Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
File: W67rTDpphRQSVf1fauGIQGc0j0E.mft (raw, json)
Hash identifier: Fqk4P2GpTjk4sTTt8MSu11FKVLF0jWejD/F4K94ryHQ=
Subject key identifier: F0:EE:F3:A1:3A:FA:B3:FF:8F:71:CA:B3:0E:9F:D1:49:DF:0A:1E:DF
Authority key identifier: 5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
Certificate issuer: /CN=5baeeb4c3a6985141255fd5f6ae1884067348f41
Certificate serial: 0199FB7C9A8293C64CE0CA43E231E30A8894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
Manifest number: 0287
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: W67rTDpphRQSVf1fauGIQGc0j0E.crl (hash: 58Sspmq5DoakOFMg6QvxbfCdMDGS6PtQMDlZ7gJ0UJY=)
2: fImxldtEe3i_XS4-KxZuO-LAgYs.roa (hash: y0/Y4Oas1pqWDy9av0sFDF2hXjn1ElLUDcx131DTb88=)
3: w518JUndnoJzF7ArkNi72UzL1I0.roa (hash: 8BFeioFwQr4QIG7R1EZ3G0EZLDkxKgvDohVxrnoFSAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9a:82:93:c6:4c:e0:ca:43:e2:31:e3:0a:88:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baeeb4c3a6985141255fd5f6ae1884067348f41
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=f0eef3a13afab3ff8f71cab30e9fd149df0a1edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:a5:44:6d:ec:84:a2:91:94:3b:29:d7:ea:
7c:20:86:d0:2f:63:49:cc:8f:45:3e:72:ed:8a:9f:
68:13:2a:99:75:54:1c:a0:fb:d6:db:6b:63:4c:82:
e5:be:1b:83:27:c9:29:2c:14:96:62:85:e0:78:27:
ad:2d:2b:68:0c:3c:43:3b:06:8f:10:1f:f4:2c:1f:
75:e8:00:af:58:68:bd:4d:f9:76:90:5a:7d:af:7e:
87:67:a8:bc:4c:bc:e3:69:cf:10:ee:49:94:7f:23:
98:f4:82:38:5b:65:ab:81:27:f7:6a:0a:50:87:26:
ef:9c:f0:e3:b0:4a:b6:dc:64:3f:29:59:15:a5:de:
04:d7:d6:43:b4:61:7e:6c:d7:50:c5:b7:7a:cb:6d:
a5:98:0a:b9:a6:bc:6c:4e:04:7c:19:03:9d:2c:0d:
0a:d8:76:be:be:dc:de:15:e7:20:41:73:f2:07:fd:
d5:96:56:82:c4:0d:e1:b6:ac:1d:eb:de:6e:50:f2:
68:cf:56:9b:7b:23:7b:6d:7e:7b:0f:e2:f6:b7:69:
e5:d0:00:05:aa:bd:3d:0c:da:bb:17:e2:5b:1f:8e:
60:ff:55:c0:45:bb:88:7d:7b:d4:01:00:18:d1:6f:
d3:fb:40:67:4c:9a:33:49:b9:cc:88:f2:23:dd:db:
d9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EE:F3:A1:3A:FA:B3:FF:8F:71:CA:B3:0E:9F:D1:49:DF:0A:1E:DF
X509v3 Authority Key Identifier:
keyid:5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0b:2a:1a:fd:03:b1:98:8a:1c:ca:27:7e:ce:a9:21:27:b2:
ac:b6:02:ab:fe:b5:84:94:b1:0f:a1:a1:f1:ec:ba:2e:e1:f9:
ab:c2:cd:1d:70:c9:51:1d:15:67:09:e4:37:15:9d:66:1e:f2:
88:c0:10:c9:3b:88:63:e1:d9:e1:80:41:fc:3e:73:eb:ab:60:
0e:7a:97:b4:5d:44:60:c2:09:4d:66:0f:ee:3d:67:5e:30:23:
dc:ee:15:74:94:b4:42:56:90:70:03:06:b1:5f:9c:a2:51:50:
9f:6b:4d:49:c0:fe:c8:06:ae:83:47:cb:1a:44:6e:9c:87:7c:
de:b8:7c:e6:2c:8b:d3:5d:38:db:8e:c7:e4:74:e3:af:f2:ac:
f3:9c:1e:ca:b0:8c:ec:79:95:8d:b8:61:8d:41:1c:cc:f3:a9:
df:89:18:56:c9:0e:cc:1a:a6:75:be:fe:16:b1:27:b1:26:64:
30:5d:e1:42:3b:98:1a:c6:90:b5:ef:2f:b9:19:a6:a9:8e:12:
28:d3:de:b0:db:8e:9f:53:62:f4:d5:e2:91:95:ea:38:7c:ea:
87:4d:94:c0:e9:55:92:98:a8:8e:e4:29:60:95:f2:64:a6:cc:
2e:c6:41:a2:2f:6b:cd:e4:db:5d:d6:14:8c:41:a1:5f:9c:39:
fa:a1:32:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:09 2025 by rpki-client