Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: C0Bu5VzE9slCHPdeUpRtKFUTFa9Nl28MMGAccwb3Sk4=
Subject key identifier: 2A:7E:E2:D1:00:EF:A0:AF:DD:FB:6E:94:97:3C:55:E0:36:3C:FC:7C
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 019A54BF538FCE2C3330E3F4A1A8DEFC55FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 16:00:16 +0000
Manifest this update: Wed 05 Nov 2025 16:00:16 +0000
Manifest next update: Thu 06 Nov 2025 16:00:16 +0000
Files and hashes: 1: Dojs8PEQnvulcYqgM4rdKOxunu0.roa (hash: dLJI4qVjVKlBypD5DT2hbIXIp/KqABCIFpos5VZ0K94=)
2: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: DXwWl+9VGE019WSBLtLVR2I37ziyRa7iAfhiOttdTLg=)
3: ZHpRRkh9oiRLBNkKdSMUtdYZ7o4.roa (hash: G5aCOLk/4QhatU9joqPbjeRwSGccuFt7GUatcEniztQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:53:8f:ce:2c:33:30:e3:f4:a1:a8:de:fc:55:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Nov 5 16:00:16 2025 GMT
Not After : Nov 6 16:00:16 2025 GMT
Subject: CN=2a7ee2d100efa0afddfb6e94973c55e0363cfc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:54:b1:0b:d1:f2:4f:0e:cd:6b:83:c9:fa:8e:
50:19:ae:49:fd:19:53:bb:f0:d2:d0:8c:b1:a1:74:
c0:01:50:dd:2e:ad:6d:0c:8f:51:99:38:21:af:c0:
f5:53:f7:4f:9c:32:81:78:4f:b5:06:e8:5f:a5:b2:
4f:76:bf:ad:27:f5:40:b9:f9:ae:9d:f1:16:7d:10:
0d:7a:8a:a1:8a:ae:a7:69:82:c7:05:62:f9:db:99:
81:6f:55:48:0a:13:16:65:7e:60:b8:79:2a:ee:e0:
d7:22:84:f7:3d:25:33:81:6a:4f:dc:d0:55:94:b4:
63:a1:54:19:1c:52:d2:4a:a2:fd:1a:b8:0f:47:ad:
0c:ef:3f:f0:4e:09:1f:ce:2c:8d:33:31:f1:a8:0b:
f4:25:26:8d:89:fa:03:00:c2:40:58:9f:62:df:55:
1f:cd:8c:f6:b6:de:5f:49:4c:40:02:a9:cc:a8:9f:
54:b3:4c:3b:59:68:59:43:21:fb:17:dc:c3:fe:bf:
4a:dc:f4:a1:5b:76:4f:38:3d:6f:18:3d:d8:4d:7b:
74:6f:b9:7f:26:99:e2:58:53:ac:9b:6d:7e:f1:65:
b3:6b:82:0b:3a:90:34:28:12:c6:e0:5f:a5:28:d7:
ba:74:7d:ce:ea:fe:be:e4:cb:90:02:dd:f6:44:4e:
88:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7E:E2:D1:00:EF:A0:AF:DD:FB:6E:94:97:3C:55:E0:36:3C:FC:7C
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:95:2e:b0:dc:54:7e:f8:7b:0f:ec:f9:3e:6b:0f:1d:c6:92:
2d:bd:85:30:4c:d1:2d:54:c6:85:51:7a:e9:8e:8c:58:92:04:
0a:cc:d7:9e:7b:49:c4:e3:dc:65:3a:11:41:b9:2f:10:a3:47:
9b:d4:76:2c:96:0a:4e:01:aa:d9:67:74:75:15:40:c0:87:b1:
5b:9b:c4:0e:49:4a:70:02:5f:16:5c:75:22:83:cf:ab:e7:fb:
78:84:21:da:b4:dc:d5:07:13:85:17:4a:5f:1b:46:63:6a:55:
ca:30:0b:f7:0f:be:23:87:55:e9:ed:eb:57:28:af:ed:79:9f:
48:5b:9d:12:ef:6f:60:f8:43:ec:02:c7:5b:db:fe:1e:ad:93:
7c:4c:a7:29:e8:27:9f:00:f4:a0:c0:f6:3c:17:ba:5d:82:d6:
2e:f6:bf:52:dc:31:f2:7d:ea:79:47:3f:fd:b9:ec:03:12:e9:
3e:14:93:ff:5d:8e:64:19:44:63:3e:55:5e:03:66:f4:53:05:
f2:70:1d:28:15:ce:34:5d:86:47:4f:96:e9:58:a3:c7:ec:41:
8b:74:13:83:4e:62:71:c9:e5:50:95:74:5e:45:a8:65:9e:f3:
13:df:f6:ce:c5:7a:d7:1b:e0:87:d7:d5:af:69:d3:8d:71:4a:
ca:3b:a5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:15:56 2025 by rpki-client