Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: dRUdRp0w9w4KVLqU0xjWYf+FSrRytUGLUpOdDLJBirM=
Subject key identifier: B1:CF:33:1D:1E:BD:18:F7:34:F6:0D:49:5B:4F:9C:44:6F:3D:3B:20
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 019A526394E6A544E5E8CAD3E518B1CA86A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 05:00:49 +0000
Manifest this update: Wed 05 Nov 2025 05:00:49 +0000
Manifest next update: Thu 06 Nov 2025 05:00:49 +0000
Files and hashes: 1: EBp8FPomAjz-fJECFgdn5Kk0Sik.roa (hash: V1BbvemmFGDZNIpt/J1Q4nVP7R7H+EyQbSb8eICOYWQ=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: AgY/fOpNnqAUrUH5h3xFGAT0+zRPw94R7Zcnzhcy4Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:94:e6:a5:44:e5:e8:ca:d3:e5:18:b1:ca:86:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: Nov 5 05:00:49 2025 GMT
Not After : Nov 6 05:00:49 2025 GMT
Subject: CN=b1cf331d1ebd18f734f60d495b4f9c446f3d3b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:ec:21:d2:84:a7:1e:91:93:67:38:6f:00:
a8:9f:d2:23:11:e6:95:c4:56:e4:6d:a6:55:8d:72:
d8:59:3d:4e:30:b8:1f:0a:c6:f0:dd:66:49:31:fc:
3a:7a:8f:79:1a:a9:78:5c:bc:4a:26:45:27:1a:8e:
b4:fb:4f:d0:9f:91:6b:14:e4:59:ad:1f:a9:c1:ae:
a4:de:1f:bf:d7:6c:ec:b1:2b:91:f4:3e:41:3a:c7:
59:e1:37:cd:ab:57:ca:a0:53:c5:5f:01:40:e8:63:
be:bd:4c:87:4c:5a:77:c7:dc:2f:e1:68:64:a8:86:
3b:55:df:fa:78:70:06:e9:cb:d9:3f:be:e4:b1:b9:
05:56:13:5d:16:56:c8:9b:13:5e:63:fd:67:65:9c:
63:f3:20:a6:d7:0e:d1:97:ee:2c:c9:05:bf:7e:36:
0f:b5:a3:97:09:cc:5e:31:eb:37:8e:61:f6:eb:83:
a0:3c:cc:39:7b:a8:1c:c2:73:e2:b0:44:67:ec:8a:
3c:ae:e3:a8:69:fa:40:16:27:6c:da:c4:c0:80:2d:
32:6b:c0:a8:92:7d:f0:60:9a:10:2b:cb:21:3b:df:
16:d7:a0:35:17:50:df:a4:fc:fa:42:9e:04:85:1c:
0e:a4:aa:fd:6b:34:80:86:4c:15:17:5c:df:6f:e2:
b1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CF:33:1D:1E:BD:18:F7:34:F6:0D:49:5B:4F:9C:44:6F:3D:3B:20
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:29:a5:28:ce:e9:34:65:78:d4:5c:88:b8:af:99:60:aa:dd:
47:90:d3:61:5d:fe:f0:ef:9a:8b:d8:f2:a6:9b:15:ff:af:64:
6b:87:6b:56:95:80:5f:11:c1:f6:b4:b9:10:a8:7f:71:9b:62:
d3:00:a8:0a:dc:74:fc:d4:7e:51:0b:ed:22:50:26:55:79:cc:
9c:96:a7:47:23:3e:9a:9c:90:35:c3:b7:ea:ce:23:18:4c:f8:
88:d0:f4:7d:81:57:4e:5b:e9:c1:4c:ac:f5:b4:36:0a:f6:38:
59:3d:85:4c:c9:9e:28:22:de:9e:f9:fc:1a:dd:b2:b4:2e:55:
54:2b:0a:5e:d1:61:88:5a:8e:da:ec:ca:24:32:f3:f2:d3:d3:
ca:05:51:7c:50:ce:b0:8f:97:4b:2c:74:d2:21:8a:1a:e0:42:
db:d3:c3:cb:8d:6c:83:94:6f:ed:57:d6:a9:fc:35:37:4a:90:
a0:30:9d:d0:1f:c3:5f:60:91:5b:b6:ec:a5:56:8f:d3:fe:ca:
72:b2:f1:8c:79:78:93:93:c4:de:30:f7:ae:20:af:74:71:80:
a8:ac:0b:88:88:28:99:ba:c8:27:26:06:0c:49:2d:70:8b:69:
a3:7f:47:df:35:77:8c:4f:ec:43:43:b3:87:76:32:cc:43:07:
21:54:ee:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:22:43 2025 by rpki-client