Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
File: W_YzYv7e4ciRNdVDTTe3N17VoQg.mft (raw, json)
Hash identifier: 91dOu6LLPtXv4bbCqnOIUVT9BMiOqsHTD+95x2G+35g=
Subject key identifier: F0:C8:3F:E8:2E:C6:9F:53:0F:2C:80:43:03:CF:07:AE:C6:F4:84:DA
Authority key identifier: 5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
Certificate issuer: /CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Certificate serial: 019A70A58070C50DCE4B519A1DE708F0EA92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
Manifest number: 133D
Signing time: Tue 11 Nov 2025 02:01:25 +0000
Manifest this update: Tue 11 Nov 2025 02:01:25 +0000
Manifest next update: Wed 12 Nov 2025 02:01:25 +0000
Files and hashes: 1: 63salWhc3QRvjl4PRdN20jEnN1g.roa (hash: yuGZxPr7QCy1Hv8ABdlA7QRlK++I2cpETqHSsD2+rR4=)
2: W_YzYv7e4ciRNdVDTTe3N17VoQg.crl (hash: VpMu59GRJbdMCWI7hKc4O6d8L89NE0Ijd7wzyQOurzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:80:70:c5:0d:ce:4b:51:9a:1d:e7:08:f0:ea:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Validity
Not Before: Nov 11 02:01:25 2025 GMT
Not After : Nov 12 02:01:25 2025 GMT
Subject: CN=f0c83fe82ec69f530f2c804303cf07aec6f484da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1c:e8:69:31:cd:17:e0:46:06:d2:e9:ad:de:
85:ec:7a:a5:09:c3:ed:7f:6e:f7:d3:66:a7:47:d2:
bf:e8:e3:44:cb:c8:a4:6a:37:4f:be:fb:5a:f4:a3:
4a:32:fa:60:0b:63:44:51:08:da:0a:82:a2:32:54:
c4:02:13:e0:c2:a0:7d:f4:6c:6e:f3:e9:c4:2d:f5:
7a:e2:50:ca:b9:ea:a8:b8:10:fc:9c:66:f5:7e:d9:
ee:ed:fb:d9:bf:39:f3:0b:f5:fd:ce:0d:40:24:a4:
9d:61:d2:a1:42:f5:f2:76:82:3d:68:02:93:d6:a6:
4d:b4:2a:2a:c7:ef:03:1b:59:d1:e3:40:49:e1:51:
78:2d:6d:e1:d6:88:97:91:6d:54:8c:1d:5a:a4:ad:
52:82:81:5e:4c:62:c2:ac:6d:85:b4:30:62:f6:78:
8b:2d:a8:88:13:65:e7:2b:fc:5e:fe:0e:2e:36:0c:
5a:fc:c2:5e:7a:fb:dc:81:ba:f5:12:b5:03:82:47:
dd:ed:9c:cf:b4:ea:a5:0d:61:df:bb:33:43:0d:c2:
ce:87:bb:54:dd:a3:7b:70:00:c5:8e:b3:b9:69:e6:
83:93:56:51:fd:26:5a:cf:f0:8e:99:e4:69:df:84:
85:a1:98:2f:bb:af:90:79:45:ab:d1:08:aa:24:85:
bb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C8:3F:E8:2E:C6:9F:53:0F:2C:80:43:03:CF:07:AE:C6:F4:84:DA
X509v3 Authority Key Identifier:
keyid:5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b6:51:42:00:aa:d5:0e:35:25:02:b0:40:9a:3c:a4:45:8f:
74:ee:c1:d3:87:35:e5:61:c5:8a:1c:a6:12:89:f5:40:f7:18:
88:4b:af:e0:29:f5:bc:c8:fd:9d:cd:30:74:94:44:1f:8e:69:
51:6b:85:2f:6c:3d:1b:dd:fc:2c:74:a1:f5:33:eb:4b:ab:1d:
23:7d:dd:b8:9b:3f:f3:9c:67:ba:cb:db:94:cb:91:b6:24:4e:
ff:b7:e2:53:eb:71:3b:36:db:60:27:14:3d:b6:7f:82:fb:f3:
8b:73:a3:c7:66:29:96:24:c1:5b:e0:89:e8:ed:e4:d1:c1:26:
25:08:40:9d:10:ad:47:2c:25:07:aa:fe:7d:d5:62:05:0e:44:
d8:e6:60:39:48:9a:b3:53:64:84:b7:a5:b2:23:7d:b4:01:40:
46:37:b4:8b:07:8f:de:cf:f5:fe:e9:f6:94:52:b1:e1:20:14:
cf:f7:3e:f8:c8:2d:72:00:1d:cc:16:42:4b:97:68:0d:25:2f:
c9:78:a2:fb:f0:62:70:20:08:4c:1b:a0:f1:cf:45:40:0e:e7:
e1:84:a4:11:08:e5:bc:0f:24:24:37:2c:d2:56:d4:7f:8f:40:
99:cb:94:0e:5c:7d:53:c7:0a:28:e2:8e:64:f9:de:10:67:91:
cf:96:74:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:25 2025 by rpki-client