Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
File: W5BVHjwX4KAtKNbconnbPkFH-ZE.mft (raw, json)
Hash identifier: G2/9479uurMEKMjab9e9ylQC94HtdvfRDalk2BG+cIA=
Subject key identifier: 71:A1:8C:03:AA:E7:5E:A0:25:16:78:2F:57:A8:C0:DD:0C:CB:80:2D
Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
Certificate issuer: /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Certificate serial: 019A4D3D473EF9BB64169E67D71BBB616039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
Manifest number: 138B
Signing time: Tue 04 Nov 2025 05:00:52 +0000
Manifest this update: Tue 04 Nov 2025 05:00:52 +0000
Manifest next update: Wed 05 Nov 2025 05:00:52 +0000
Files and hashes: 1: W5BVHjwX4KAtKNbconnbPkFH-ZE.crl (hash: t5aZG9rRZFeszBQfydHdVr8WRsi6zu+eVbUjuk3I05E=)
2: k0f9OoQq6B1aLa4kFQEIGk8_qxc.roa (hash: Zg6lE/FaFkljjUzS9qnwhWnpjXkAlp/DGZm1wnoBwyI=)
3: mfyRKyki9KIilboLxZkR4V98u1A.roa (hash: zMj3oFzyTUkut1k37DX3Mbj6z32e3XRjiKGOQwnR7iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:47:3e:f9:bb:64:16:9e:67:d7:1b:bb:61:60:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Validity
Not Before: Nov 4 05:00:52 2025 GMT
Not After : Nov 5 05:00:52 2025 GMT
Subject: CN=71a18c03aae75ea02516782f57a8c0dd0ccb802d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:39:dd:8b:e3:68:da:63:34:59:9e:9c:23:
ff:20:64:fe:bb:3c:aa:a4:a8:91:4f:6b:80:67:ef:
38:2d:3d:34:52:fe:b9:9c:f1:e4:7c:81:86:a2:3c:
c7:15:d2:97:d5:70:52:7b:fa:b9:3c:5e:ac:5c:9a:
a1:1d:8a:aa:43:9a:1e:ba:ed:5f:64:97:90:9a:2a:
0c:43:58:38:2e:b1:2d:69:6f:2b:63:fa:a0:38:95:
97:b2:f5:18:06:bb:68:7e:20:88:e7:2d:ed:c8:9d:
f8:ae:6b:33:78:b5:55:37:de:b8:0c:ef:6b:8e:d4:
5f:29:f1:22:3a:9c:8f:b3:84:16:f4:8d:ad:7f:13:
aa:1c:d4:aa:7c:39:8f:be:77:f4:91:0b:6b:f8:f0:
77:68:7f:dc:2a:33:24:6a:d8:57:e8:f8:ee:84:11:
13:9f:40:0a:56:5d:2b:98:73:2f:6f:66:48:1d:a0:
0b:af:fe:a3:3b:61:1e:3b:d2:53:7f:a5:64:b9:d6:
94:8d:81:ae:37:e1:cc:d7:5b:65:c3:ea:c9:0d:0f:
4d:14:ff:ec:38:3f:40:7f:41:fd:40:de:56:de:29:
de:d6:d9:0a:2c:f4:61:e9:0e:16:e5:7d:92:bc:ae:
9c:a5:0c:ab:12:b2:80:ab:3f:20:a0:84:5a:77:da:
ac:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A1:8C:03:AA:E7:5E:A0:25:16:78:2F:57:A8:C0:DD:0C:CB:80:2D
X509v3 Authority Key Identifier:
keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:e9:22:cf:69:f7:f5:de:db:75:91:11:21:92:45:39:42:c4:
2a:db:1e:e3:13:42:4e:c7:62:e1:44:60:37:2c:9e:6f:b5:b2:
