Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
File: W5BVHjwX4KAtKNbconnbPkFH-ZE.mft (raw, json)
Hash identifier: K+HV7duxbhtSB7gm7T1kc3HffUEkR//aVlFkBez6aKQ=
Subject key identifier: 14:AB:5A:37:FC:47:B7:09:D5:82:E8:E5:2A:09:14:2B:5B:D5:C4:69
Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
Certificate issuer: /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Certificate serial: 0199FE0FCB5A9905E609E0961793A71C0D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
Manifest number: 1362
Signing time: Sun 19 Oct 2025 20:01:11 +0000
Manifest this update: Sun 19 Oct 2025 20:01:11 +0000
Manifest next update: Mon 20 Oct 2025 20:01:11 +0000
Files and hashes: 1: W5BVHjwX4KAtKNbconnbPkFH-ZE.crl (hash: TgzDuHtvPdyGkTe4B5UjzpsqLLgS9NsljLcH46Qed98=)
2: k0f9OoQq6B1aLa4kFQEIGk8_qxc.roa (hash: Zg6lE/FaFkljjUzS9qnwhWnpjXkAlp/DGZm1wnoBwyI=)
3: mfyRKyki9KIilboLxZkR4V98u1A.roa (hash: zMj3oFzyTUkut1k37DX3Mbj6z32e3XRjiKGOQwnR7iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:cb:5a:99:05:e6:09:e0:96:17:93:a7:1c:0d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Validity
Not Before: Oct 19 20:01:11 2025 GMT
Not After : Oct 20 20:01:11 2025 GMT
Subject: CN=14ab5a37fc47b709d582e8e52a09142b5bd5c469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:b0:99:bf:c2:9b:96:9b:66:29:92:0e:88:
cf:4b:09:de:e0:9f:c9:f0:a5:af:68:1d:91:2b:4f:
08:7f:48:d7:5f:17:e9:70:d1:35:ca:e5:fd:52:db:
f1:e7:a5:26:e7:59:b7:a3:85:5a:71:05:34:1b:18:
f0:6c:4d:aa:a4:1c:ef:f3:23:ca:99:67:4d:dc:52:
0b:15:84:9f:22:10:7f:84:d7:ce:f5:6c:4a:fd:b2:
b2:98:c5:4f:a8:6c:b9:f4:35:fb:99:7a:1c:32:c6:
55:df:98:52:6c:0f:43:45:c3:e1:23:5a:80:59:e1:
78:5f:4d:15:d9:4a:cf:6e:c6:e8:91:e6:06:9c:f1:
76:bf:7d:47:eb:45:32:4e:2c:b3:1e:79:d6:d5:66:
dd:fd:25:62:01:c9:f0:95:69:23:78:96:57:d5:56:
bd:10:1c:7d:f9:bf:17:c3:8e:f2:0e:28:94:3b:f5:
ac:7d:76:dd:5a:36:77:d8:53:bd:60:f9:48:54:ac:
15:44:02:01:2e:bb:17:fc:5d:13:0e:8b:55:30:e8:
c7:39:49:ef:b1:20:22:0e:57:bb:01:9f:68:20:38:
88:b3:0b:06:d4:2f:c0:fa:41:26:c3:ab:71:13:dd:
e9:34:d6:57:75:d0:ce:e8:62:8e:83:94:0b:49:ab:
3c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AB:5A:37:FC:47:B7:09:D5:82:E8:E5:2A:09:14:2B:5B:D5:C4:69
X509v3 Authority Key Identifier:
keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ad:2c:75:27:ef:ec:42:24:d2:1f:5e:4e:64:94:6f:dc:b2:
95:20:11:d1:df:cc:c2:ae:7c:96:7b:42:35:28:dd:e9:ca:d3:
56:f1:b4:e0:40:a3:bb:de:1c:3d:02:18:08:9b:88:a1:8d:4c:
ea:c3:e1:3f:64:1a:54:22:bc:80:74:38:38:00:34:5a:c7:ec:
36:45:ee:be:f6:73:71:d0:0c:b9:06:8f:ae:5e:66:84:75:08:
f1:d1:83:39:d9:6f:2d:a8:d5:e1:00:c9:66:a8:30:d5:85:0e:
cf:62:4c:1c:cb:db:63:a9:87:51:93:2c:eb:38:c7:10:39:8a:
3c:f4:cf:72:4b:d8:2b:2d:5b:70:08:50:eb:43:d2:20:d5:33:
d6:28:ac:4b:05:f8:20:f8:05:4a:16:c5:b2:aa:ae:b5:49:89:
11:7a:13:b3:72:d7:04:1c:d2:44:c9:15:24:73:39:21:2a:30:
df:9d:54:87:3b:23:b6:80:1b:12:00:9b:04:e0:20:b3:dc:d0:
9a:c2:ba:fb:91:97:90:b3:bb:be:1a:bb:af:e2:bf:a2:f3:0d:
cd:92:12:eb:87:bc:ba:61:9a:5e:e5:9f:18:0e:8f:bc:e6:c1:
9c:fa:84:fe:62:da:79:ad:cf:56:90:09:ad:4b:a2:56:5a:07:
da:ad:10:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:02:17 2025 by rpki-client