Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
File: W8FQNhC_gthoe3rvuHmmV4cE8yo.mft (raw, json)
Hash identifier: Nopy/MT2B167G9YuK+fv9DMvdlRSC1hIgOuB9CyQgeQ=
Subject key identifier: 0C:E2:98:6C:D9:98:EE:0B:5B:9D:DF:67:46:35:9D:1D:34:E0:E5:16
Authority key identifier: 5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
Certificate issuer: /CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Certificate serial: 019A23D2FA63116A66922DB563BE3525C223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
Manifest number: 0D9A
Signing time: Mon 27 Oct 2025 04:00:20 +0000
Manifest this update: Mon 27 Oct 2025 04:00:20 +0000
Manifest next update: Tue 28 Oct 2025 04:00:20 +0000
Files and hashes: 1: W8FQNhC_gthoe3rvuHmmV4cE8yo.crl (hash: HBl8E7Xk8dc8m7yZA9Hd3Mdi1GqIttUjPIdQ0yfBiYA=)
2: rzLK9K7U47FPPeK7ERJASBVVtlU.roa (hash: X91g9n8reIlS29Iuv4BYArQQP2cYDZgj7Nwx0mw9YJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d2:fa:63:11:6a:66:92:2d:b5:63:be:35:25:c2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Validity
Not Before: Oct 27 04:00:20 2025 GMT
Not After : Oct 28 04:00:20 2025 GMT
Subject: CN=0ce2986cd998ee0b5b9ddf6746359d1d34e0e516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:4a:69:bb:76:a3:c4:66:86:e0:de:52:e5:
a5:81:88:72:ae:73:fe:5e:6d:4c:d3:ce:5c:ec:07:
6c:1e:28:6c:23:5e:e4:4e:96:19:73:6a:47:18:0a:
74:55:41:22:b9:b4:e6:87:13:fa:8a:83:00:e1:54:
ef:43:b2:36:01:bc:eb:d7:24:21:a7:5e:51:b8:6d:
7f:32:c4:43:ff:92:64:1a:b1:a0:f8:3c:ad:0f:94:
83:e5:9a:af:1f:bf:d2:40:83:dc:f2:f6:cf:24:f6:
86:02:00:18:77:1a:ef:35:24:1f:16:45:16:ca:80:
09:ae:4d:da:ab:87:18:d7:9c:b2:31:86:30:af:22:
13:65:ab:4f:1d:bd:94:e8:7c:05:24:f7:92:b8:fa:
f3:77:a2:ce:86:c5:66:a7:de:cc:09:21:c1:88:15:
ee:7d:79:59:a6:57:ae:40:31:54:41:c6:f8:35:90:
8d:16:06:7f:a3:21:2e:e8:13:fa:b1:eb:40:af:b4:
0d:27:5a:1b:66:51:64:2b:8f:c3:d6:22:a3:15:6b:
36:ab:89:cd:d9:15:86:5e:40:65:1a:8d:60:aa:5b:
7e:69:42:d2:7a:66:4d:cc:bb:50:1c:f9:c4:9b:0d:
6e:9c:98:b6:8f:10:4c:d4:c5:5c:73:92:0f:4e:4d:
6f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E2:98:6C:D9:98:EE:0B:5B:9D:DF:67:46:35:9D:1D:34:E0:E5:16
X509v3 Authority Key Identifier:
keyid:5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0f:93:bc:ed:80:e7:cb:7e:54:2f:0b:04:20:c3:eb:4f:d8:
0f:af:2b:1c:11:3d:38:b2:da:ad:87:2b:c4:a6:48:06:90:ab:
46:21:ef:8e:a3:c6:be:84:21:36:5f:6b:4c:e2:3a:4a:68:db:
aa:d2:c4:21:13:4a:19:3d:c7:92:23:b5:96:bc:10:e5:c8:a7:
4a:2c:4f:bb:8d:d1:99:5b:38:63:13:83:36:63:c6:0a:14:6c:
43:a8:be:7c:b5:f1:17:46:69:44:05:54:a3:b5:69:25:ea:3b:
0b:79:ec:df:87:84:b6:28:f3:42:82:79:21:29:ce:79:9f:13:
88:25:17:97:d6:12:69:c2:6e:d5:e9:b2:b2:de:f4:c1:38:a6:
18:a5:2e:bc:d6:3a:93:9d:d5:09:cf:40:e4:7b:b1:44:1c:8b:
ef:ac:97:3d:a9:95:d2:3b:ba:98:0b:89:0d:8d:c3:3e:0d:11:
c2:68:cf:ac:3a:de:a6:78:10:10:f7:f7:f6:3a:a5:a2:08:c1:
ae:1e:25:2e:ee:9d:a4:a3:db:e9:36:1f:7b:6e:e5:72:65:90:
c5:33:4e:04:97:f3:35:02:72:be:04:b6:23:f4:4d:a6:a7:06:
72:92:74:ca:51:35:43:2d:48:17:f3:2a:8e:cd:03:8c:eb:6d:
fd:24:ea:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:24:42 2025 by rpki-client