91:a9:28:1a:0a:15:6b:d9:da:70:31:6b:96:f4:43:eb:6f:97:
52:f0:cd:bb:f5:da:e3:e4:69:80:8a:55:27:55:72:fd:9d:36:
2a:53:8f:0d:05:1c:64:93:50:29:a3:48:ea:88:0f:3a:6d:d2:
af:f5:64:79:50:1a:7b:3c:66:11:6b:53:78:88:37:e0:44:a8:
e0:4f:ad:fc:f8:17:70:f6:e9:e2:72:e7:b0:f3:f1:7c:ad:d0:
70:e0:9e:f5:29:0d:3c:48:e8:ec:e3:1e:aa:41:41:82:20:a4:
fe:15:96:9a:58:b3:f6:d4:6d:7a:dd:c9:b7:f9:2d:fe:46:75:
72:37:bb:12:bc:8d:73:08:94:24:9f:da:6e:66:cc:b4:f2:b5:
f0:21:3d:66:c9:19:b1:5a:8e:88:9d:ae:68:ec:c9:ee:5a:69:
a9:df:86:f5:8a:9f:06:bb:4c:54:77:c6:05:41:33:db:64:ac:
cd:4f:72:dc:ea:57:b2:88:ba:dc:3b:c6:fb:65:3e:1e:3b:79:
8f:55:4a:19:1b:b2:92:65:23:e5:32:b5:e6:1e:ab:5d:c1:7b:
bb:9d:44:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPUc++btkFp5n1xu7YWA5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViOTA1NTFlM2MxN2UwYTAyZDI4ZDZkY2EyNzlkYjNlNDE0
N2Y5OTEwHhcNMjUxMTA0MDUwMDUyWhcNMjUxMTA1MDUwMDUyWjAzMTEwLwYDVQQD
Eyg3MWExOGMwM2FhZTc1ZWEwMjUxNjc4MmY1N2E4YzBkZDBjY2I4MDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLo53YvjaNpjNFmenCP/IGT+uzyq
pKiRT2uAZ+84LT00Uv65nPHkfIGGojzHFdKX1XBSe/q5PF6sXJqhHYqqQ5oeuu1f
ZJeQmioMQ1g4LrEtaW8rY/qgOJWXsvUYBrtofiCI5y3tyJ34rmszeLVVN964DO9r
jtRfKfEiOpyPs4QW9I2tfxOqHNSqfDmPvnf0kQtr+PB3aH/cKjMkathX6PjuhBET
n0AKVl0rmHMvb2ZIHaALr/6jO2EeO9JTf6VkudaUjYGuN+HM11tlw+rJDQ9NFP/s
OD9Af0H9QN5W3ine1tkKLPRh6Q4W5X2SvK6cpQyrErKAqz8goIRad9qs0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGhjAOq516gJRZ4L1eowN0My4AtMB8GA1UdIwQY
MBaAFFuQVR48F+CgLSjW3KJ52z5BR/mRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzVCVkhqd1g0S0F0S05iY29ubmJQa0ZILVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMTkyYTQtNzZiMi00NjVkLTg4MTgt
YTMwZTMzYTcwYjFlLzEvVzVCVkhqd1g0S0F0S05iY29ubmJQa0ZILVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jMTkyYTQtNzZiMi00NjVkLTg4MTgtYTMwZTMzYTcwYjFl
LzEvVzVCVkhqd1g0S0F0S05iY29ubmJQa0ZILVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv+kiz2n3
9d7bdZERIZJFOULEKtse4xNCTsdi4URgNyyeb7WykakoGgoVa9nacDFrlvRD62+X
UvDNu/Xa4+RpgIpVJ1Vy/Z02KlOPDQUcZJNQKaNI6ogPOm3Sr/VkeVAaezxmEWtT
eIg34ESo4E+t/PgXcPbp4nLnsPPxfK3QcOCe9SkNPEjo7OMeqkFBgiCk/hWWmliz
9tRtet3Jt/kt/kZ1cje7EryNcwiUJJ/abmbMtPK18CE9ZskZsVqOiJ2uaOzJ7lpp
qd+G9YqfBrtMVHfGBUEz22SszU9y3OpXsoi63DvG+2U+Hjt5j1VKGRuykmUj5TK1
5h6rXcF7u51Etw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:27 2025 by rpki-client