Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
File: W8FQNhC_gthoe3rvuHmmV4cE8yo.mft (raw, json)
Hash identifier: rPO22SVDODH8uuk4gLn1ywcb0OsO4nOww2Wr0iKO9G8=
Subject key identifier: 19:95:51:E0:A4:3E:67:DA:61:97:CA:54:E5:D5:7D:54:8E:46:2E:E2
Authority key identifier: 5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
Certificate issuer: /CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Certificate serial: 019A541B0D298BAFE552743228DF60932909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
Manifest number: 0DB3
Signing time: Wed 05 Nov 2025 13:00:50 +0000
Manifest this update: Wed 05 Nov 2025 13:00:50 +0000
Manifest next update: Thu 06 Nov 2025 13:00:50 +0000
Files and hashes: 1: W8FQNhC_gthoe3rvuHmmV4cE8yo.crl (hash: 6W5UKx6C9eRD925IxLHciN9oRbARi8BfxpP2wgO2BQU=)
2: rzLK9K7U47FPPeK7ERJASBVVtlU.roa (hash: X91g9n8reIlS29Iuv4BYArQQP2cYDZgj7Nwx0mw9YJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:0d:29:8b:af:e5:52:74:32:28:df:60:93:29:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Validity
Not Before: Nov 5 13:00:50 2025 GMT
Not After : Nov 6 13:00:50 2025 GMT
Subject: CN=199551e0a43e67da6197ca54e5d57d548e462ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:fb:f5:81:b2:19:5b:07:67:c3:3f:86:02:
19:1d:dc:5a:09:30:f8:9c:62:05:26:cc:7e:b2:fc:
08:f3:52:a3:c5:37:64:04:75:40:0a:04:c9:18:f3:
f1:f2:ef:44:f9:70:81:8f:67:1b:ed:f4:29:4e:8f:
d0:1b:d8:1f:02:39:ec:f4:6c:28:d0:3b:95:0a:8f:
32:1c:01:11:53:ea:58:54:4f:28:44:87:bf:d1:6a:
f0:71:0d:17:b9:f9:1e:7f:7a:8f:c2:7f:56:30:57:
20:fd:5c:ed:2e:9f:6e:70:80:68:42:32:13:95:b8:
e3:b5:82:75:b5:63:a6:d5:a7:c3:e1:c0:b1:44:6c:
cf:90:49:bb:84:f6:a8:9a:46:a1:de:b2:2c:fa:4a:
c2:a8:23:23:86:49:47:7b:2d:33:3c:13:a6:18:c1:
69:b7:72:ef:84:fa:91:f6:ea:c7:4d:aa:84:8d:17:
ac:74:6f:2f:f2:06:38:8d:3a:89:9b:3e:83:0a:4a:
a8:60:16:de:17:5f:43:1a:a8:19:78:f4:61:3c:b9:
f7:b6:1b:f7:63:50:c4:4c:ef:3d:25:ea:e2:20:9a:
96:49:48:89:d6:e7:2d:97:c9:75:2b:7c:5c:04:4a:
77:30:7a:b8:97:09:1b:8e:14:7a:1a:f7:5c:ba:d5:
b5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:95:51:E0:A4:3E:67:DA:61:97:CA:54:E5:D5:7D:54:8E:46:2E:E2
X509v3 Authority Key Identifier:
keyid:5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:74:25:a9:20:88:7f:05:f7:92:7c:4d:78:09:53:24:9a:cd:
1c:15:58:ed:8e:50:98:43:04:57:7b:6a:c5:a9:33:7c:61:32:
ee:5d:54:11:30:d6:f2:93:0a:31:f5:f9:a6:d3:38:4c:da:9c:
63:d8:ea:21:d1:e4:ab:f3:e2:f6:dc:77:e2:05:49:d7:4d:c5:
e9:d7:39:bf:03:02:12:82:aa:77:42:46:40:ba:b7:b7:4d:d6:
90:cb:46:c3:59:1b:3b:01:43:11:23:c3:3d:f3:50:08:a9:94:
56:d0:23:b9:a2:e4:82:55:e6:ff:d5:82:e3:22:fa:83:ad:ed:
0e:4d:51:70:df:54:8a:b8:6b:72:9d:87:61:0b:aa:44:e3:12:
91:da:a8:59:3e:d2:19:b0:3a:59:60:45:1c:fa:7d:e1:05:0f:
6b:ad:b9:cc:f5:f1:ee:2b:b7:f3:c7:2f:d5:f4:9d:f7:f4:2d:
3d:b7:69:60:6c:05:46:b4:35:37:7e:ab:07:30:04:b4:88:5c:
74:9c:ec:c0:36:54:15:40:aa:67:5c:63:6d:37:97:eb:37:65:
3b:b8:53:3b:a4:1b:a5:be:2a:64:2d:2f:13:64:eb:d6:e0:10:
10:6f:e8:39:9c:b7:8e:8d:26:a2:16:67:29:63:41:ce:c8:04:
66:f2:3f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:07:43 2025 by rpki-client