:3e:13:44:49:b8:17:73:fa:d7:b9:4b:fb:07:16:c3:
af:b3:d7:35:b8:d3:a5:73:84:02:0c:87:b6:97:3c:b0:50:ef:
4d:1f:18:6e:76:dc:3f:36:2b:c6:74:57:2f:97:c9:db:72:02:
b3:5c:a2:ca:0d:37:06:47:d7:c9:27:71:96:3c:dc:3d:1f:51:
7a:c1:19:ea:52:81:1c:44:4c:cf:56:21:ff:fc:71:e1:73:20:
14:0e:29:3d:c6:c2:25:37:af:9c:d1:99:94:80:32:17:69:5a:
e5:ae:a0:09:6d:3a:8c:44:a2:43:4f:cf:57:f6:bd:c9:19:8b:
b7:ad:05:f7:22:59:7a:1f:b2:60:b1:c2:0b:6f:68:42:a2:a2:
32:d9:d0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:17 2025 by rpki-client