Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
File: W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft (raw, json)
Hash identifier: HJb3r/lo8bTDyTXqOIkWJ5fbv8Jg0gyDZx2WgOnCGwc=
Subject key identifier: C1:51:27:2E:FA:2A:51:34:C4:B8:F8:23:29:33:8A:EC:14:96:AB:BF
Authority key identifier: 5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
Certificate issuer: /CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Certificate serial: 019A50E2B5F6F23C9A89E006F34B933B07C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
Manifest number: 0CB0
Signing time: Tue 04 Nov 2025 22:00:26 +0000
Manifest this update: Tue 04 Nov 2025 22:00:26 +0000
Manifest next update: Wed 05 Nov 2025 22:00:26 +0000
Files and hashes: 1: 6Ij32bY1nBHX7vkCzgQ3qR10RDM.roa (hash: S+nJqkN01ff0FHv6Vz2ODAn9dbe51mqTXffZ1Idn4oU=)
2: W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl (hash: lBKGSTpFH7Yy45zXtev+VY3daotTIii82lysMJp4IKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:b5:f6:f2:3c:9a:89:e0:06:f3:4b:93:3b:07:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Validity
Not Before: Nov 4 22:00:26 2025 GMT
Not After : Nov 5 22:00:26 2025 GMT
Subject: CN=c151272efa2a5134c4b8f82329338aec1496abbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:a8:29:73:b5:8f:ca:af:ad:22:83:d2:36:
18:56:35:83:32:bf:ec:59:6e:ce:ea:4d:43:e2:74:
7e:4d:cf:35:23:c0:10:41:e6:6a:63:9a:9c:b5:36:
bf:58:09:90:09:06:8a:33:e4:31:02:4c:de:18:43:
99:7c:d8:b0:21:e6:f1:6e:17:5b:bb:08:03:84:0d:
4b:68:f1:d1:29:11:6d:f4:35:2b:40:3e:f0:5e:d6:
df:fe:95:6b:96:e2:42:21:91:e7:1a:2c:96:23:89:
7d:e7:74:ea:85:f3:4b:4f:28:42:62:bb:cd:ed:44:
4a:ea:7f:c4:e1:69:82:96:e5:c2:0b:ed:97:bc:1a:
2c:92:ae:15:99:a9:7f:41:fa:96:47:b0:a7:7e:bf:
34:78:e5:4e:cb:b9:a0:12:c6:5c:4c:8b:00:4e:b1:
9d:6d:c8:5f:f2:d7:ed:79:23:58:37:86:fd:b4:6c:
ce:e7:2c:0a:69:1d:f8:70:02:7d:5f:91:ae:fd:a0:
d4:81:bb:c5:d4:7b:80:55:2f:eb:67:90:cb:2d:9d:
79:64:d7:11:f5:4a:41:be:a9:aa:a6:88:28:11:29:
59:1c:2f:56:23:66:e4:38:4a:0a:b6:92:11:5b:93:
0b:c6:2a:a7:5c:61:d4:3c:c1:47:f6:a6:03:5a:a1:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:51:27:2E:FA:2A:51:34:C4:B8:F8:23:29:33:8A:EC:14:96:AB:BF
X509v3 Authority Key Identifier:
keyid:5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5f:68:e5:d0:9c:ac:77:f0:38:12:b8:8c:65:53:58:e5:5f:
ca:78:65:96:47:06:23:7c:13:5f:a9:47:7c:4d:a5:d1:d1:e4:
8b:04:32:be:ad:2f:73:65:36:e0:06:7a:8d:92:e3:f6:2b:f2:
6e:c8:ee:55:c8:85:1a:d5:47:cf:b8:30:9b:83:ba:f0:7f:80:
54:46:a2:6e:a8:c7:68:92:88:a4:a0:8e:35:e1:20:50:07:1c:
6d:50:b7:87:da:a5:b6:a9:c7:57:bf:40:64:be:29:90:f0:6b:
c9:99:72:18:8b:48:99:cd:ec:f0:78:ad:d4:97:60:6b:ae:f8:
bf:5f:52:f8:74:91:dd:45:ae:0b:dd:32:da:1e:17:8b:b6:99:
c3:02:80:a5:90:8c:e1:b3:fd:d7:5b:a5:17:89:b7:3d:ad:a3:
45:d4:d6:ab:b9:4a:c5:39:0e:7e:25:43:1e:cc:63:d8:1c:8e:
a8:7e:cb:fd:8a:77:74:62:ce:04:63:82:74:1d:91:b5:f7:73:
ba:dd:ed:88:ec:5c:39:59:c5:3a:90:42:88:1c:74:4c:dd:2f:
2f:68:99:66:c6:f5:63:84:9b:5a:aa:2d:7f:a7:6e:32:5f:df:
00:b3:e3:2d:73:82:2b:04:c9:23:3f:85:ea:bc:52:d4:64:a3:
dc:c9:da:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:10 2025 by rpki-client