Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
File: W71p2ZhITBOfrBJlpkV0XzMzzx0.mft (raw, json)
Hash identifier: ouSnm5qoezhtlPW+bZWatHlaEB1XiL7P+9elsUbaHL0=
Subject key identifier: CD:01:69:CA:17:A6:BF:6B:BA:DE:66:31:1A:9F:40:D6:71:B7:7F:1F
Authority key identifier: 5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
Certificate issuer: /CN=5bbd69d998484c139fac1265a645745f3333cf1d
Certificate serial: 019A71B7B5BFBCAE955A31175813E315970E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:00:56 +0000
Manifest this update: Tue 11 Nov 2025 07:00:56 +0000
Manifest next update: Wed 12 Nov 2025 07:00:56 +0000
Files and hashes: 1: W71p2ZhITBOfrBJlpkV0XzMzzx0.crl (hash: c/vqbFROwX2+OlroAvN6uXZi0bTShCYeG1erPFW/+WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b5:bf:bc:ae:95:5a:31:17:58:13:e3:15:97:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bbd69d998484c139fac1265a645745f3333cf1d
Validity
Not Before: Nov 11 07:00:56 2025 GMT
Not After : Nov 12 07:00:56 2025 GMT
Subject: CN=cd0169ca17a6bf6bbade66311a9f40d671b77f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:30:a2:ad:0a:35:4c:8c:bd:e7:a3:c4:4c:77:
ec:e7:48:1b:a8:47:34:88:7e:64:fb:c7:d3:5f:1d:
e3:d6:80:22:e8:98:e8:59:3a:41:66:63:81:a0:41:
2b:c8:9f:06:03:05:9e:4e:df:b4:07:34:81:9a:03:
1f:67:1d:d1:4d:da:0f:3f:32:a1:bd:08:b3:8c:42:
f7:a1:26:a3:cd:66:57:60:bc:dc:90:5a:49:72:10:
9f:7b:2c:d3:12:34:30:34:57:05:65:a3:82:d9:a0:
d8:81:4e:81:e2:61:09:52:d7:fc:6d:fe:bd:06:91:
4d:ec:8f:8c:07:54:18:e3:8b:1d:72:2b:46:6a:06:
c0:b7:ac:b5:2d:7c:57:99:2a:3a:53:27:84:2f:90:
89:79:1d:42:69:ef:36:96:8e:39:37:95:c8:e2:09:
12:22:a1:10:13:29:58:cc:2f:2d:79:3a:d1:8d:2f:
39:84:84:2c:d1:e5:ff:5f:a7:f4:d4:08:31:d2:08:
6f:a8:b3:68:5e:de:02:99:6d:00:aa:78:43:6e:e2:
bb:77:6b:2f:0e:2d:30:aa:57:f6:79:e7:66:6a:f0:
76:8e:00:56:75:45:c0:05:ce:f8:82:61:54:74:8f:
51:64:db:c4:b4:65:10:41:85:5f:11:9f:b7:e4:1c:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:01:69:CA:17:A6:BF:6B:BA:DE:66:31:1A:9F:40:D6:71:B7:7F:1F
X509v3 Authority Key Identifier:
keyid:5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:75:0c:e2:37:15:25:c2:bc:6c:3b:d6:a5:be:02:a1:7b:1f:
86:84:92:7d:3b:93:b5:94:c3:ff:4e:4c:08:08:76:d7:48:23:
01:8e:75:3b:23:ed:4e:5c:81:4e:87:bf:19:f4:8c:c4:3e:ea:
08:6d:d2:81:04:e5:06:fc:9f:f7:42:bc:ba:c3:29:40:f1:65:
93:dc:77:f6:11:0d:95:96:53:bf:33:53:d0:f8:7c:a3:3d:a5:
bc:59:ff:53:20:d5:6b:8b:af:54:c4:3a:51:c1:e6:0d:f4:59:
b7:10:8b:ba:5c:eb:d8:8d:ea:7f:6b:2f:6c:4d:82:57:2a:0d:
80:13:2c:18:60:81:2c:e9:9f:98:4d:63:4b:3e:b9:63:c9:54:
99:2c:dd:c8:10:76:40:0b:0b:55:cf:fd:ce:14:75:53:61:2c:
2e:99:35:3d:a3:2b:16:dc:b6:b9:1a:bb:11:bd:96:6e:64:c4:
01:a4:b8:c5:04:24:c0:62:ac:75:19:d8:4b:e5:26:f0:e9:e7:
b6:dd:b6:bf:54:c9:ac:b5:2d:40:2d:e2:91:16:31:de:48:df:
dd:53:38:2b:2d:35:94:61:68:26:e7:34:ae:b3:be:f7:5b:4c:
bc:0a:e1:b9:f2:88:d2:b4:2d:ba:1b:11:18:11:54:09:cf:ec:
10:aa:41:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:41 2025 by rpki-client