Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
File: W-cZ-YXfOUpCrBHly8j4K0t67F0.mft (raw, json)
Hash identifier: 2eUozXjasw9AmVScrbLK2g+Rv1q8HEcjCjgoE0aOatc=
Subject key identifier: 72:94:51:DC:CA:9B:05:35:9D:AC:BA:D8:01:94:AA:8C:2E:28:99:33
Authority key identifier: 5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
Certificate issuer: /CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Certificate serial: 019A71B8FF98F67724E292AF59D6811ECE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:20 +0000
Manifest this update: Tue 11 Nov 2025 07:02:20 +0000
Manifest next update: Wed 12 Nov 2025 07:02:20 +0000
Files and hashes: 1: W-cZ-YXfOUpCrBHly8j4K0t67F0.crl (hash: cic/+AGyeaKHO9Jwl1nLD/wOAGBBooMEmPTvJzhESj8=)
2: qfFhbPzEEV7-3fOF8iI3mosl_gc.roa (hash: eNrgqVa+1D+OMy3T6aNIQjkftemLm7/l9HKfq0aM6Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ff:98:f6:77:24:e2:92:af:59:d6:81:1e:ce:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Validity
Not Before: Nov 11 07:02:20 2025 GMT
Not After : Nov 12 07:02:20 2025 GMT
Subject: CN=729451dcca9b05359dacbad80194aa8c2e289933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:28:f0:53:2b:e0:f8:58:4d:87:94:94:fe:
6c:bc:27:64:5b:03:cd:e0:12:df:1f:02:26:b3:9f:
61:46:59:29:4d:b5:93:c1:28:54:3c:7e:6c:55:75:
f9:d4:15:0d:fd:c3:f5:b7:d4:0f:08:33:92:ee:37:
32:9e:12:d0:61:07:b7:aa:cd:9a:db:f0:2f:29:df:
2f:68:57:cb:0a:71:f1:81:66:61:7f:47:c1:68:7c:
66:d8:65:44:88:e3:0a:89:65:a6:70:1b:c8:0b:66:
9a:e2:f5:9b:29:66:61:39:b2:bd:22:56:d1:df:07:
e5:cb:dd:bf:3b:07:9c:18:6c:07:3d:13:c2:c8:ad:
ae:fb:c8:d3:47:7c:92:ed:6d:d8:53:d8:f3:34:c9:
ba:20:c7:06:a6:b3:0c:62:b5:51:93:d8:b2:b5:54:
10:4b:6a:04:39:75:ab:ba:48:f5:8a:bb:8d:c8:f4:
19:36:4d:98:8d:c5:79:f5:f9:6a:8a:f3:82:4a:4c:
f8:bb:cf:a3:51:1b:d8:f8:e3:e3:7e:1e:2f:b1:2f:
73:74:f2:7b:07:65:a6:e1:5d:ba:98:c8:2c:e2:a4:
d7:93:d9:dd:17:c7:26:5d:c4:b7:2b:8c:62:27:1b:
01:c6:ef:c8:7a:4c:8a:48:9b:cb:09:1c:81:f8:39:
52:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:94:51:DC:CA:9B:05:35:9D:AC:BA:D8:01:94:AA:8C:2E:28:99:33
X509v3 Authority Key Identifier:
keyid:5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d1:58:d8:c9:a6:23:ab:9d:a0:92:58:b4:95:ca:a4:d2:f4:
45:b9:59:7b:c9:91:39:8d:4c:93:6a:ff:ca:e0:45:19:0c:88:
6f:4a:5d:0b:64:96:7d:27:52:92:38:1e:62:f3:e3:3f:a7:bd:
24:ca:ed:11:c3:17:6f:e6:d2:24:ca:2c:f4:94:d5:75:b6:9b:
72:71:5f:5c:23:8f:c7:17:ef:7f:7b:45:3b:06:3c:b1:68:1c:
31:7c:8c:f4:ca:22:d3:ed:55:b9:37:1a:b7:d5:92:4c:1a:05:
0c:d3:85:da:c2:a3:13:4e:f8:b9:59:69:3e:2c:4b:79:f5:e6:
80:d2:3e:11:ca:08:b0:1f:02:db:ee:fb:29:3f:fb:97:dd:73:
cc:ca:bc:ed:9b:74:a9:31:7d:9b:c0:b1:b2:08:c1:ce:17:23:
f3:58:60:59:2f:5a:d7:fc:2e:99:6f:6f:4a:91:90:8e:cf:a1:
b7:41:5a:f1:0f:49:c0:99:c9:81:70:b6:9d:2f:6d:b6:07:9b:
88:f4:e9:57:d3:d5:5a:5c:7c:88:68:4c:fa:8b:62:56:2c:e2:
ca:40:5e:68:6d:e5:93:65:4f:df:4b:ba:b3:37:1f:84:3f:74:
c2:b4:84:ba:8c:2a:bc:5a:2d:ff:03:bb:42:88:c5:cf:fc:c3:
1f:a0:64:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:57:08 2025 by rpki-client