Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
File: W71p2ZhITBOfrBJlpkV0XzMzzx0.mft (raw, json)
Hash identifier: pKT54G7pKhoyJItJpE8IVMJakf55DEyGTyXtS1BG6wk=
Subject key identifier: FF:D5:1B:1E:F7:A5:70:7C:DE:87:B3:F8:29:BD:C0:91:F5:40:A1:C3
Authority key identifier: 5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
Certificate issuer: /CN=5bbd69d998484c139fac1265a645745f3333cf1d
Certificate serial: 0199FBEADCE6D5C3EC629CE2B8EA1CBD5E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:01:37 +0000
Manifest this update: Sun 19 Oct 2025 10:01:37 +0000
Manifest next update: Mon 20 Oct 2025 10:01:37 +0000
Files and hashes: 1: W71p2ZhITBOfrBJlpkV0XzMzzx0.crl (hash: 2QaU8zWyD4O9M6Z4whQ9j01nNMCYhnbdVAApt0kJGNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:dc:e6:d5:c3:ec:62:9c:e2:b8:ea:1c:bd:5e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bbd69d998484c139fac1265a645745f3333cf1d
Validity
Not Before: Oct 19 10:01:37 2025 GMT
Not After : Oct 20 10:01:37 2025 GMT
Subject: CN=ffd51b1ef7a5707cde87b3f829bdc091f540a1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f8:41:d2:ed:b6:71:b4:09:70:30:cd:af:7c:
da:65:1f:fe:fd:bc:21:2a:6d:e6:af:33:7f:53:8e:
91:30:93:83:49:b2:2c:5d:df:73:d5:db:a8:00:cf:
89:34:9b:08:d9:c2:1c:09:94:85:b6:a9:f6:00:7b:
ae:3e:de:bb:11:55:9a:b6:7a:8a:77:ed:9e:c1:a8:
c2:e0:62:ae:63:be:92:8b:7b:70:f6:3d:1b:31:a2:
ee:4f:2f:67:4b:28:ec:c1:d2:d2:40:d1:68:41:10:
60:d4:ab:64:7a:db:fe:44:25:a0:19:44:8c:fd:e9:
28:b1:95:60:e1:e9:7a:7e:d9:c9:71:0e:08:75:0e:
09:5d:e0:6b:6a:3d:73:e1:18:9d:b8:03:39:da:46:
b6:9f:54:48:17:67:e4:f2:f1:79:85:5a:83:df:90:
73:7e:d0:db:17:a0:b6:83:1b:ed:b6:33:00:cc:25:
ee:44:ed:dd:6d:9e:3b:cb:2a:fc:d0:bc:d0:28:aa:
75:e6:ca:20:59:ab:44:e1:08:1f:e9:0d:2d:c9:3a:
48:f4:c6:15:a9:0f:86:76:96:9d:12:ca:33:ba:cd:
18:05:3f:c4:23:1e:22:61:47:50:aa:ff:0b:70:f9:
18:58:54:14:18:4e:38:03:fa:32:c4:7c:8b:88:98:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D5:1B:1E:F7:A5:70:7C:DE:87:B3:F8:29:BD:C0:91:F5:40:A1:C3
X509v3 Authority Key Identifier:
keyid:5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4d:f9:c6:15:32:4d:c8:63:ce:76:eb:67:c0:a3:21:54:89:
58:95:bb:9e:e9:db:0c:8f:92:e4:2d:e7:e6:83:eb:51:18:4b:
c3:8b:be:81:de:06:b5:90:a3:51:7e:b8:b2:83:b9:77:8e:38:
9c:5d:e1:e2:63:d3:0d:6b:08:b3:3b:b6:dc:11:b4:3f:61:21:
ca:10:f2:be:a1:52:ec:e4:56:1e:49:78:47:29:ee:4d:a7:61:
71:66:11:71:95:6c:a4:01:d3:e7:d7:66:ec:16:e8:3c:a9:a8:
a5:55:a0:5c:c0:ec:37:af:a5:e5:83:88:88:52:e1:18:15:de:
05:31:f2:2b:98:42:bf:b8:bc:86:ee:c2:37:ae:2b:40:cb:2e:
6c:f2:82:a8:78:f7:70:18:f2:d4:f6:3e:4a:9f:78:d5:c7:18:
09:ce:b1:4b:0e:ae:4d:d0:6f:24:90:e5:2d:46:31:72:2c:52:
2c:95:1a:8a:47:36:50:b3:6c:5a:f5:dc:cb:f2:8c:4b:90:7b:
32:76:c9:71:a3:2e:ec:dc:29:0f:6a:b2:5c:d9:77:0e:5b:92:
74:1d:13:b0:f6:c9:9f:ea:a6:f6:70:54:5b:e1:44:bc:d2:b8:
7c:a6:22:79:22:6d:7e:90:89:5f:e3:3b:1d:33:7c:2b:b4:79:
90:4b:fd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:53:59 2025 by rpki-client