Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
File: W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft (raw, json)
Hash identifier: UScHQ6Dwui0cWd100AB0vTk8e4zwhXE9gXLlzEJEPm8=
Subject key identifier: 65:E4:05:D4:81:92:19:15:8D:57:F9:D2:1B:5E:BB:0F:57:59:A9:29
Authority key identifier: 5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
Certificate issuer: /CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Certificate serial: 019A02FED2E7F660D70AF9BCD5F8BD089C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
Manifest number: 0490
Signing time: Mon 20 Oct 2025 19:00:45 +0000
Manifest this update: Mon 20 Oct 2025 19:00:45 +0000
Manifest next update: Tue 21 Oct 2025 19:00:45 +0000
Files and hashes: 1: D11OUUhDT5UjGqOO2sYVKlSZfd0.roa (hash: 1HSM7rlxpcn34ZRTxOgco4d9oki6ca3htijNuPzC2SI=)
2: W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl (hash: PFKqi2ehyNt4kf//p/c1nc3V3onlSga9ACNZz6xb3CQ=)
3: sscr1AKks234H4_aH9W5QOyjBo0.roa (hash: QpgjlQcIAUxRiyA26HjeU1kRMWG1ZaRrrHu8xWpWD0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:d2:e7:f6:60:d7:0a:f9:bc:d5:f8:bd:08:9c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Validity
Not Before: Oct 20 19:00:45 2025 GMT
Not After : Oct 21 19:00:45 2025 GMT
Subject: CN=65e405d4819219158d57f9d21b5ebb0f5759a929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:09:e3:f6:89:dd:0c:34:a8:61:13:0e:c2:c7:
04:8a:4e:21:07:81:97:2f:0e:6c:24:30:46:3c:4a:
90:a8:63:b0:25:69:e4:23:8c:67:d2:8c:9f:44:45:
fb:b1:c1:8e:8c:3b:88:8f:c0:08:28:8b:50:f1:9a:
3a:0c:ab:98:99:d2:1d:1d:11:9c:73:ea:4f:6b:ec:
cc:69:34:7c:7d:20:8c:7c:d9:91:35:ad:21:fd:ba:
9f:69:29:53:1f:ce:2b:78:da:87:5d:30:8b:30:cf:
2b:74:93:7d:72:b3:ad:33:0c:4d:f4:95:63:27:93:
5c:48:46:1f:39:7c:d5:99:e7:8a:c4:91:21:22:30:
96:56:57:e6:3c:7c:92:b3:ba:06:3d:a6:d3:ed:27:
e3:4a:f0:39:13:14:a1:84:27:cb:21:67:35:f7:e5:
ee:08:61:d4:39:a8:15:ed:6a:f9:7a:fc:41:54:49:
c2:8c:83:c0:1b:a2:b1:e8:96:d9:a2:e4:1c:ed:87:
3f:2b:6b:ad:05:c4:76:cc:6b:3a:f9:5e:ec:a8:79:
64:59:22:6f:d4:88:e0:83:f7:ac:10:f5:9c:a9:11:
86:52:64:ff:5f:87:a1:4f:74:24:e3:9c:91:01:6f:
d8:10:89:66:16:61:48:cb:35:5a:9f:13:60:4f:94:
92:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E4:05:D4:81:92:19:15:8D:57:F9:D2:1B:5E:BB:0F:57:59:A9:29
X509v3 Authority Key Identifier:
keyid:5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9b:ce:71:a7:67:96:b2:42:da:30:a5:b1:b2:54:1d:f5:8f:
1c:4d:9f:db:95:f0:55:a6:9e:a3:f8:61:bf:d8:17:99:40:e4:
c9:d0:5c:38:e2:17:1e:bb:bc:af:16:bf:1e:3b:da:09:f0:ac:
ca:53:33:d2:91:ba:f5:9d:1e:81:2a:b7:04:31:f6:9d:01:80:
aa:67:11:3e:08:31:22:0f:2c:61:bb:d8:15:9b:d1:35:8d:a2:
d8:4e:b5:77:e6:33:35:da:13:28:62:11:a4:ee:b7:dd:8c:a7:
de:21:88:f6:8c:db:39:c9:0c:c5:98:65:fb:86:50:fa:7c:36:
38:c2:c6:60:36:dc:4c:05:a5:2f:89:4d:e7:e7:0e:25:0b:6b:
fe:87:9a:77:a2:f4:c9:37:02:37:9b:54:93:26:15:47:4e:f8:
cf:43:ac:d9:36:cb:e5:93:54:51:9c:1a:ee:9a:d3:c9:70:94:
17:72:2b:07:0c:be:ee:3b:bd:ba:3d:99:94:18:2c:fd:b8:13:
25:34:42:20:de:b1:26:b3:04:5e:6c:86:f5:bb:f2:8f:88:13:
da:b0:d4:2d:ca:86:c3:73:6b:88:bd:78:3b:87:a8:ad:72:50:
27:c7:49:6a:a3:71:fc:d3:f9:1a:a1:7d:8a:55:b9:88:8d:34:
cd:0b:4a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:22:19 2025 by rpki-client