Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
File: W8mmyFynpWV7noroCGXRLvgWagM.mft (raw, json)
Hash identifier: tYbDjeZ5HoBvPuiruvUwaCKL65pAcle58pFuKa0qJF0=
Subject key identifier: 71:BD:5C:CF:C1:F5:AC:2B:9E:6C:26:60:A0:C9:42:CA:55:A0:61:C6
Authority key identifier: 5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
Certificate issuer: /CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Certificate serial: 019A4F98E2C60C87C42B475D274A4D4EEF1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
Manifest number: 0D54
Signing time: Tue 04 Nov 2025 16:00:10 +0000
Manifest this update: Tue 04 Nov 2025 16:00:10 +0000
Manifest next update: Wed 05 Nov 2025 16:00:10 +0000
Files and hashes: 1: DkAig3sreL5BEr4m7B4017Dqunc.roa (hash: os6hbiNRGL8Q/b1fbO8kbiQWOa/7AJzjZXaqV/37DEw=)
2: W8mmyFynpWV7noroCGXRLvgWagM.crl (hash: 93yXtNzTCyAg+iWd5hWTYob+4e/Vp4nMWgi3jIP5518=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e2:c6:0c:87:c4:2b:47:5d:27:4a:4d:4e:ef:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Validity
Not Before: Nov 4 16:00:10 2025 GMT
Not After : Nov 5 16:00:10 2025 GMT
Subject: CN=71bd5ccfc1f5ac2b9e6c2660a0c942ca55a061c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:de:63:39:4f:0a:92:1e:2f:30:c8:2a:09:
f4:e6:03:1a:94:d3:3f:3e:06:c6:07:7d:0f:e5:f6:
1f:02:6c:ab:69:f0:0c:93:94:3e:06:2f:44:4f:d2:
64:53:21:03:d4:89:2f:13:00:a1:98:8b:1a:ea:15:
4c:b2:cc:15:e6:df:78:2b:2a:db:be:cc:f8:05:0c:
e0:fd:dd:ea:0b:5a:dd:e6:2c:f0:2e:fc:29:cc:f8:
f1:0b:6e:26:14:9d:e0:80:c6:43:a2:9e:60:ce:fc:
47:88:6c:23:c0:8e:93:ed:a1:94:52:d4:85:81:5d:
4d:d2:a2:18:2a:0f:70:2b:7b:c5:0e:65:f4:d6:8d:
f5:44:26:41:ad:4b:b8:cf:d0:c8:83:01:e1:c6:3b:
03:74:95:1d:58:90:7e:be:e7:72:92:3e:25:f7:d0:
04:33:41:3f:4f:90:e5:16:d2:dd:e1:22:11:12:30:
24:96:1c:d6:c8:ac:45:94:3c:f3:83:3f:35:02:bf:
4d:dd:4f:03:35:8b:22:3f:ee:8c:50:86:05:82:5a:
8a:7b:fd:65:12:59:98:17:7b:c3:12:48:b6:4a:9f:
01:51:89:8d:0c:f0:c8:b3:45:4b:c1:aa:9e:55:6d:
57:9f:75:0a:3c:bc:15:40:d3:5c:c1:97:d0:51:48:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BD:5C:CF:C1:F5:AC:2B:9E:6C:26:60:A0:C9:42:CA:55:A0:61:C6
X509v3 Authority Key Identifier:
keyid:5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:97:2a:16:36:d3:3e:8c:fa:b5:8e:65:98:81:5e:5d:43:3c:
d9:c5:77:92:64:7b:1e:7e:de:d1:1d:bd:37:d7:7b:95:87:ce:
f4:d6:d4:3d:6c:3c:b0:47:d3:62:82:fd:03:8b:73:80:9a:12:
24:c1:00:eb:0f:46:48:d5:20:79:67:47:fa:33:92:10:cb:6e:
ab:94:53:57:92:7d:c5:49:78:e4:c1:6d:34:14:8c:1e:4f:80:
12:a2:38:d5:1a:8f:a5:3f:21:66:f6:9b:8d:14:98:83:3f:b9:
de:cb:fb:10:4c:cc:f8:1a:95:48:5c:06:b2:3e:24:c4:c0:41:
f9:4b:c7:cd:da:80:0e:b9:71:c2:5a:ea:9b:a1:a7:b8:5d:b0:
f1:15:e9:e2:07:56:d0:2a:88:89:f5:b0:ae:dc:70:a4:09:dc:
0c:c1:0f:24:12:73:c3:46:d6:05:5c:15:90:fe:f2:61:c3:82:
d1:40:a6:74:48:c0:28:59:7f:d0:d0:89:80:df:fa:32:b7:bd:
c1:7e:e2:12:ed:61:45:33:54:55:b7:d3:f1:e6:74:81:a2:9f:
c3:9c:ae:5d:f4:67:be:bc:9c:10:34:b2:f0:d4:40:87:86:08:
6a:65:e7:d9:b8:40:eb:4f:7d:4f:63:a3:48:9e:c6:b7:21:9e:
d4:3d:99:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:29:18 2025 by rpki-client