Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
File: W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft (raw, json)
Hash identifier: 4989IOFUjspWe2v5kPMtQBDnw388KwzOgKW2vvuqTgQ=
Subject key identifier: 44:54:DB:3E:D5:D8:B0:D3:E8:B2:01:A7:C2:41:D2:EF:45:FB:C4:AD
Authority key identifier: 5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4
Certificate issuer: /CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
Certificate serial: 019A0035482528B85EFC28B5E9723867C6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
Manifest number: 147D
Signing time: Mon 20 Oct 2025 06:01:23 +0000
Manifest this update: Mon 20 Oct 2025 06:01:23 +0000
Manifest next update: Tue 21 Oct 2025 06:01:23 +0000
Files and hashes: 1: W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl (hash: NNKAkSClHYsLnHO7XZLMmoBostILPI+R4p98qLL/PkE=)
2: yA5B5VXhOCm628j2BmlmI-fci1Y.roa (hash: QTSh8buWKlIWj0giqvjbzYLkHrxbOtA9phJCik8JbFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:48:25:28:b8:5e:fc:28:b5:e9:72:38:67:c6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
Validity
Not Before: Oct 20 06:01:23 2025 GMT
Not After : Oct 21 06:01:23 2025 GMT
Subject: CN=4454db3ed5d8b0d3e8b201a7c241d2ef45fbc4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:19:b0:89:1d:2a:97:7f:c2:a6:95:35:04:bb:
49:94:58:93:a8:20:e2:b1:03:2b:e0:05:d8:9a:04:
90:32:f8:47:0d:91:e8:4c:ee:60:a8:45:8e:c8:ca:
ae:14:62:69:71:88:05:2f:3d:00:11:87:64:d4:9d:
27:67:f0:f7:74:1d:bf:b9:ee:44:f0:22:fd:16:08:
d9:90:a8:50:8f:61:12:53:1c:b7:33:da:c7:95:ca:
83:4c:54:ed:9a:d7:e9:25:35:41:29:0e:e5:d1:f6:
4f:4f:79:59:f4:e3:c0:5d:47:c0:10:f8:3a:e7:83:
0e:dd:49:2e:cd:aa:5a:05:17:47:ee:a9:4c:99:44:
83:11:46:e3:5b:ab:c7:59:eb:9e:4a:0a:22:4f:51:
31:97:c9:35:10:f3:75:c1:68:aa:f2:4e:e1:fd:c2:
0d:39:a4:93:9d:bb:32:98:4d:2b:d6:c3:47:ac:ce:
4e:9b:e1:b7:f3:6d:50:b3:bc:c6:15:b7:b9:8a:31:
4f:08:50:de:6d:8b:2c:2d:e0:45:40:19:7c:b2:ff:
c1:7e:1d:cf:4b:67:ec:fc:e9:ec:90:22:a4:a0:a0:
97:54:59:a3:40:11:66:a9:0c:b7:53:e3:9e:89:87:
68:3a:5c:8e:35:af:8d:d0:d3:23:d2:aa:b3:a2:81:
f4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:54:DB:3E:D5:D8:B0:D3:E8:B2:01:A7:C2:41:D2:EF:45:FB:C4:AD
X509v3 Authority Key Identifier:
keyid:5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7f:4b:74:74:47:5a:c7:77:95:7c:d7:f3:34:38:8c:c4:5a:
1e:23:be:ae:6f:f1:d9:aa:19:f6:75:52:4a:38:6e:05:63:67:
00:ad:55:36:b7:7d:4b:82:50:1f:df:02:02:7d:91:92:d3:31:
5a:fc:60:94:7a:31:18:af:2e:96:92:3e:68:e5:c3:6b:ed:fa:
0d:91:82:8c:8f:51:d8:a9:2d:e4:f3:d2:31:40:94:d4:e3:b3:
3e:33:90:0a:da:26:a7:d1:21:b7:c2:f9:df:9c:7e:ec:91:e1:
7c:b0:f2:f3:3e:97:3c:1f:1c:22:16:d1:4a:0a:fc:de:a1:29:
89:72:b7:a2:78:21:ff:44:a9:67:23:0e:e7:40:a6:03:92:e3:
a0:6c:2d:1c:9e:cf:e0:06:c9:f9:15:b1:c9:a3:a1:48:e7:fb:
f5:16:11:95:c8:f3:c7:78:46:eb:5f:dd:2c:cf:b3:00:8f:ba:
80:51:a2:37:68:ff:f8:04:73:9b:0b:be:52:7c:02:fc:dd:3c:
df:8c:e0:1d:bb:49:ed:61:54:1b:a9:cf:2a:3c:30:7c:61:22:
fa:61:e1:ee:72:93:1e:13:4e:5d:fd:8e:16:47:c8:dc:97:51:
92:28:2b:d9:81:a4:07:98:bf:ec:b2:b5:57:3d:1a:7b:9a:f6:
f6:c4:54:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:56:41 2025 by rpki-client