Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
File: W8PKDWOo_M3A6SqIprrO_ydecEY.mft (raw, json)
Hash identifier: 8w59DeZ55Hn9fbZwJqUCptbzIocLlf0XAwSFujJqjSE=
Subject key identifier: 44:A1:8C:94:6E:54:29:5C:E2:0D:D4:C5:A4:6A:33:8F:F1:66:4E:79
Authority key identifier: 5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
Certificate issuer: /CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Certificate serial: 019A71133451664B90E5BCAB452D10B827AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 04:01:15 +0000
Manifest this update: Tue 11 Nov 2025 04:01:15 +0000
Manifest next update: Wed 12 Nov 2025 04:01:15 +0000
Files and hashes: 1: W8PKDWOo_M3A6SqIprrO_ydecEY.crl (hash: r6tfn5fG/LA2oLEQ5p0H3IYQxIs0Biar9vKs6Q72P6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:34:51:66:4b:90:e5:bc:ab:45:2d:10:b8:27:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Validity
Not Before: Nov 11 04:01:15 2025 GMT
Not After : Nov 12 04:01:15 2025 GMT
Subject: CN=44a18c946e54295ce20dd4c5a46a338ff1664e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:0b:ac:43:63:4b:86:ca:77:e9:8e:32:29:
d8:09:d1:36:7c:d5:5f:d9:39:22:bc:34:d2:c6:d8:
f3:f5:dd:8a:e6:b2:1e:1a:9a:bb:1a:e5:23:b5:d0:
62:8f:48:90:6b:9a:54:71:f5:de:aa:af:2a:3f:ec:
2b:44:bd:fd:a8:99:d8:8c:45:ae:38:45:62:be:51:
8e:52:22:88:22:b8:0f:40:60:4e:77:89:ff:4c:d5:
d5:4a:4a:50:d3:eb:70:6c:b6:17:05:42:19:9d:a9:
e2:44:c9:ca:e0:16:2d:21:f7:33:55:cb:a3:fb:7b:
eb:96:84:a6:bf:08:88:3b:1a:ea:f5:8a:a5:5d:bf:
ac:1d:05:72:36:35:17:af:fe:72:22:d7:35:c8:77:
f7:75:b7:6f:5b:70:e8:fb:b8:e7:ca:81:15:bc:a1:
13:76:d0:62:74:4d:33:bb:02:95:ee:3f:cb:c6:0e:
ea:0f:46:a2:78:d9:4d:74:93:84:d7:1c:2e:a5:b9:
9d:a5:09:c7:d8:45:a8:01:72:e3:7d:25:49:ba:b6:
27:5e:80:70:9d:b4:6f:ce:f8:95:70:16:7a:e8:1c:
85:3a:93:83:1e:01:a3:06:e5:c9:16:3f:dc:fb:6b:
af:03:05:24:b5:0b:de:df:69:e7:f4:28:ab:d3:9a:
a0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A1:8C:94:6E:54:29:5C:E2:0D:D4:C5:A4:6A:33:8F:F1:66:4E:79
X509v3 Authority Key Identifier:
keyid:5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:55:34:a1:c7:61:27:87:2c:b3:29:4e:b9:0d:83:ca:ad:7f:
bc:ec:1e:12:07:a2:c3:e0:db:d5:e2:c5:a6:f6:ae:f6:93:fb:
36:a7:b6:5e:52:41:84:5a:02:c7:78:47:7f:91:8a:7b:93:27:
b2:2e:ad:c5:92:6b:ff:ff:6d:f2:ab:72:dd:d4:67:04:9b:e0:
71:18:d8:cd:68:fc:ce:a6:58:a7:67:30:04:72:43:33:ba:1e:
06:ff:cc:3f:81:32:11:71:99:87:54:3d:5e:6b:5e:5a:a7:06:
61:3f:39:6c:8f:3c:82:83:ba:3d:dc:59:f3:c7:93:e7:a0:ba:
28:c5:e8:81:6b:98:4a:71:62:76:1c:ba:5f:12:f5:19:f6:95:
7e:7b:90:10:50:10:bd:4a:9a:1d:09:e9:2e:21:99:ed:68:46:
a0:2b:79:fe:b4:a4:97:fe:d7:96:e5:72:05:4e:70:f7:0d:c7:
c7:b4:ae:b6:35:96:44:87:48:95:45:10:36:e8:91:c8:0a:c2:
44:32:79:78:0c:79:6f:b6:81:51:30:54:11:b5:e5:82:08:c6:
64:d7:82:67:d1:7d:7c:40:47:75:0f:4a:29:f3:70:66:01:bc:
32:28:cc:88:5c:ff:c1:94:42:08:af:c6:c8:20:fe:dd:dd:da:
a3:93:dc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:44 2025 by rpki-client