Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/56b573-c7bb-403b-a36c-1a6d05569577/1/W3Vj2-xwud00kXPXp3mNRDSg08Y.mft
File: W3Vj2-xwud00kXPXp3mNRDSg08Y.mft (raw, json)
Hash identifier: Sad5yL2m6kYmRYW0L0imLaX1vNyQYs5/2as/iYPIaus=
Subject key identifier: 83:65:F7:12:4D:74:F5:E2:C9:B7:85:C0:73:E2:C5:17:00:25:BA:C4
Authority key identifier: 5B:75:63:DB:EC:70:B9:DD:34:91:73:D7:A7:79:8D:44:34:A0:D3:C6
Certificate issuer: /CN=5b7563dbec70b9dd349173d7a7798d4434a0d3c6
Certificate serial: 019A7293ED0572BF3CC792231FC9C56894C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3Vj2-xwud00kXPXp3mNRDSg08Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/56b573-c7bb-403b-a36c-1a6d05569577/1/W3Vj2-xwud00kXPXp3mNRDSg08Y.mft
Manifest number: 0171
Signing time: Tue 11 Nov 2025 11:01:28 +0000
Manifest this update: Tue 11 Nov 2025 11:01:28 +0000
Manifest next update: Wed 12 Nov 2025 11:01:28 +0000
Files and hashes: 1: W3Vj2-xwud00kXPXp3mNRDSg08Y.crl (hash: jN6OgvirT6aTo2vPjf0W+nn9Ivhr46+8Gc6sry8yKNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/56b573-c7bb-403b-a36c-1a6d05569577/1/W3Vj2-xwud00kXPXp3mNRDSg08Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/56b573-c7bb-403b-a36c-1a6d05569577/1/W3Vj2-xwud00kXPXp3mNRDSg08Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3Vj2-xwud00kXPXp3mNRDSg08Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ed:05:72:bf:3c:c7:92:23:1f:c9:c5:68:94:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7563dbec70b9dd349173d7a7798d4434a0d3c6
Validity
Not Before: Nov 11 11:01:28 2025 GMT
Not After : Nov 12 11:01:28 2025 GMT
Subject: CN=8365f7124d74f5e2c9b785c073e2c5170025bac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:8a:d8:d3:04:dd:71:01:7f:b8:da:49:79:
84:11:b9:fc:91:36:39:35:96:08:4c:c7:53:b9:49:
6f:df:dc:16:5d:cb:fc:b8:e4:23:ab:4e:e4:79:c6:
0f:bc:43:45:26:57:92:2d:af:d2:70:d6:cd:6e:53:
65:73:60:eb:13:03:8e:31:d4:b1:52:8a:63:92:a6:
cd:ce:33:f3:cb:74:ae:07:6b:03:00:80:9f:5e:5b:
d5:e6:e4:65:8c:ef:51:bc:bd:e5:42:4d:af:f1:09:
a1:da:81:36:88:c4:2f:9c:e1:23:d9:45:bf:e2:05:
54:23:ad:87:0a:bb:9b:0c:bb:cd:d5:50:86:20:83:
51:5e:17:48:1b:ef:1b:2c:0f:56:c2:1a:69:2c:b7:
8a:08:de:52:b1:71:d0:81:d2:0e:fd:a0:d7:eb:29:
3c:93:34:c0:a3:db:67:6a:1d:22:e6:a6:bd:cc:b2:
b2:dd:bf:30:23:4a:07:7d:44:dc:50:1a:25:8b:10:
77:68:9d:03:9d:9b:3d:dc:66:67:12:0e:4e:04:ed:
09:c1:e0:b2:38:4f:13:26:35:cf:38:bf:df:ce:9b:
91:ff:d4:17:6a:68:80:d4:6e:d1:53:dd:93:78:bf:
ef:f6:1e:81:a4:94:ea:a1:37:b7:00:3f:b8:0e:32:
82:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:65:F7:12:4D:74:F5:E2:C9:B7:85:C0:73:E2:C5:17:00:25:BA:C4
X509v3 Authority Key Identifier:
keyid:5B:75:63:DB:EC:70:B9:DD:34:91:73:D7:A7:79:8D:44:34:A0:D3:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3Vj2-xwud00kXPXp3mNRDSg08Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/56b573-c7bb-403b-a36c-1a6d05569577/1/W3Vj2-xwud00kXPXp3mNRDSg08Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/56b573-c7bb-403b-a36c-1a6d05569577/1/W3Vj2-xwud00kXPXp3mNRDSg08Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a5:7d:b8:ac:ef:7a:89:57:56:b5:e8:54:ac:2f:12:9e:15:
56:c7:11:be:a6:68:25:ca:07:06:73:6f:a4:75:ef:58:70:ec:
fc:71:b5:c5:c7:90:4f:f7:d1:98:a7:88:53:0d:6a:63:a1:59:
3b:77:bc:1f:ce:98:b2:19:9e:4f:f1:e7:cd:2e:f7:80:92:e7:
2a:4f:c3:1f:37:24:9e:8a:46:3a:28:a1:1a:9e:56:fd:9c:dc:
3c:52:f3:6e:ee:8f:4f:78:46:84:ab:9f:4f:3b:08:69:e5:af:
6a:bf:1c:ad:ad:cc:24:31:c7:a7:f9:2a:7f:11:3e:87:58:35:
fd:68:1d:e1:d0:e7:6a:0f:32:f1:b3:3e:a0:2e:ad:32:6e:70:
fd:49:d8:cf:4a:d2:5b:20:e9:9d:cc:5c:e9:30:61:27:63:93:
23:b5:02:fa:d6:54:54:c8:63:6c:08:ee:2d:24:59:b8:33:6b:
4d:15:1d:c0:e7:45:16:11:05:56:a6:b0:f8:a4:0c:4a:96:79:
d8:b2:33:37:e1:31:11:4e:3a:8d:1a:7b:25:66:18:a9:7b:83:
eb:c1:8a:82:b4:5a:1a:2a:cc:80:d8:ea:ea:78:a0:01:92:3e:
05:e1:0d:a0:d9:6d:15:41:3c:d7:b0:a0:d3:19:e8:da:bf:63:
02:fd:bd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:28 2025 by rpki-client