Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
File: W4smxTL7xStd5nKrNXYdHH2X6yY.mft (raw, json)
Hash identifier: hMNLWOslB4UR9sYK+pGS2urUNR74ULSyBgA3IoMrh3M=
Subject key identifier: 4F:D0:53:91:51:A7:F9:52:C7:26:BB:90:E4:6B:25:36:7F:DD:C8:92
Authority key identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26
Certificate issuer: /CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
Certificate serial: 019A51872721592F02FC132F7B9138D9FB30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
Manifest number: 01C1
Signing time: Wed 05 Nov 2025 01:00:03 +0000
Manifest this update: Wed 05 Nov 2025 01:00:03 +0000
Manifest next update: Thu 06 Nov 2025 01:00:03 +0000
Files and hashes: 1: 7XMrXBUl5guh00C3od83p0sdL2E.roa (hash: s4K7G9zJkdgY7spJ3jJ5e9+1XNKqCaxgKeKuHtLUBSY=)
2: W4smxTL7xStd5nKrNXYdHH2X6yY.crl (hash: Q1ff/Xt+FTn9MBsxrfKQ580ELN32GkjGbMLQJwGylPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:27:21:59:2f:02:fc:13:2f:7b:91:38:d9:fb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
Validity
Not Before: Nov 5 01:00:03 2025 GMT
Not After : Nov 6 01:00:03 2025 GMT
Subject: CN=4fd0539151a7f952c726bb90e46b25367fddc892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e2:b3:9f:6d:57:c7:7f:9d:d6:3f:a5:c2:b0:
c7:12:86:ac:cf:1c:63:2e:12:56:d5:bc:e8:c7:f6:
65:80:06:90:ca:39:57:2b:40:65:c8:b6:f6:c3:42:
c8:87:60:dd:a4:4d:82:d8:7c:79:b1:57:be:f6:45:
a9:dc:f1:27:9c:40:7d:d5:a8:d4:8f:e3:3a:fe:b7:
23:f4:77:f2:64:a4:d1:d9:96:a8:cc:b4:09:61:c0:
e0:6c:9d:eb:e4:a3:b5:24:d5:bd:e5:24:6b:1d:ea:
75:14:ca:10:a5:67:f8:b9:b0:a1:68:bf:85:5c:e4:
f3:57:04:9b:fa:38:7e:0d:06:0b:51:8c:5b:03:68:
9f:ca:cc:23:99:25:da:f4:19:3e:8e:78:d6:27:83:
7b:f7:df:62:ea:ec:6b:1b:1d:89:09:f7:fa:1a:9c:
76:d1:1f:bb:3d:1a:b6:af:a0:e8:61:c8:14:fa:b6:
28:3f:48:73:d0:33:01:cd:26:9b:90:83:d9:db:2e:
4b:58:38:07:fe:23:e8:60:60:d9:3b:97:0b:b0:98:
43:df:70:84:50:63:2e:6b:36:fe:1d:11:f9:89:4a:
c2:f5:61:9b:0a:67:85:b5:d4:ea:f3:77:07:8c:e2:
3a:00:08:cc:1c:0b:9f:93:e5:89:e5:44:2e:aa:b6:
e3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D0:53:91:51:A7:F9:52:C7:26:BB:90:E4:6B:25:36:7F:DD:C8:92
X509v3 Authority Key Identifier:
keyid:5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9b:31:22:49:b3:03:34:c4:2c:59:01:7e:c4:f2:5a:a7:20:
e5:46:06:9d:ae:b7:7f:a1:e4:ec:68:20:e5:9b:f4:65:4d:f6:
e7:d2:46:88:0e:7a:22:32:3e:62:f6:b8:72:2b:0f:32:1f:f7:
26:9b:47:89:ce:be:e9:c9:7f:bd:e9:c8:03:41:22:f6:39:47:
c8:8b:7a:8d:74:df:12:70:84:5e:ff:59:13:ec:c0:b5:dd:4d:
f8:64:0b:7a:32:2d:71:c3:92:94:c2:ef:2c:dc:cb:06:6b:fa:
43:83:13:93:ef:f8:79:c9:e3:d9:a6:0d:e0:2a:ec:96:f6:22:
cf:d0:9c:d3:d1:af:be:43:1f:d4:bb:9c:26:55:82:61:59:2f:
1e:ea:7c:54:e6:91:b3:8c:88:8b:68:42:1a:b8:ff:bc:32:30:
b3:92:39:25:7b:77:db:2d:80:97:3d:74:11:8a:ea:7f:72:ca:
99:c5:74:71:02:86:7d:d0:eb:8f:53:11:76:6e:b1:3c:36:8b:
cc:dd:e2:e3:9e:9c:e7:bf:8e:98:62:38:44:31:aa:09:1e:94:
51:40:d1:3c:83:56:61:26:48:05:df:b0:55:d8:a1:b1:5f:c1:
07:20:1b:60:63:6e:4b:17:08:04:e1:d2:48:40:f7:a7:99:5e:
b6:22:23:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:53:39 2025 by rpki-client