Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
File: W71p2ZhITBOfrBJlpkV0XzMzzx0.mft (raw, json)
Hash identifier: N6UC5A8SQW/SWC3IaxGN62dtTEoJ6/QLo3ITKllE1mE=
Subject key identifier: F1:29:07:76:BC:EF:A2:19:F2:FD:6C:D6:98:78:96:29:5B:53:11:45
Authority key identifier: 5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
Certificate issuer: /CN=5bbd69d998484c139fac1265a645745f3333cf1d
Certificate serial: 019A4EF51D05A6C64F972D7DA99727A296D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:17 +0000
Manifest this update: Tue 04 Nov 2025 13:01:17 +0000
Manifest next update: Wed 05 Nov 2025 13:01:17 +0000
Files and hashes: 1: W71p2ZhITBOfrBJlpkV0XzMzzx0.crl (hash: ss53y0arVpdxhOrwwpLPc2Qxgss1xrdnajyJgEDN8+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:1d:05:a6:c6:4f:97:2d:7d:a9:97:27:a2:96:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bbd69d998484c139fac1265a645745f3333cf1d
Validity
Not Before: Nov 4 13:01:17 2025 GMT
Not After : Nov 5 13:01:17 2025 GMT
Subject: CN=f1290776bcefa219f2fd6cd6987896295b531145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:79:cc:f2:2a:e1:e1:cf:81:28:0a:e8:58:
23:a3:26:09:3b:cf:10:bc:5b:b6:54:d6:d8:35:14:
00:ac:98:1c:21:89:4f:3d:04:30:0d:8e:26:74:55:
ec:61:17:c2:e3:17:26:3e:1d:20:3a:06:85:32:ef:
8a:09:1a:63:12:c2:55:ad:87:78:df:60:4b:e7:81:
71:9f:5a:e3:76:f8:5b:fb:5b:10:0f:e1:72:63:26:
43:04:e9:69:c1:e6:1f:80:6a:22:12:c7:2c:73:d5:
d1:6e:cc:86:cd:13:a2:f2:b3:ac:1d:ff:ee:e5:ed:
d9:b3:e2:d1:ec:54:7a:e1:7f:e6:82:2a:7e:c7:36:
31:f6:77:11:2a:f7:74:64:94:cc:75:6f:4b:88:f7:
68:a0:70:0e:ef:e0:0e:54:00:df:70:4e:fc:df:45:
00:55:f4:50:cc:1a:cc:8b:58:28:ce:5d:10:7d:62:
92:84:e6:19:16:db:61:50:df:46:28:dc:dd:a8:d3:
55:08:5a:4c:b8:ea:6d:e7:f0:07:98:b8:70:c0:30:
97:20:56:99:a4:5a:3b:3b:9d:a7:11:f5:bd:58:f1:
d2:b9:68:fd:e3:8b:72:35:94:ff:f8:4d:bd:77:67:
c8:bf:a9:83:4e:db:0b:21:9a:e6:26:f7:90:5d:8a:
b6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:29:07:76:BC:EF:A2:19:F2:FD:6C:D6:98:78:96:29:5B:53:11:45
X509v3 Authority Key Identifier:
keyid:5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:58:00:df:04:1d:2c:8a:a9:10:a2:69:c1:f2:d8:02:fa:8f:
ad:39:95:7b:ed:21:e6:9b:80:bf:f9:2f:c0:fd:e6:99:97:74:
04:67:c0:b4:0e:13:8e:3f:d1:99:a9:19:06:19:8f:ad:8d:83:
b7:96:e7:75:fd:4f:e2:96:4e:3b:77:7a:e3:92:fd:a9:a0:23:
64:b3:a6:bb:b8:a9:ee:25:59:8d:f7:74:77:53:dc:92:76:9e:
61:47:0d:7d:77:50:30:b2:9c:4b:9e:f3:f2:14:37:46:78:78:
96:d1:e4:03:2e:5d:82:9f:46:3f:18:93:67:1d:c2:f3:ff:6b:
03:48:27:ca:7d:60:ec:76:67:06:fc:3c:43:f9:a0:45:f7:f4:
e6:6f:d2:09:f8:c9:61:c5:39:91:c1:17:8e:d1:7e:f3:d4:1c:
f2:ad:17:6a:fa:69:ec:f5:98:0f:74:33:ba:0d:3e:d0:87:f5:
01:e1:d6:f9:67:26:0d:14:11:be:bb:fd:e3:d9:cf:c5:02:e4:
bb:92:23:32:f6:ea:97:43:b3:45:b9:79:95:1c:0e:8c:1d:ad:
13:3d:32:7a:95:2b:7e:4c:52:96:38:80:1c:ce:da:43:96:7a:
3b:7a:d5:d4:83:60:2a:40:54:a5:cd:f9:01:c8:83:d1:26:f8:
1e:8f:d3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:49 2025 by rpki-client