Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
File: W7HFcFXCnWafKJqfaPOSgjlCEyo.mft (raw, json)
Hash identifier: V48gvo7fL9ZILvs5J2jm0mXkHG2x/SO7GhF4oc+CyjY=
Subject key identifier: 0D:A6:97:BD:C9:AC:5F:D1:C7:D3:0F:AF:A0:CE:7D:8D:DD:9D:86:53
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial: 0199FB45FF2D5FF5273EB9908ECEE3237917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
Manifest number: 12EF
Signing time: Sun 19 Oct 2025 07:01:32 +0000
Manifest this update: Sun 19 Oct 2025 07:01:32 +0000
Manifest next update: Mon 20 Oct 2025 07:01:32 +0000
Files and hashes: 1: 4DaFRyhphaevZU2yeo88GTb2ZWE.roa (hash: OEDhk/DEbdvUjBCo9g+h/wGJyG5A2KruYkh8mbV9XYs=)
2: W7HFcFXCnWafKJqfaPOSgjlCEyo.crl (hash: wt7geK5wy/EoyU94LJ2ajlD+d904YOBwp4dGlwaCwAA=)
3: oLD0eFUFYxck4v3i6OymPCRtKqc.roa (hash: d9IQhkXi9el+adqbpk+yqo7QWqWaJxfrg/LT1tEGEMY=)
4: uB1fsTN5xt9prk3FmqA_vfOk3V8.roa (hash: Xbk+Y99PsH3Ea8NbCtaJ5KS35ZMdZP+5pz4Y3JKvU0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ff:2d:5f:f5:27:3e:b9:90:8e:ce:e3:23:79:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
Validity
Not Before: Oct 19 07:01:32 2025 GMT
Not After : Oct 20 07:01:32 2025 GMT
Subject: CN=0da697bdc9ac5fd1c7d30fafa0ce7d8ddd9d8653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:e4:99:3e:b9:11:92:d3:60:a5:fa:2f:0a:
94:cd:6a:72:e0:72:28:1e:85:64:13:54:f2:b4:04:
ac:1d:65:99:8b:2a:ec:00:9a:c0:66:c7:3b:8a:47:
30:9e:d4:8d:a6:3d:b7:82:15:44:46:c2:98:cf:be:
1d:0d:4f:8d:35:87:a9:42:8e:ad:6f:a8:f7:43:2d:
90:d7:4f:29:50:f2:6d:82:3e:a4:db:ae:ea:25:55:
88:d1:cd:e1:6a:71:7b:4c:e5:76:e3:6b:74:2f:f6:
49:42:cd:9e:53:11:69:88:e4:f6:3b:82:ff:22:e5:
2d:81:81:9e:9e:9e:53:c1:1d:7a:cf:c0:ff:d7:10:
72:6e:cc:4f:e2:06:b7:04:ed:8e:98:4e:f8:b2:bb:
07:80:92:10:e4:c9:94:06:c7:51:0b:1d:ab:48:53:
98:c4:7a:5f:21:04:cb:d2:75:d0:a0:42:96:7e:3e:
13:8f:7b:0e:5c:1d:fc:5d:04:ba:55:ab:ae:99:00:
3a:08:08:71:00:f4:02:4d:60:42:7f:52:c2:df:1c:
fb:10:fa:01:89:5f:14:17:d0:c7:c1:ca:fd:97:8d:
c2:2b:ba:d0:d6:a0:12:23:4d:1c:41:4e:28:d0:5c:
49:4c:47:49:bc:6b:cc:db:37:64:e5:96:80:17:c7:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A6:97:BD:C9:AC:5F:D1:C7:D3:0F:AF:A0:CE:7D:8D:DD:9D:86:53
X509v3 Authority Key Identifier:
keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7e:de:0c:00:e7:47:58:7e:bc:89:be:49:47:57:93:a4:5e:
33:e9:42:18:c1:6e:5b:a4:48:3f:95:ba:ae:d4:1e:65:8f:a9:
5a:cd:9a:bd:c2:3d:5b:a8:50:c1:64:1c:64:72:d6:5e:63:c4:
37:9d:d4:69:2d:6e:c0:c4:f4:0b:ac:2f:74:87:0f:68:57:42:
24:72:74:f2:b6:79:b7:47:66:89:aa:94:63:45:94:1e:12:17:
15:0c:a2:dd:ec:c9:fc:63:98:41:6a:c3:ee:57:7c:28:70:87:
74:99:04:6c:3f:a0:4e:6d:6c:74:d7:fd:b5:94:d4:cd:6c:72:
66:e5:91:e4:d7:02:d3:16:dc:a1:05:b1:6e:28:72:7e:71:85:
ae:04:35:4b:0e:92:6a:8c:73:64:3d:a2:fb:63:f5:98:a0:c5:
ac:61:ea:5d:b1:24:7b:7a:83:28:dc:c4:78:e2:13:73:94:16:
36:ee:35:4c:bb:7f:f3:97:10:4e:87:d6:95:b0:3d:41:c9:94:
6d:02:3f:d2:37:c4:d3:97:25:aa:74:20:08:88:79:1e:ef:f8:
ba:1c:1b:0b:bc:2f:75:ea:1d:cf:cd:4b:64:bb:4a:4f:b3:ec:
3b:d0:ce:79:d8:5e:c0:2a:77:7f:ad:0c:62:a9:28:99:5d:f4:
d0:2f:d7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:45 2025 by rpki-client