Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
File: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft (raw, json)
Hash identifier: 9Qkd7a5bX+pcbXOLQhuvDtfckcyb0cQe9pVQxdi0Yjg=
Subject key identifier: 3E:4E:EC:F8:9B:B3:0E:58:3A:A0:A1:A3:50:42:23:55:34:21:1B:BA
Authority key identifier: 5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
Certificate issuer: /CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Certificate serial: 0199FBB36D299C85294E55D3FADB15BCDD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 09:01:04 +0000
Manifest this update: Sun 19 Oct 2025 09:01:04 +0000
Manifest next update: Mon 20 Oct 2025 09:01:04 +0000
Files and hashes: 1: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl (hash: rjEIpLYjspDimNaUB21hfLaOZJy7fURoZBEveZe8qD8=)
2: cwNcFibEiknBhjZUsu5CDMCAHjU.roa (hash: uRGOj4tJKaLxVK1NmQ/cajMQwRP5s1agqok1B0mO3Is=)
3: ocfaSphrJL3xu-4-94X1BAg_eco.roa (hash: CMK1dG+CtJembHP9+sAk12iQiNKdSn83yhz9BkvkSQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6d:29:9c:85:29:4e:55:d3:fa:db:15:bc:dd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Validity
Not Before: Oct 19 09:01:04 2025 GMT
Not After : Oct 20 09:01:04 2025 GMT
Subject: CN=3e4eecf89bb30e583aa0a1a35042235534211bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:71:dd:42:2d:cb:f2:9a:ea:71:f0:13:a8:dd:
83:a3:4c:f9:1b:2f:ea:6a:71:ff:ec:9c:4c:d3:33:
80:42:59:dc:39:88:2e:56:a5:25:8f:03:4f:f0:17:
26:38:7e:1d:89:b1:99:3e:1a:3d:b6:3e:bb:63:c7:
fb:de:6c:5a:81:87:37:0e:60:1b:d7:2d:36:44:d5:
a7:e8:b3:a7:c0:91:16:03:b7:16:c2:b7:a8:45:47:
74:b5:15:65:53:3d:c2:74:48:a8:c2:9b:c7:98:ac:
6e:d7:fb:6d:f2:32:74:09:85:20:7c:06:19:f1:26:
a2:cc:36:fa:50:d8:4b:15:0b:cc:05:00:43:72:27:
e4:c6:92:5d:9a:84:7e:0c:31:8e:fa:0f:3e:f1:87:
15:8a:52:da:1a:93:55:d2:77:55:9c:68:0c:01:d9:
a0:9d:96:0f:33:96:00:a9:13:32:4f:71:36:42:dd:
cc:03:7d:0f:a4:96:c5:5b:bc:5f:ee:9b:36:45:c8:
1c:00:96:5c:30:6c:37:98:0f:e1:56:da:15:ef:fe:
cb:1a:90:37:92:56:0a:b2:18:3a:d3:3e:96:81:29:
2f:ef:f9:2e:bf:c5:20:d2:ac:b1:14:9e:63:21:46:
ab:67:92:48:ce:ec:74:4c:e6:89:b7:e2:93:d3:2c:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4E:EC:F8:9B:B3:0E:58:3A:A0:A1:A3:50:42:23:55:34:21:1B:BA
X509v3 Authority Key Identifier:
keyid:5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:16:94:2a:17:51:32:13:28:30:b8:d5:ce:21:56:cd:eb:8e:
c7:b1:98:b9:f1:7c:2f:f4:6f:b2:88:17:a3:e9:b9:fa:85:b5:
93:07:29:99:42:0d:48:0a:7c:38:2b:db:7c:d5:35:0c:10:23:
40:3b:e2:c7:58:10:a7:21:65:37:e2:0d:8e:07:48:09:39:fd:
b2:0f:ab:5a:56:ac:22:71:07:71:d4:dc:74:b9:17:0d:ff:45:
fe:89:d6:94:b7:27:fb:d9:51:84:03:c5:d4:b4:56:4f:52:8f:
a7:27:43:26:52:3c:0a:3e:85:ef:3d:98:d2:5d:cd:25:39:bc:
ce:8d:c6:7f:74:4a:77:48:99:68:78:bd:6a:d0:85:1e:eb:12:
6a:39:83:55:4c:42:45:c3:80:52:ff:30:4b:b1:21:df:8b:6a:
bd:b0:96:bc:a9:ea:7c:a6:c8:eb:ca:e8:49:84:2b:6d:4f:41:
ec:c5:b3:7b:f5:6c:53:9c:76:1e:6f:49:7d:13:73:2b:47:d3:
3f:87:0e:5b:d7:28:4a:ce:06:e9:cf:ce:de:86:1b:64:25:a2:
aa:7c:10:45:1f:9c:47:b0:2e:e2:f0:88:77:66:9e:50:8b:4f:
f6:3b:43:54:cc:5e:b6:68:cd:da:f4:35:c9:b3:22:1c:4a:e3:
f3:ad:dc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:00 2025 by rpki-client