Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
File: W_YzYv7e4ciRNdVDTTe3N17VoQg.mft (raw, json)
Hash identifier: ojxb9sbSeK5yIjAOJUGidV6CMflkWOyJ40pm95Df+fY=
Subject key identifier: FD:89:53:E2:04:1C:D3:EF:D6:D6:E1:E8:8C:7C:DB:54:16:E9:9F:45
Authority key identifier: 5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
Certificate issuer: /CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Certificate serial: 019A4DE1B375D2D6B679644C5CE701E13FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
Manifest number: 132B
Signing time: Tue 04 Nov 2025 08:00:28 +0000
Manifest this update: Tue 04 Nov 2025 08:00:28 +0000
Manifest next update: Wed 05 Nov 2025 08:00:28 +0000
Files and hashes: 1: 63salWhc3QRvjl4PRdN20jEnN1g.roa (hash: yuGZxPr7QCy1Hv8ABdlA7QRlK++I2cpETqHSsD2+rR4=)
2: W_YzYv7e4ciRNdVDTTe3N17VoQg.crl (hash: DVTrUrbWu8Y8XLqClIT0Gg5u8HtDseDT/o/4oQFdZ10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b3:75:d2:d6:b6:79:64:4c:5c:e7:01:e1:3f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Validity
Not Before: Nov 4 08:00:28 2025 GMT
Not After : Nov 5 08:00:28 2025 GMT
Subject: CN=fd8953e2041cd3efd6d6e1e88c7cdb5416e99f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:80:8f:33:82:03:d8:80:a8:a6:92:23:a3:90:
31:d0:e5:f8:11:46:35:35:a0:1b:96:16:e4:18:68:
82:97:f2:5a:ec:c6:c1:a7:3a:b1:ca:92:90:34:37:
34:ba:47:48:00:36:63:1f:34:3d:33:25:b7:d2:5c:
c4:6f:ba:81:cb:af:a7:9c:8a:de:48:29:60:9d:cb:
6d:3d:d6:7b:c3:23:be:9d:b5:b0:c2:f0:70:bb:49:
a5:63:e7:64:ea:5d:a9:e0:fe:bb:4f:b4:64:cf:e7:
df:f4:1a:dd:38:95:ad:36:78:51:b0:c9:22:5d:18:
a8:81:01:84:ff:92:b1:2e:41:a4:40:b4:25:db:73:
1a:a5:58:d6:e5:ca:70:3f:08:d0:92:b3:69:cb:06:
9a:1e:7e:ec:6a:12:7c:a4:1b:2c:f9:c3:ad:05:d3:
c0:f9:06:09:92:b1:f9:2f:c3:70:62:2f:49:79:01:
68:c1:de:98:27:5a:a7:8b:78:77:71:00:9a:55:bb:
e7:43:3c:12:61:aa:81:1f:df:d2:ab:53:3f:b7:27:
97:8d:a1:63:cb:1c:5f:ac:99:a0:22:9e:96:fb:57:
af:9f:ec:da:69:16:96:4b:46:62:b0:89:a9:d0:e6:
35:4b:22:f9:13:7e:9d:0e:bf:74:8c:30:2c:d3:3e:
99:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:89:53:E2:04:1C:D3:EF:D6:D6:E1:E8:8C:7C:DB:54:16:E9:9F:45
X509v3 Authority Key Identifier:
keyid:5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:bf:15:dc:90:dc:f6:c0:69:e9:5f:53:a4:91:c0:a0:16:e3:
15:07:1d:b4:e0:77:90:a2:55:94:8d:1a:5b:31:30:a8:ee:d6:
7f:05:75:4e:08:ed:c0:5d:0a:af:2f:c6:d9:07:a5:00:aa:30:
ba:18:18:f6:17:31:a9:3f:e3:62:63:03:2f:eb:72:28:e6:f9:
cf:7c:23:cb:ec:dd:02:99:b3:aa:a7:9c:ed:ab:1c:4a:cd:32:
90:93:79:cf:a6:52:f3:75:6c:4c:d7:be:4f:2f:1b:df:ed:ea:
26:fc:77:dc:c2:0c:27:59:7e:23:19:48:74:73:66:d4:1a:08:
2b:00:5a:28:6f:68:b0:1b:b7:80:e8:25:10:7b:f8:ec:cf:4d:
16:1a:ad:b6:30:c6:eb:c7:91:52:78:a0:27:6e:eb:8d:f0:7a:
c4:b8:16:f5:20:eb:2b:9d:c7:b9:15:69:74:d9:49:6a:c6:89:
6e:d1:b1:22:63:97:df:12:3f:eb:26:d3:d4:8e:a1:26:d7:50:
52:96:db:99:08:19:f3:42:59:c6:d3:01:c1:9e:8d:6c:5f:d3:
92:cd:ae:ff:dc:c4:c1:b4:b9:c0:04:bd:52:1e:c7:b6:d8:69:
c7:e4:d8:73:f8:f6:14:81:0c:d8:e1:74:96:ea:c0:28:59:71:
2d:f4:d7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:51 2025 by rpki-client