Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
File: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft (raw, json)
Hash identifier: JVCqKkDn331FrkI2mSpzMzU7v1SMoKLXHkSjK8gQ97Q=
Subject key identifier: B2:97:03:24:11:33:E0:AB:9B:FA:B6:1F:95:8B:5E:D7:0B:B9:2B:53
Authority key identifier: 5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
Certificate issuer: /CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Certificate serial: 019A4DE1950EACFC110010CD53935036957C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 08:00:20 +0000
Manifest this update: Tue 04 Nov 2025 08:00:20 +0000
Manifest next update: Wed 05 Nov 2025 08:00:20 +0000
Files and hashes: 1: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl (hash: JzQbdMN6noaFtkiwK1fFSIPMGORfIyyYiF4RVTOwYV4=)
2: tB5aBJS3V73LTF4Y_ajxS_KE82E.roa (hash: 9K+XAgVeIkD6/9g1gviP3PsjTP4VKXdwP9YBlFoakdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:95:0e:ac:fc:11:00:10:cd:53:93:50:36:95:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Validity
Not Before: Nov 4 08:00:20 2025 GMT
Not After : Nov 5 08:00:20 2025 GMT
Subject: CN=b29703241133e0ab9bfab61f958b5ed70bb92b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d3:b3:c5:1c:bb:51:d1:0e:cb:19:92:09:b4:
cc:97:28:0b:62:63:49:bd:f6:56:29:9e:13:b4:74:
c8:c9:72:17:a4:b1:40:a3:26:3d:5d:92:c7:15:eb:
bd:d7:ce:e9:4f:ab:8f:8c:c2:9d:e3:69:41:2c:18:
93:31:0a:66:55:6c:18:f1:59:e5:cb:f4:95:f6:49:
19:dd:4c:78:0b:92:78:81:e9:f2:c1:c8:68:e8:8b:
ca:36:1c:27:f1:6b:28:a7:a6:13:02:a1:40:7f:50:
70:79:f8:bd:22:d0:5f:6f:73:98:c5:e5:eb:5c:d2:
95:03:98:06:17:46:e7:af:08:e6:c7:f3:ca:cb:b2:
38:88:ee:44:7c:c2:51:4f:1b:9a:dd:e1:ad:4f:79:
14:fc:95:d3:a8:e1:5a:f0:ca:fc:cf:69:95:71:cf:
04:cb:db:f2:14:3b:dc:66:29:15:4b:51:41:23:04:
0d:5b:9e:2e:77:b5:d8:d6:8e:c3:e0:5c:f4:cb:7c:
03:bc:a3:05:e9:26:0d:2a:ae:5a:f5:33:cb:23:65:
da:d7:a6:fb:c8:00:25:1f:08:96:cb:a6:21:c7:47:
1d:ae:72:b5:71:13:bf:02:ab:e9:da:1b:d8:e1:97:
aa:f6:2a:c4:58:86:94:bc:59:0d:28:44:43:55:1c:
b8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:97:03:24:11:33:E0:AB:9B:FA:B6:1F:95:8B:5E:D7:0B:B9:2B:53
X509v3 Authority Key Identifier:
keyid:5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8f:34:ba:30:e7:b9:fa:94:c1:3e:65:a1:e6:e5:4d:cb:3b:
0e:46:57:dd:d9:64:8b:9e:13:3c:3f:5d:8c:57:a1:6d:e2:b9:
