Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
File: W8PKDWOo_M3A6SqIprrO_ydecEY.mft (raw, json)
Hash identifier: cUnwrvXKlvuR0mG6EHs2sf490whIImHg9m9F1DfVWbA=
Subject key identifier: FA:42:1B:75:3C:85:37:A7:50:35:27:36:BC:26:03:1E:85:26:E1:6C
Authority key identifier: 5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
Certificate issuer: /CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Certificate serial: 019A503DEAF04212157AA6B47A90D1292D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 19:00:26 +0000
Manifest this update: Tue 04 Nov 2025 19:00:26 +0000
Manifest next update: Wed 05 Nov 2025 19:00:26 +0000
Files and hashes: 1: W8PKDWOo_M3A6SqIprrO_ydecEY.crl (hash: mVrC8V/WQxj0MUVttmlE2muqJ59cIQZoxn8wQaeyvRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:ea:f0:42:12:15:7a:a6:b4:7a:90:d1:29:2d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Validity
Not Before: Nov 4 19:00:26 2025 GMT
Not After : Nov 5 19:00:26 2025 GMT
Subject: CN=fa421b753c8537a750352736bc26031e8526e16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:52:5e:c6:a5:c4:c4:3f:29:5b:5c:00:18:
8d:19:71:0e:1b:a1:e9:a7:6b:a7:0d:fc:f3:30:44:
aa:32:6d:dd:a2:65:45:e8:e3:6c:fe:84:2c:76:58:
80:d6:6f:aa:c0:01:d7:6f:50:c8:21:84:2c:66:c8:
e8:c5:b9:6e:40:94:58:44:3a:61:13:9e:ac:8e:26:
c5:c3:4d:1c:77:10:db:82:c4:66:3c:93:4a:ed:c4:
4b:43:2e:d5:f8:cb:fc:cc:9f:05:43:7a:d9:15:bc:
49:54:40:ad:fe:80:bd:f7:bb:67:5c:ab:7e:a9:a4:
dd:8f:65:f9:e4:43:5a:e2:22:e2:ad:a5:85:1e:89:
03:72:ea:8b:73:e5:a5:ad:eb:e1:d9:bf:0a:e3:53:
58:a1:58:39:b3:5c:df:29:0c:ac:5b:66:30:d1:7e:
de:7f:92:d4:cd:45:b7:3f:b6:2b:87:1c:41:ca:43:
6c:fa:67:6c:5f:3f:b7:89:f2:b8:1b:7a:59:ef:82:
a5:51:b0:cb:09:c1:27:94:db:af:ed:62:78:1d:e0:
1b:4b:f8:20:c5:b1:e4:34:bc:be:7c:f6:bb:aa:eb:
16:81:62:e2:b7:9a:11:d7:35:87:92:fe:cd:dc:f6:
89:a7:24:df:9d:47:3b:82:68:eb:0a:ac:d4:65:ce:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:42:1B:75:3C:85:37:A7:50:35:27:36:BC:26:03:1E:85:26:E1:6C
X509v3 Authority Key Identifier:
keyid:5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:99:f7:94:56:e3:69:9b:f1:ae:a3:8c:bb:ab:0c:36:ba:27:
11:74:53:c2:52:33:f0:ab:9f:5e:cc:b7:3b:6f:60:12:18:9c:
52:26:db:6b:cb:6c:a1:16:21:41:2c:90:26:ea:46:05:78:c2:
33:eb:34:32:76:dd:ff:01:0c:af:3a:4c:eb:d6:60:cd:46:c9:
0a:eb:ea:e6:67:d4:ce:73:f9:09:d6:c9:c6:03:c4:dc:62:d3:
b5:5f:d3:81:47:6d:67:59:6c:d3:d8:41:dd:0b:8c:8f:83:b7:
e2:89:be:29:19:c2:dc:f4:7e:84:aa:2e:d8:2d:7c:da:33:76:
8b:82:46:fc:4d:ab:d1:75:79:77:d8:f2:9f:97:d2:e7:29:97:
3c:ac:99:3b:db:c4:a8:6a:3e:6a:55:56:52:e2:c7:22:65:6d:
1b:55:16:ee:af:04:2b:4a:a8:ce:43:e1:bc:a4:c3:3c:b2:9f:
eb:80:6c:af:e2:e9:1f:5e:ce:22:ed:70:1e:9d:62:ce:a9:1a:
ef:26:30:63:91:ab:ae:e6:ef:cc:33:9d:05:e5:69:ba:31:72:
7d:8e:76:c9:07:91:85:98:2b:d7:c1:16:a5:7d:01:6e:75:18:
4c:c3:c0:22:61:f6:6d:bf:1a:12:f1:08:13:9c:d5:cf:11:bb:
7f:bb:3d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:43:52 2025 by rpki-client