
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
File: W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft (raw, json)
Hash identifier: BkYvDpARGaPHHtWROMKEP3sXT1Nbq/dVAW2G5/5czzc=
Subject key identifier: C5:E1:67:1C:4E:E1:41:93:C6:06:32:55:46:24:40:3B:3C:05:B4:67
Authority key identifier: 5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
Certificate issuer: /CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Certificate serial: 019A4E500DBA8BB9AC0A5EBE4FAEF1EC8144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
Manifest number: 0556
Signing time: Tue 04 Nov 2025 10:01:00 +0000
Manifest this update: Tue 04 Nov 2025 10:01:00 +0000
Manifest next update: Wed 05 Nov 2025 10:01:00 +0000
Files and hashes: 1: W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl (hash: GCEYXlMbYkl20RO2fYJohdxg/J7WkTIbjC68aWZaZLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:0d:ba:8b:b9:ac:0a:5e:be:4f:ae:f1:ec:81:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Validity
Not Before: Nov 4 10:01:00 2025 GMT
Not After : Nov 5 10:01:00 2025 GMT
Subject: CN=c5e1671c4ee14193c60632554624403b3c05b467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:cc:bd:1f:bd:c3:c4:06:33:b0:5c:eb:e7:
15:02:b1:92:56:53:e5:be:b2:42:b8:52:6b:59:d7:
ec:1a:17:4e:f8:01:c4:33:75:31:fb:8d:9d:0b:dc:
c9:6d:4a:8a:f6:16:6c:30:e7:61:f8:ba:c2:4d:53:
f2:1b:82:ea:0c:5e:07:41:06:f8:55:d4:f8:d1:56:
91:5e:d7:22:09:73:d4:11:e8:95:e1:3a:cb:fb:fc:
e6:cb:23:1e:b3:29:a7:f4:bf:79:1a:43:c9:87:d9:
17:60:a5:36:28:fd:f4:f4:b5:4b:07:3d:93:2c:13:
2b:8a:d9:4b:d4:af:b1:c0:ee:69:c4:44:e8:f4:29:
36:af:a8:9c:22:cd:be:a1:d4:47:54:8c:ce:b6:c4:
f7:b9:99:54:49:ed:e7:c2:ec:10:f4:55:f0:fb:0f:
be:2b:78:a0:70:40:de:92:63:55:df:b4:6b:41:24:
de:d6:b3:aa:68:f3:eb:0e:30:86:2d:d7:1e:a0:a3:
6b:ff:83:02:39:13:05:61:51:30:06:70:5d:8c:d7:
e7:62:30:d9:3d:fa:8c:cb:4c:2e:07:87:c3:73:fd:
42:10:1c:43:97:7e:8f:f1:14:74:f2:32:04:49:3f:
39:b1:16:d4:b0:4b:41:2a:73:c5:a9:8e:1e:fe:df:
83:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E1:67:1C:4E:E1:41:93:C6:06:32:55:46:24:40:3B:3C:05:B4:67
X509v3 Authority Key Identifier:
keyid:5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:61:28:46:ba:23:4d:ac:4c:cd:14:9e:79:2d:99:c3:14:75:
e3:70:2a:65:d2:44:11:2c:18:6d:d2:77:a9:5c:4f:c6:ac:e2:
51:f5:65:94:2e:d3:28:4f:f8:f3:7c:ed:c1:c7:9b:e3:d6:b7:
3d:3d:a0:9e:e0:71:b3:e0:b4:2f:36:8a:53:62:3f:16:8d:d9:
7d:a6:ed:80:83:ad:61:7a:39:b7:9c:72:e7:5f:05:07:d0:62:
65:c5:7a:2a:0d:95:e5:a2:7d:27:c5:c2:d1:d7:f2:8e:38:56:
85:e7:e4:f8:60:22:e0:27:57:8a:80:98:54:65:1b:b9:a9:2e:
55:09:27:4e:b4:3d:da:64:ef:a1:9d:4b:78:e8:05:e8:d7:64:
82:31:09:33:52:30:e6:15:16:f2:c7:07:70:48:84:a9:30:16:
70:8e:b6:6f:a7:f5:67:ad:d9:c7:30:bd:6a:15:52:75:cd:eb:
16:61:eb:65:c5:69:6c:83:49:88:fa:fa:06:66:c8:40:a0:d8:
33:fe:a3:95:bd:4e:df:53:b9:76:9e:cb:d9:a8:3d:f1:6e:00:
9e:01:c6:be:58:51:92:6f:61:79:ba:4a:e4:b6:68:fe:98:eb:
33:4e:ca:88:c9:be:2c:2c:4c:58:83:79:5b:c0:36:91:65:6a:
10:05:1f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:48 2025 by rpki-client