Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
File: w5VnlKe5iREVrTr5RXPnlhsWS6w.mft (raw, json)
Hash identifier: 0ZAV4hawH9k1aOwqTy3UvabMpmPrtziSuFpWM7CnHrc=
Subject key identifier: 36:E6:78:D8:81:2C:44:EC:5A:60:65:46:F9:96:AD:37:45:42:B9:89
Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
Certificate issuer: /CN=c3956794a7b9891115ad3af94573e7961b164bac
Certificate serial: 0199FDD92C34E53153785F21DAA181BCEC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
Manifest number: 0AD4
Signing time: Sun 19 Oct 2025 19:01:32 +0000
Manifest this update: Sun 19 Oct 2025 19:01:32 +0000
Manifest next update: Mon 20 Oct 2025 19:01:32 +0000
Files and hashes: 1: Peoo9gs9EBNgjwn3QmaIgoVdA2I.roa (hash: o5UcaRmySAHefVpyYqfIuBk+qGysWoCNDWxnf1QQroQ=)
2: w5VnlKe5iREVrTr5RXPnlhsWS6w.crl (hash: kEeRCic74dV5BPcihhR4g5AazsZoAaVDYd/0UzNX8Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:2c:34:e5:31:53:78:5f:21:da:a1:81:bc:ec:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac
Validity
Not Before: Oct 19 19:01:32 2025 GMT
Not After : Oct 20 19:01:32 2025 GMT
Subject: CN=36e678d8812c44ec5a606546f996ad374542b989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bf:ec:5c:15:30:bf:91:d6:8b:6a:8e:97:4a:
84:98:44:45:54:5a:02:d2:1d:a5:65:f1:1d:9a:01:
ab:2d:8c:ce:b1:04:ec:30:67:56:36:66:89:ac:ca:
16:72:c2:4d:e9:ba:af:a6:d6:e6:3c:1d:47:aa:92:
4e:cd:03:6b:ea:74:e0:09:e7:92:da:00:ca:92:c5:
e8:34:d3:22:b6:b2:f0:29:a8:d9:3c:e9:7b:33:07:
25:72:d9:7d:ec:87:d9:4a:05:88:68:0e:e6:d6:80:
4c:47:2f:43:1f:b7:76:a2:be:d3:f1:3d:0d:0b:3d:
c3:f6:e9:2f:f9:ba:49:0f:b0:92:41:dc:e9:c4:f6:
96:92:37:bd:7c:6c:60:6d:ba:dd:16:b4:70:79:52:
60:fe:44:df:d6:3b:24:0b:3f:6f:1f:11:78:85:e1:
3c:50:ab:16:66:9d:b8:93:4d:73:a1:1c:3e:1b:be:
f2:90:84:4d:0e:63:13:42:3a:ae:d5:82:49:74:5c:
c9:49:2a:e6:22:a9:ff:c6:30:fd:22:c0:dc:30:95:
d1:8e:e6:36:3e:67:53:bb:99:56:d9:e6:c8:45:5e:
91:5b:57:47:a6:ee:fc:6a:2d:4a:4a:4b:0a:3c:26:
a2:24:4c:5b:63:e7:d6:f7:d7:19:37:f9:fd:ce:cc:
b0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E6:78:D8:81:2C:44:EC:5A:60:65:46:F9:96:AD:37:45:42:B9:89
X509v3 Authority Key Identifier:
keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:66:4f:52:6f:1f:fe:f4:9d:43:6c:dc:c7:26:25:e5:e2:83:
32:6d:9b:60:09:8e:01:3b:34:3e:7f:35:e4:5a:15:4c:e4:18:
bd:32:d7:55:6a:41:18:6a:71:a7:22:6a:50:c7:2b:69:9f:7d:
f8:5b:77:41:fb:92:25:34:db:e4:fe:f4:19:91:0e:e3:25:13:
8c:6e:72:d4:89:03:65:39:9e:7e:d7:c9:ef:6c:13:08:33:65:
65:f4:b1:14:2f:ee:0a:07:6e:94:78:4a:dc:46:cd:4a:8d:4f:
4b:a3:e1:af:57:de:c9:d2:74:5e:18:7d:fa:d6:f6:34:17:40:
17:d2:ae:b3:fb:51:bb:52:83:12:4e:bc:ef:64:db:03:b2:a3:
e4:0c:01:f6:4c:d6:78:02:c4:44:c4:38:06:b9:3f:49:f6:e8:
c4:af:c7:7b:eb:52:e8:a2:42:18:1b:45:05:15:fd:87:4d:86:
f1:04:a0:c7:ed:19:cd:25:9c:e0:fd:96:ff:99:cc:04:d2:ec:
90:7b:ab:9d:6b:61:b8:1b:b8:81:14:2a:96:53:d3:9c:c4:26:
63:9f:ba:3d:b6:14:6a:34:74:1d:e4:b1:50:36:0c:22:ed:8b:
2f:42:21:ed:2e:af:1e:51:14:1d:45:ae:a6:0c:96:47:ff:0e:
3f:bd:96:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:25 2025 by rpki-client