Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
File: W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json)
Hash identifier: i1eMNbZ7XAdqH0Pc/ZMbhQHIzwYXf13eGQcRPCkpZMc=
Subject key identifier: C1:E8:A5:06:91:4E:11:D5:08:0D:9A:C7:96:C6:EC:17:24:90:29:34
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Certificate issuer: /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial: 019A5608D9FE5BF5C94A92FD09CA5DAD89C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 22:00:11 +0000
Manifest this update: Wed 05 Nov 2025 22:00:11 +0000
Manifest next update: Thu 06 Nov 2025 22:00:11 +0000
Files and hashes: 1: 1-FQBZTT5afKyG6FIAOC0DP_Gyes.roa (hash: QUXwHR9U/j2PM2tc+oqu+jlOONy/4+OVBz6LYmOZ3uc=)
2: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: QQeKPS+hfN3yZ4rhKp/yNv+Em2pb3QOWstxPbO6Pd4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:08:d9:fe:5b:f5:c9:4a:92:fd:09:ca:5d:ad:89:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
Validity
Not Before: Nov 5 22:00:11 2025 GMT
Not After : Nov 6 22:00:11 2025 GMT
Subject: CN=c1e8a506914e11d5080d9ac796c6ec1724902934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:bd:31:b2:d7:10:97:7a:d1:c1:89:61:a4:
f9:a1:13:a9:f7:27:ea:5a:75:e0:40:f6:d5:e5:03:
ef:a5:46:dd:73:97:8f:e1:f8:40:45:16:47:e2:c7:
86:3e:c3:79:00:91:e0:81:b9:78:1b:7e:04:08:4b:
cd:71:ec:4a:fb:6a:c6:57:ce:2a:f7:22:9e:d5:d7:
3a:ab:30:94:a7:99:fd:59:f5:bc:88:fb:91:5c:e7:
d6:c8:66:19:43:1b:6e:b9:ac:b7:5e:d5:03:c8:92:
06:d4:ad:ac:ff:24:c0:62:e0:00:d8:4a:03:de:ef:
cf:a0:7e:12:33:4c:50:d9:af:2c:0d:89:ef:1f:9f:
8e:1f:0b:2f:7f:da:7d:df:10:fb:45:93:8b:87:77:
a7:b2:f5:e9:10:c0:a4:30:3c:85:a8:94:90:33:7d:
19:7b:ce:3d:4a:92:46:43:88:c3:a6:ba:d2:8d:4d:
99:9d:1a:08:bd:d6:bd:bb:e8:8a:12:ee:fe:0d:38:
42:2a:3c:02:3a:23:6a:02:18:96:86:46:5e:c4:d0:
4b:ec:0b:0f:b3:ee:5c:48:9e:ee:4b:ab:e9:5a:7a:
cb:47:ee:15:83:8b:43:42:f8:39:35:3a:1e:ec:80:
6b:05:46:fc:8e:93:58:ef:1a:25:31:55:60:b6:5d:
a6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E8:A5:06:91:4E:11:D5:08:0D:9A:C7:96:C6:EC:17:24:90:29:34
X509v3 Authority Key Identifier:
keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:70:4f:a2:1e:80:7d:24:4e:d5:1f:53:79:26:10:e0:45:52:
1d:e4:9d:89:cf:7f:75:f2:4d:e9:b9:57:fd:cb:9e:57:ba:4c:
14:dd:07:85:04:1e:8d:7b:8f:5a:7f:2a:3c:be:89:5d:db:e1:
f1:c1:d1:2b:d6:a9:16:e3:97:3e:95:6d:6c:5a:44:05:41:22:
b3:1d:58:68:9b:2d:f9:ae:93:1d:e4:3d:1f:30:25:99:6c:35:
b1:88:a6:33:94:fd:1b:49:b6:8e:c5:8b:1e:d4:3f:6e:a1:94:
c6:b2:5f:22:31:d4:33:27:48:09:16:ec:04:ff:43:8d:cc:c8:
47:86:5c:b2:42:18:0d:1b:42:31:b8:d6:98:af:1d:e0:43:4f:
dc:de:91:33:23:24:cb:52:7e:e5:f8:66:39:fc:03:d2:ac:d0:
85:20:d2:e8:e9:4a:c4:ef:d4:0b:9d:74:be:a7:db:44:00:67:
68:42:4d:db:ec:d8:b9:58:03:70:3f:14:f1:63:89:52:11:27:
7e:ce:83:b8:fe:b6:3f:9e:28:58:8a:35:8c:54:a3:4e:a4:0c:
9a:eb:7d:f3:42:ef:a6:be:a8:5e:d1:69:fd:26:a4:37:57:7e:
26:a8:6b:38:5b:1a:72:68:99:01:dd:10:f5:62:31:ad:a1:bb:
0a:17:54:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:48:08 2025 by rpki-client