Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
File: W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft (raw, json)
Hash identifier: c9UgIryc436ji9g6s6OXv5P+l5EmrSAKXIPA+oc6ZKc=
Subject key identifier: 09:12:17:48:0B:94:E7:E1:3C:72:EE:43:B9:BE:E9:52:4F:3A:D8:28
Authority key identifier: 5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7
Certificate issuer: /CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7
Certificate serial: 019A51F548D4DECB40FDB4FBF0B82B3DF729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 03:00:20 +0000
Manifest this update: Wed 05 Nov 2025 03:00:20 +0000
Manifest next update: Thu 06 Nov 2025 03:00:20 +0000
Files and hashes: 1: W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl (hash: 5GkTFBK4f79BVuY2f5aiyGtUbhWxXo2WuewSGpCv94g=)
2: YSvlEI-QwRaOJVEKhPo-n7hFfMs.roa (hash: 2D47YFaNK7fea1JKhXlBWUic8EXXrjyXZMVK5ghBVPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:48:d4:de:cb:40:fd:b4:fb:f0:b8:2b:3d:f7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7
Validity
Not Before: Nov 5 03:00:20 2025 GMT
Not After : Nov 6 03:00:20 2025 GMT
Subject: CN=091217480b94e7e13c72ee43b9bee9524f3ad828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:78:11:28:1e:1d:45:ed:c3:fd:a2:d6:52:05:
72:c1:d7:47:0e:e4:eb:82:5b:40:a4:0c:b2:31:96:
ef:c1:f2:01:77:1c:8e:b8:21:19:c2:dc:ee:07:ee:
9b:41:f4:20:97:9b:33:f9:fb:2c:a1:91:12:df:f5:
41:ef:cc:51:c8:76:80:a3:8a:27:fe:9e:e4:03:3d:
7c:52:f9:14:2d:3f:94:15:13:2e:82:87:59:8c:04:
17:8e:e7:89:79:9e:1c:17:9b:7e:22:8f:5d:d6:78:
d1:73:c2:6d:9f:d1:d4:4a:75:08:ad:fb:fa:72:21:
f6:3b:a9:a3:3e:21:78:32:37:cd:a1:a4:9a:71:7c:
10:51:a8:e1:d2:65:5d:c5:8d:5a:6f:59:e3:7a:00:
88:32:d6:86:1b:75:e0:03:21:a2:35:16:bd:9f:da:
83:1c:75:73:23:44:79:dd:3a:cb:80:37:0c:84:16:
71:be:17:57:02:bb:54:de:a8:60:13:59:0b:bf:ab:
20:64:62:26:53:4f:83:ca:0c:69:72:6f:02:3e:8d:
f6:b0:67:3b:56:26:69:4d:e1:41:15:0a:a8:ef:e1:
fa:6c:a2:d3:f2:c9:41:1b:33:eb:9b:0e:83:12:03:
c2:e2:17:3a:fe:56:a8:f8:be:48:61:cb:07:3e:d9:
6a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:12:17:48:0B:94:E7:E1:3C:72:EE:43:B9:BE:E9:52:4F:3A:D8:28
X509v3 Authority Key Identifier:
keyid:5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2f:5c:d9:df:98:ad:36:7f:a3:0c:2f:c9:37:9b:ce:c9:bb:
d6:4a:a1:d1:f5:bc:ad:9b:93:34:fc:c7:c5:9d:c0:ea:d3:71:
b7:9c:b2:b7:f0:3a:e9:12:e2:9e:af:fc:5c:2f:b8:43:5b:79:
9c:68:4b:26:90:4e:48:53:25:25:53:09:a3:5a:20:cf:dc:94:
4b:56:5a:5a:90:f1:85:b3:2d:52:db:1e:be:b1:e3:64:2b:6e:
c9:94:da:02:f2:21:7d:df:2b:a6:de:c4:b2:02:68:57:92:d3:
c6:df:72:f8:86:21:c9:60:a2:2d:1d:5f:17:bc:a7:dd:98:ea:
67:61:45:ca:15:a1:e4:27:6b:d4:05:aa:b5:41:83:3f:3a:43:
81:ee:fe:5c:a8:e1:86:29:2d:e2:71:57:2d:3f:54:5f:37:b3:
18:d4:5d:0a:d1:49:ec:50:d5:6a:bd:c0:3c:28:e2:6d:f5:f1:
41:5c:57:10:45:8e:16:8f:45:3f:a9:d0:ca:2a:72:a0:41:c9:
ee:34:47:7d:10:14:88:d3:6b:c1:06:aa:a8:e6:44:46:39:3f:
6f:b9:a8:bf:94:a6:29:14:f0:6b:f1:5a:58:c9:b0:4c:f5:9b:
6a:50:c8:47:c8:ed:d5:79:10:2a:61:48:0a:38:1d:9e:5e:ad:
9f:21:60:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:10:52 2025 by rpki-client