Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
File: W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft (raw, json)
Hash identifier: 3FHVi4Nfd/GmifQ3qIcjsnuIRVWQVHXEUAzDn1E3Wv0=
Subject key identifier: 50:87:BA:D9:F5:54:18:14:FA:E4:57:E0:CF:FD:0F:17:41:8E:4C:98
Authority key identifier: 5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7
Certificate issuer: /CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7
Certificate serial: 019A70DBEE8C5E5B6F5980A7C515507294AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 03:00:52 +0000
Manifest this update: Tue 11 Nov 2025 03:00:52 +0000
Manifest next update: Wed 12 Nov 2025 03:00:52 +0000
Files and hashes: 1: W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl (hash: t8hQ2PFUTNUvGakXms9zDjW8Ou1XFF4jL2+u/BYKsrw=)
2: YSvlEI-QwRaOJVEKhPo-n7hFfMs.roa (hash: 2D47YFaNK7fea1JKhXlBWUic8EXXrjyXZMVK5ghBVPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:ee:8c:5e:5b:6f:59:80:a7:c5:15:50:72:94:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7
Validity
Not Before: Nov 11 03:00:52 2025 GMT
Not After : Nov 12 03:00:52 2025 GMT
Subject: CN=5087bad9f5541814fae457e0cffd0f17418e4c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:9e:18:10:c8:ee:b0:2a:4f:e6:12:46:a3:80:
4e:73:cc:77:ab:6f:49:37:5e:34:48:1a:05:dd:49:
cc:f5:a6:f9:93:00:c8:bc:30:12:c7:89:d0:7c:88:
74:02:7b:6a:d3:29:a2:f5:c5:12:11:92:d3:dd:e7:
ba:a3:2d:00:60:20:2e:93:c9:3e:c5:1a:2e:09:ec:
88:af:e3:ce:72:af:de:c6:4d:6b:51:9d:21:f6:99:
35:6f:79:e0:f9:7b:f8:35:b0:0e:c8:83:4a:f7:be:
4d:bf:81:b6:1b:1c:cc:53:8e:33:49:f5:ed:c8:3b:
97:a8:fc:cc:11:df:05:ea:7c:5f:4a:a6:a3:8d:37:
ef:1b:08:a2:87:cd:ca:b2:2d:85:90:ff:df:5f:80:
ea:38:ea:01:c9:c3:1b:bc:cf:9d:fd:af:5a:4c:69:
39:9e:45:4f:9e:75:87:37:e2:9b:8a:98:73:ac:32:
db:a7:b2:d7:b7:69:76:be:ae:61:3c:23:dd:d0:18:
5a:f5:d1:e0:a9:38:76:15:e5:49:c1:99:3f:ca:12:
61:fd:14:8a:3d:de:47:5b:be:e9:37:29:7e:ad:ca:
1d:3c:21:36:95:8e:3d:42:4b:63:a1:12:e1:14:8e:
10:0d:32:51:25:59:8e:c2:38:31:d9:90:59:50:8a:
3a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:87:BA:D9:F5:54:18:14:FA:E4:57:E0:CF:FD:0F:17:41:8E:4C:98
X509v3 Authority Key Identifier:
keyid:5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:40:67:31:3c:ef:77:62:8a:17:7f:4d:e0:38:cd:19:50:6f:
37:e0:10:d7:97:c9:a3:65:76:71:25:0e:d7:f7:7e:ae:bc:e4:
5f:9a:7d:52:35:91:62:40:23:18:4d:ea:86:79:53:dc:64:ae:
8c:27:3f:63:88:35:9f:1d:23:81:b9:6f:88:a6:12:c1:76:83:
d9:ea:8f:4f:b6:fc:31:ac:57:fe:8c:58:6b:66:7e:a1:d7:2b:
52:69:3c:1a:8b:1f:26:78:a9:fe:28:1c:bb:b8:89:6c:d8:27:
af:01:cf:92:c6:3a:a7:9b:28:31:a0:2e:27:56:d1:d5:39:19:
a6:98:09:49:d3:83:1e:49:ba:9b:c2:15:62:99:9e:d2:6e:1c:
ab:c6:e4:21:03:27:b6:04:ac:5c:f9:eb:05:52:12:46:0f:1a:
d7:0b:b2:4a:a9:f2:fd:27:3c:2f:62:71:54:3f:87:6a:8c:39:
4b:5b:18:41:a0:3e:92:fb:10:93:00:c2:99:24:3f:75:51:a0:
3a:32:56:c0:e8:86:d9:b7:b8:07:5f:f0:91:15:05:8f:4a:98:
b6:ea:88:43:64:bf:26:94:40:68:cb:d0:08:42:58:1c:d5:01:
df:be:d1:2e:65:93:b6:b1:e1:2a:c9:d0:11:52:c3:c9:2e:0e:
ef:e0:88:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:37 2025 by rpki-client