Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
File: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft (raw, json)
Hash identifier: iz58c6UpGs6GryEcxVlH49THZCk9va2/I1R+kU7yp+E=
Subject key identifier: 3D:FE:B5:41:E9:A2:51:D7:51:CD:CE:F3:2E:6E:A6:22:54:7F:36:4F
Authority key identifier: 5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42
Certificate issuer: /CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42
Certificate serial: 019A541A7CEAD5E18DFE68751658EC567676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
Manifest number: 0F3F
Signing time: Wed 05 Nov 2025 13:00:13 +0000
Manifest this update: Wed 05 Nov 2025 13:00:13 +0000
Manifest next update: Thu 06 Nov 2025 13:00:13 +0000
Files and hashes: 1: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl (hash: A/xuMyxpJM0DNY7wzr8EcBeHieeCbqdO27TjnUNpsE4=)
2: sKACgvTr5E2KmqilEPnCMtDVWp0.roa (hash: GFqzFhApZWxNeYshDRfyRg5L0vTOIJdMwgZ8ZtOAg9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:7c:ea:d5:e1:8d:fe:68:75:16:58:ec:56:76:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42
Validity
Not Before: Nov 5 13:00:13 2025 GMT
Not After : Nov 6 13:00:13 2025 GMT
Subject: CN=3dfeb541e9a251d751cdcef32e6ea622547f364f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:4e:5e:6c:ba:0a:93:91:10:14:b7:3f:00:
c7:2e:aa:0b:3b:fe:9b:8e:44:e8:b0:9c:a9:84:cc:
f0:ae:64:1e:38:2b:8d:2f:9b:44:c5:41:2c:9b:df:
98:a5:84:fd:ae:7e:df:02:6a:0f:8c:10:71:83:87:
04:9e:c6:f2:ac:af:62:92:71:ee:63:ee:da:26:98:
c3:df:92:60:41:f1:21:37:e8:8b:7d:38:84:b7:6e:
f0:f0:39:67:b7:51:98:2b:de:a1:73:af:30:f3:36:
c2:6b:5c:2e:2d:37:0f:33:85:70:bd:11:f3:66:d2:
bf:6e:b9:5c:f7:bd:04:70:68:21:ea:13:77:39:ce:
79:a1:25:46:54:3e:3c:f2:61:60:77:b7:a5:13:9d:
35:3f:37:b4:1d:1f:75:87:69:f7:e3:01:d3:41:71:
89:b6:82:d9:a9:bc:f9:03:00:cc:c7:9c:6a:5e:41:
f4:0e:9d:60:55:3f:89:d3:60:5c:a6:fc:f7:6c:60:
cd:ba:8d:0c:5f:f9:0c:de:6d:20:6b:87:31:be:a8:
8c:e2:61:3d:0a:2d:41:e7:e2:63:a8:32:4a:30:97:
b1:34:b8:f2:d4:66:f2:21:c6:8d:33:99:fb:c0:ae:
e7:b4:6a:3b:76:4d:17:d5:54:4f:11:04:16:78:0c:
0e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FE:B5:41:E9:A2:51:D7:51:CD:CE:F3:2E:6E:A6:22:54:7F:36:4F
X509v3 Authority Key Identifier:
keyid:5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:99:ad:da:49:85:f8:13:f4:f1:1b:63:44:c8:02:38:1f:5b:
fe:74:da:39:dd:57:bc:c2:40:e7:3d:2f:e5:23:ed:f1:87:4f:
ba:ca:96:7c:44:b0:64:6e:3e:d8:13:ac:62:4e:eb:95:b8:8e:
aa:3d:04:83:b4:e9:42:78:e6:3d:a5:08:83:a9:5a:8d:80:cb:
22:17:9c:ac:77:55:dd:72:a1:85:bb:3c:3e:b0:20:29:8c:57:
84:ee:1e:07:f0:ce:3a:3b:4d:cc:e5:79:4a:31:75:1f:29:22:
19:2e:a8:5d:78:39:d0:56:bd:41:47:00:5f:4d:0f:25:5e:33:
e0:0f:b4:c5:44:05:f2:a1:14:d7:1e:9a:6d:bb:79:59:fe:1f:
04:1a:b2:e8:2e:70:39:9a:c4:00:5e:34:f2:ff:dd:89:af:ea:
6f:e5:69:88:29:db:95:21:ec:60:b0:dd:c7:4c:3d:ef:d4:cb:
d9:c8:87:ef:48:da:4e:22:e6:80:0d:18:38:0e:5d:3a:4e:ca:
ed:be:8e:2e:bf:86:67:b4:43:74:53:df:a9:e9:62:93:05:da:
47:29:9f:d2:b8:81:00:32:94:ea:8f:d3:fc:b5:62:8b:2e:a7:
23:37:6f:0c:5a:76:19:a4:f9:d7:41:e0:da:76:a2:34:b1:e1:
cb:ff:23:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:29:50 2025 by rpki-client