Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
File: W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft (raw, json)
Hash identifier: UzsHHDT5vgCpsCITS2DmEzYnx64PRQWZJSP+Qh1aWxA=
Subject key identifier: 70:44:29:68:AC:6F:01:56:E2:8E:63:57:1E:C7:72:41:52:0E:25:8B
Authority key identifier: 5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
Certificate issuer: /CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Certificate serial: 019A01B63F9F53818DA0467A3E6C99B539F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
Manifest number: 0C87
Signing time: Mon 20 Oct 2025 13:01:51 +0000
Manifest this update: Mon 20 Oct 2025 13:01:51 +0000
Manifest next update: Tue 21 Oct 2025 13:01:51 +0000
Files and hashes: 1: 6Ij32bY1nBHX7vkCzgQ3qR10RDM.roa (hash: S+nJqkN01ff0FHv6Vz2ODAn9dbe51mqTXffZ1Idn4oU=)
2: W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl (hash: MCia0dGyqbPNOqU+CmbliFjjq0z1YRorkJYEDoRAx4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:3f:9f:53:81:8d:a0:46:7a:3e:6c:99:b5:39:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Validity
Not Before: Oct 20 13:01:51 2025 GMT
Not After : Oct 21 13:01:51 2025 GMT
Subject: CN=70442968ac6f0156e28e63571ec77241520e258b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:07:ea:a3:4b:44:09:5a:dd:3a:1c:dc:91:fd:
b8:3a:f2:0e:ef:0d:f9:8d:08:8a:7a:c9:6f:5a:c5:
41:ee:26:0c:14:40:d4:54:21:59:d4:11:e6:ac:2e:
a0:26:d6:6f:e2:94:73:90:10:f4:d9:66:88:8f:0a:
13:e3:f1:75:97:da:14:a5:04:89:1e:3d:6e:d7:bb:
38:98:a2:30:c7:88:a2:f6:75:c1:a9:5f:37:60:95:
74:7a:60:52:88:e0:a5:67:ef:f8:a1:78:6a:58:89:
78:48:bd:84:f9:c9:ee:a7:b0:48:bb:86:e0:20:bd:
d3:4c:ce:40:27:50:da:0e:93:8f:bd:2e:a1:71:17:
76:5e:32:2f:ca:fd:68:73:9d:21:55:de:6a:0c:7c:
b5:76:e0:87:90:e1:64:b4:8c:91:d8:6c:69:3b:9c:
8f:3a:6a:1b:b8:4c:cf:0e:2f:fa:37:9e:1c:23:62:
66:1d:62:55:b4:e8:db:81:2a:81:70:99:b6:d2:f0:
16:de:90:5e:35:bc:8c:bb:bb:81:99:5c:f1:eb:b2:
40:f9:8e:b1:48:13:83:89:bf:fe:7d:52:8e:56:8d:
14:a0:e8:80:c2:b1:58:7e:c4:b6:42:df:02:6b:06:
9b:14:43:25:cd:59:92:fa:0f:9d:5c:37:df:92:8d:
57:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:44:29:68:AC:6F:01:56:E2:8E:63:57:1E:C7:72:41:52:0E:25:8B
X509v3 Authority Key Identifier:
keyid:5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ac:e6:d1:c4:a2:7c:59:04:01:81:bd:64:f0:e5:22:bb:af:
a6:4d:a4:f9:21:d6:a8:d9:36:ea:16:93:bb:b4:ef:a7:10:43:
b2:ad:5e:c6:60:9b:8d:37:51:86:1e:65:4c:3d:02:57:f8:81:
39:a6:5c:33:dd:8f:4e:32:33:9e:c6:83:02:55:90:f8:6b:7b:
4c:a6:6d:e8:3f:f0:76:ed:3b:6e:6e:70:59:02:55:7c:9c:87:
d5:c3:0c:58:4f:6e:4e:70:6d:e4:7d:1d:79:3b:b4:22:34:ae:
41:b8:12:7c:b2:8c:cb:62:14:02:ac:1b:d9:35:ed:5c:c6:ea:
f7:0c:fb:29:80:23:c4:df:74:ab:49:d9:e4:88:f0:cd:4b:36:
e0:23:be:c0:6d:44:6d:d0:3c:4a:54:9a:de:33:83:d0:62:5c:
5b:f1:d8:7a:4d:26:86:d2:1e:45:32:98:ed:d4:05:f3:35:b5:
9b:0f:0c:46:f4:d4:c2:4f:a9:e5:81:a8:14:f7:7c:5e:99:77:
3d:39:aa:0f:07:b9:22:6e:51:d7:3a:96:6e:12:31:2c:e9:74:
51:f9:f9:4f:b7:76:20:c1:07:12:74:3c:e8:26:b2:79:f1:5c:
43:df:93:7d:3a:2d:a8:a5:be:b1:50:fc:86:54:29:d4:91:00:
08:91:86:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:21:18 2025 by rpki-client