Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
File: W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json)
Hash identifier: ji9iNi4cygS02n4toVoyIUe7dNkeYmGOVbq9U4GrmYc=
Subject key identifier: D6:6A:65:EB:61:CE:C8:85:E5:8D:9D:E3:89:09:1F:61:FE:F9:55:7F
Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
Certificate issuer: /CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Certificate serial: 019A4F2B7432401207A898D7937F1ACB231C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
Manifest number: 15F7
Signing time: Tue 04 Nov 2025 14:00:39 +0000
Manifest this update: Tue 04 Nov 2025 14:00:39 +0000
Manifest next update: Wed 05 Nov 2025 14:00:39 +0000
Files and hashes: 1: QaaRy7ABeU9cSPshLT6zQgCy8vY.roa (hash: ClDKSK21Vz9twjL4L21G/7TWYD2/1/Ma/Dt0uF8yRp0=)
2: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: UJ6NRD9f94H7+kA8AiIt3/XZ2eFPCs4vHc/S35QF6/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:74:32:40:12:07:a8:98:d7:93:7f:1a:cb:23:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Validity
Not Before: Nov 4 14:00:39 2025 GMT
Not After : Nov 5 14:00:39 2025 GMT
Subject: CN=d66a65eb61cec885e58d9de389091f61fef9557f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b7:2e:f8:43:a8:13:d6:4f:54:1c:9c:d4:98:
1f:aa:8f:db:e2:24:d2:98:1f:54:56:cd:75:1e:62:
4d:35:2a:cf:d4:13:fb:1a:45:1d:d7:f0:a5:9d:0f:
c3:ce:af:ca:63:de:12:17:76:96:94:1d:03:d7:ac:
79:4a:f2:b9:ef:a1:5a:5e:01:f2:b6:c9:94:c3:08:
1e:27:e3:a1:ca:bb:7b:60:f2:2c:8b:14:4b:55:be:
28:a8:99:ad:be:6e:b0:e8:88:f6:0a:4e:24:4b:57:
fb:d5:15:9d:0a:2a:64:d4:15:d9:f6:49:72:bf:89:
5d:1e:68:95:23:9c:e4:7a:83:af:9f:7f:72:c0:b9:
c7:64:dc:2d:16:40:2d:28:b4:f4:21:e9:5a:a5:4a:
d1:a0:35:76:5c:81:79:82:83:5a:a9:da:46:da:90:
23:2c:8d:a8:6f:35:b4:95:97:b0:dc:43:36:c8:e5:
4f:8e:f0:a7:fb:4e:ff:67:27:04:6c:1d:c3:df:ab:
52:46:6e:12:ee:d4:44:97:4b:9e:07:10:40:17:41:
ac:34:ad:e7:01:f5:29:60:8c:fc:43:7a:35:11:e3:
59:37:b5:54:67:1d:af:de:1f:04:45:58:3f:eb:1b:
ff:22:2c:54:2f:bd:81:5e:a3:d8:a1:dd:d7:bd:43:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6A:65:EB:61:CE:C8:85:E5:8D:9D:E3:89:09:1F:61:FE:F9:55:7F
X509v3 Authority Key Identifier:
keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3c:f8:04:e2:de:64:4a:77:40:45:16:2b:bb:94:be:13:f7:
14:69:42:81:18:ec:96:f2:07:2d:f2:9a:7c:7f:d3:cb:7a:37:
f2:07:9e:5f:b7:38:c3:cf:29:8a:50:fa:7c:6b:1a:f4:e6:91:
d2:36:aa:11:2a:0b:31:75:f4:2d:4a:99:aa:08:90:de:d8:25:
ea:79:b0:a8:62:75:c7:02:8a:57:8c:39:3b:00:ad:55:bd:d1:
da:b8:7f:69:df:c7:c5:c8:1f:09:a3:46:0a:d4:93:66:64:13:
67:23:fc:57:20:f5:ac:95:d8:ed:a0:6d:bc:5c:88:fb:9e:db:
17:ed:61:bd:42:2f:f1:ac:8e:07:f2:4f:f8:b4:95:4a:f7:a8:
1a:a1:5e:74:b4:67:8a:cb:68:00:39:e3:e6:2e:e8:20:8d:ec:
f3:c9:cd:ef:f0:fc:38:64:f5:7c:93:71:be:d0:fa:cc:77:3a:
51:7b:be:31:08:36:be:a9:2c:5f:70:bd:65:39:93:29:c2:13:
37:18:1e:c5:50:95:87:73:f2:b7:c0:d4:7c:cf:cb:db:30:8f:
07:8f:6f:17:9b:88:a3:a2:8a:57:24:9f:22:b6:ca:6c:d5:4e:
89:cd:74:b6:8b:da:f7:77:d6:9d:ad:9a:bd:ab:71:cd:6f:d5:
04:35:17:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:25 2025 by rpki-client