Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
File: W8PKDWOo_M3A6SqIprrO_ydecEY.mft (raw, json)
Hash identifier: aZNI2p5LERuHiRy0uNPLLZn3+QtthjqaiuQIcgGvu+M=
Subject key identifier: 6E:24:68:53:39:84:E4:A3:6F:3F:2A:49:95:58:FB:39:6C:57:74:3C
Authority key identifier: 5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
Certificate issuer: /CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Certificate serial: 0199FB45A48957AE19860E58A59A6F206158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 07:01:09 +0000
Manifest this update: Sun 19 Oct 2025 07:01:09 +0000
Manifest next update: Mon 20 Oct 2025 07:01:09 +0000
Files and hashes: 1: W8PKDWOo_M3A6SqIprrO_ydecEY.crl (hash: HFredZUIef2wntMXfhUhWvzBhzb6DKqHfFvm3uxTP9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a4:89:57:ae:19:86:0e:58:a5:9a:6f:20:61:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Validity
Not Before: Oct 19 07:01:09 2025 GMT
Not After : Oct 20 07:01:09 2025 GMT
Subject: CN=6e2468533984e4a36f3f2a499558fb396c57743c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:28:d8:34:7d:2b:58:a7:cd:e1:6e:5f:08:
77:de:90:c7:88:ca:cc:10:cc:7d:49:72:2f:24:eb:
c8:6f:96:2a:5a:f1:6b:4e:6b:d8:50:07:81:cc:f1:
48:92:d7:7f:b6:18:07:d9:06:51:bf:55:46:9d:62:
de:19:9e:3e:f3:26:ef:d2:fe:04:5c:63:ad:21:1b:
8a:1b:46:a5:67:76:21:ae:24:73:1f:47:46:a9:9e:
25:23:01:6e:17:e3:65:f3:37:45:03:ca:99:e1:2c:
9b:47:35:54:c4:a4:a8:30:a5:f5:16:39:ad:fc:f7:
fe:b3:68:27:4c:20:50:be:9a:0c:02:fe:72:ea:31:
9d:8d:8b:13:87:d9:29:63:9b:c0:85:f3:84:cc:5f:
ba:10:0b:9a:53:c0:b1:5c:2e:1f:42:26:ac:4e:db:
02:21:a7:eb:ce:6d:34:df:7e:bc:8b:51:80:57:68:
97:86:97:19:fa:24:1e:b7:64:d9:d3:ad:a7:f0:bf:
0e:0c:d3:22:06:fb:a9:25:56:7f:7c:5f:0f:f0:24:
36:52:75:8a:05:96:60:22:50:85:2c:f3:3c:ea:ca:
39:16:b3:d0:16:78:d7:5d:aa:34:d9:d5:94:55:d4:
ed:0f:ec:9b:7e:e6:25:fc:31:33:8f:01:e5:c3:50:
7e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:24:68:53:39:84:E4:A3:6F:3F:2A:49:95:58:FB:39:6C:57:74:3C
X509v3 Authority Key Identifier:
keyid:5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a0:b5:1b:94:86:37:2d:26:f1:89:1a:76:0d:9a:c3:44:41:
1d:09:2d:51:8b:c6:d3:a0:db:c9:8f:e5:53:e5:08:ff:94:50:
b2:95:7a:e1:fc:bd:13:a8:1d:f7:bc:2b:69:52:90:e2:08:62:
72:3e:a2:fe:d5:bd:bc:aa:b4:6a:64:dd:00:4c:9d:35:d8:35:
62:17:ab:6d:7f:b3:51:b9:8e:f3:f5:8a:90:45:be:40:d4:a6:
a2:4c:18:94:2d:63:8d:e3:ad:9c:17:2a:d3:b3:be:df:47:ad:
62:06:15:1d:a8:13:0b:22:31:ec:95:91:34:32:f9:9b:f3:db:
cd:24:5c:55:2a:57:de:fc:bd:c4:6d:74:12:4a:30:c9:54:25:
0f:96:02:d3:bd:da:c9:6c:f7:1f:53:55:0d:eb:50:53:ba:70:
ae:4e:83:bc:68:75:34:d9:85:70:d8:a9:41:50:b3:b5:22:89:
02:0f:d2:c3:79:d6:79:d8:bc:e2:c8:b3:8a:ed:d0:d3:6b:09:
5d:2d:9b:1a:a7:01:1c:f9:61:68:20:5a:c3:4b:8d:d5:94:f1:
78:b6:ba:8d:99:f2:96:24:2d:26:b4:ca:fa:40:9b:66:d0:ef:
f9:22:2f:9e:61:15:77:38:2a:0f:34:bb:8b:a4:9b:43:75:64:
01:2c:ce:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:59 2025 by rpki-client