Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
File: W-cZ-YXfOUpCrBHly8j4K0t67F0.mft (raw, json)
Hash identifier: x81QY8wNWuKq1JxLYxZI0SuQKPYrGRaF1f5a8phwAqg=
Subject key identifier: A6:3B:97:E7:09:B0:DD:2D:75:62:1C:0E:B6:3D:AA:47:6C:99:4A:15
Authority key identifier: 5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
Certificate issuer: /CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Certificate serial: 0199FDD96D98458AF7836422063112D8F439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:01:48 +0000
Manifest this update: Sun 19 Oct 2025 19:01:48 +0000
Manifest next update: Mon 20 Oct 2025 19:01:48 +0000
Files and hashes: 1: W-cZ-YXfOUpCrBHly8j4K0t67F0.crl (hash: sIMl/8UVI2Ve/u2tKosjQWJb8+rTXSAyLJ4W/NgBn+k=)
2: qfFhbPzEEV7-3fOF8iI3mosl_gc.roa (hash: eNrgqVa+1D+OMy3T6aNIQjkftemLm7/l9HKfq0aM6Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:6d:98:45:8a:f7:83:64:22:06:31:12:d8:f4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Validity
Not Before: Oct 19 19:01:48 2025 GMT
Not After : Oct 20 19:01:48 2025 GMT
Subject: CN=a63b97e709b0dd2d75621c0eb63daa476c994a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:0a:d2:68:5c:ce:4b:34:6a:7a:ac:e2:12:
f5:f8:95:64:27:39:77:22:f7:86:f6:82:c6:7c:22:
ce:03:f2:7a:a0:71:60:83:23:b1:3a:0f:56:d0:0d:
48:22:7d:8b:06:21:10:40:d7:5a:e0:0e:4e:54:f3:
5d:41:94:9a:f1:c2:d7:cd:56:f7:32:8e:01:97:aa:
4e:d8:a6:cc:6d:2c:89:af:f9:98:ec:50:41:03:b7:
63:30:7e:5c:46:1b:b7:1d:22:d2:cc:08:c2:24:81:
ff:c3:fc:d3:87:d9:0d:9d:bd:d0:c8:72:e8:0a:3d:
61:81:ff:95:6c:1d:f4:e7:58:5f:64:5f:a0:30:61:
82:34:47:b9:75:62:15:bd:47:65:a7:2d:01:66:ec:
fd:8a:53:81:77:04:88:ea:e0:b4:3b:14:05:e4:29:
a5:2e:35:65:e7:8c:8d:7f:b5:8f:43:f6:74:07:09:
9c:5a:77:5c:31:7b:ac:7c:ce:a8:70:66:4c:0e:35:
9e:9c:b5:ca:5d:3a:45:19:d9:ba:b2:89:cf:79:34:
3c:2b:ac:bf:ec:ad:fe:3f:83:35:1e:22:8e:78:91:
f6:ce:83:0b:60:82:ec:e5:e3:27:f5:4b:8d:d5:1b:
2c:23:bb:bb:0c:6d:dc:38:29:64:a1:9c:32:e1:6b:
4e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3B:97:E7:09:B0:DD:2D:75:62:1C:0E:B6:3D:AA:47:6C:99:4A:15
X509v3 Authority Key Identifier:
keyid:5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0a:7f:20:dd:a7:72:3e:1e:3c:cb:35:89:18:bd:80:d1:37:
bc:cd:40:e4:22:38:63:a4:e9:e2:da:5c:87:3b:39:75:73:6a:
eb:14:ef:98:b0:6a:c6:c4:06:b0:90:15:f6:0c:b5:1b:e1:3b:
c9:d2:7a:d2:34:a5:55:64:b7:99:d2:86:fa:26:9b:d0:65:aa:
fd:7e:4b:34:dc:5e:34:fb:35:a9:f3:e7:e7:eb:82:2a:03:6b:
32:a9:3e:8f:9d:7f:b6:72:91:60:7f:b6:b8:a8:8a:16:9b:20:
68:65:27:63:2c:fb:89:7a:6e:69:da:36:14:9b:16:3c:b9:d7:
e9:b6:df:c9:7f:91:42:0c:15:52:c3:04:65:be:25:ea:8f:53:
23:12:5f:3e:2a:37:81:de:5f:17:3d:d6:c0:9f:e7:5e:ef:05:
78:6a:76:f0:4a:91:14:b2:51:2b:6d:aa:03:e8:7b:2c:9c:27:
d7:69:7b:a3:e3:26:38:17:66:09:01:71:50:51:e7:49:31:45:
8e:5d:d6:df:f0:b4:47:44:db:f4:f0:a2:68:db:1c:c5:72:64:
58:09:d0:70:5f:94:c8:55:5c:ff:ea:83:74:85:33:de:38:f5:
ba:ce:36:7e:9c:1c:7c:57:4a:e3:d8:97:58:f5:c6:58:c2:c8:
62:fd:e3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:39:29 2025 by rpki-client