b4:60:e2:18:70:ef:b4:86:9c:2e:87:50:0e:88:20:af:60:9c:
28:fa:2d:18:03:3a:0d:d4:3b:2a:ff:9d:a8:7c:ad:7c:46:17:
12:76:a8:04:1d:76:1a:db:ae:cb:a0:52:3b:4b:ae:51:6c:c3:
76:73:54:3b:ca:d0:ae:01:c0:30:cb:7d:58:16:27:bb:be:76:
a4:7e:4c:35:5a:c5:13:11:f0:8c:bc:9f:f8:75:ed:c6:92:22:
6d:fa:71:68:ab:0c:88:91:13:76:17:b5:5d:fd:bb:80:ec:fe:
e6:a3:32:0e:85:89:6f:8e:fe:ed:e5:a0:01:c9:d5:e8:4c:b5:
43:7f:0e:a8:2f:8a:76:af:8e:09:0e:9c:3e:79:ad:ea:ca:4f:
09:fa:0a:8c:41:45:0e:fe:6d:2a:23:94:54:db:12:98:4f:34:
37:5e:b5:7b:31:01:0e:89:58:2c:8a:e0:e5:d3:9b:80:48:1a:
7d:b5:b3:06:9c:e1:d8:5e:2d:7f:b9:df:4a:e1:17:30:0a:84:
f5:aa:20:0d:3d:9b:5c:6c:e4:a6:48:b6:d6:69:5d:c3:ed:4e:
fa:dd:28:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4ZUOrPwRABDNU5NQNpV8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViOWE0MGZjM2YzNTBhYmRhNTlkYmZjMDFjYTM3YTQ2ZDhk
NzQ3NjQwHhcNMjUxMTA0MDgwMDIwWhcNMjUxMTA1MDgwMDIwWjAzMTEwLwYDVQQD
EyhiMjk3MDMyNDExMzNlMGFiOWJmYWI2MWY5NThiNWVkNzBiYjkyYjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptOzxRy7UdEOyxmSCbTMlygLYmNJ
vfZWKZ4TtHTIyXIXpLFAoyY9XZLHFeu9187pT6uPjMKd42lBLBiTMQpmVWwY8Vnl
y/SV9kkZ3Ux4C5J4genywcho6IvKNhwn8Wsop6YTAqFAf1Bwefi9ItBfb3OYxeXr
XNKVA5gGF0bnrwjmx/PKy7I4iO5EfMJRTxua3eGtT3kU/JXTqOFa8Mr8z2mVcc8E
y9vyFDvcZikVS1FBIwQNW54ud7XY1o7D4Fz0y3wDvKMF6SYNKq5a9TPLI2Xa16b7
yAAlHwiWy6Yhx0cdrnK1cRO/Aqvp2hvY4Zeq9irEWIaUvFkNKERDVRy4eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKXAyQRM+Crm/q2H5WLXtcLuStTMB8GA1UdIwQY
MBaAFFuaQPw/NQq9pZ2/wByjekbY10dkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzVwQV9EODFDcjJsbmJfQUhLTjZSdGpYUjJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yZWVkZTYtZmMyMC00ZjhhLWFlMjkt
NzI1Mzc1MjZhZWUyLzEvVzVwQV9EODFDcjJsbmJfQUhLTjZSdGpYUjJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yZWVkZTYtZmMyMC00ZjhhLWFlMjktNzI1Mzc1MjZhZWUy
LzEvVzVwQV9EODFDcjJsbmJfQUhLTjZSdGpYUjJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqI80ujDn
ufqUwT5loeblTcs7DkZX3dlki54TPD9djFehbeK5tGDiGHDvtIacLodQDoggr2Cc
KPotGAM6DdQ7Kv+dqHytfEYXEnaoBB12Gtuuy6BSO0uuUWzDdnNUO8rQrgHAMMt9
WBYnu752pH5MNVrFExHwjLyf+HXtxpIibfpxaKsMiJETdhe1Xf27gOz+5qMyDoWJ
b47+7eWgAcnV6Ey1Q38OqC+Kdq+OCQ6cPnmt6spPCfoKjEFFDv5tKiOUVNsSmE80
N161ezEBDolYLIrg5dObgEgafbWzBpzh2F4tf7nfSuEXMAqE9aogDT2bXGzkpki2
1mldw+1O+t0oXg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:24:31 2025 by rpki-client