Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
File: W_fQ5HEirv77Ys6iFnSoECVVmxo.mft (raw, json)
Hash identifier: AjZb08OzxuBfLk74JiPLv586iyZ5Qn5RAdHnCHf8cr8=
Subject key identifier: F5:F0:DF:C6:19:B8:76:0D:DC:B9:75:2F:DB:A8:28:15:78:2E:C1:CF
Authority key identifier: 5B:F7:D0:E4:71:22:AE:FE:FB:62:CE:A2:16:74:A8:10:25:55:9B:1A
Certificate issuer: /CN=5bf7d0e47122aefefb62cea21674a81025559b1a
Certificate serial: 019A3E6ECA03351E47DD69C274D1A0DFD09B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_fQ5HEirv77Ys6iFnSoECVVmxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
Manifest number: 06C0
Signing time: Sat 01 Nov 2025 08:00:39 +0000
Manifest this update: Sat 01 Nov 2025 08:00:39 +0000
Manifest next update: Sun 02 Nov 2025 08:00:39 +0000
Files and hashes: 1: W_fQ5HEirv77Ys6iFnSoECVVmxo.crl (hash: U5RtQmOHJbdJAQazu1ZrzdcqkkmGm8cU+EGDggqveSI=)
2: asNSq8lkmS1XdMPBwyGi7exxYUQ.roa (hash: IeZFlfU/tf7kNLd1ueG9wWhJ27KVNelvhJ00kXOKzso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_fQ5HEirv77Ys6iFnSoECVVmxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:6e:ca:03:35:1e:47:dd:69:c2:74:d1:a0:df:d0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf7d0e47122aefefb62cea21674a81025559b1a
Validity
Not Before: Nov 1 08:00:39 2025 GMT
Not After : Nov 2 08:00:39 2025 GMT
Subject: CN=f5f0dfc619b8760ddcb9752fdba82815782ec1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:50:d2:45:00:f1:7c:87:0d:06:a7:a1:87:
01:4e:2b:56:5b:ba:b5:2f:32:ca:e3:68:fa:2d:01:
61:a5:28:5d:d8:13:49:65:99:cb:dc:09:41:3e:1b:
f1:ff:d3:8e:d0:db:8a:3d:31:1b:5f:fc:71:34:f3:
96:48:f2:c7:6b:7e:07:9d:d0:07:b2:9d:50:ef:b9:
19:4f:35:35:cc:8c:19:94:81:0e:6e:2b:05:c4:7f:
3a:a0:a5:2f:b9:cb:fd:e3:4e:17:ac:36:d0:7a:6e:
f1:b8:6e:03:32:07:0d:b1:81:ce:3b:67:0c:90:7b:
0e:3c:3d:0c:a0:8a:55:0d:29:f6:2f:8f:90:8c:21:
f2:24:25:9e:04:d3:59:aa:9e:ea:11:5d:fe:77:dd:
70:ad:3f:a0:3e:c7:26:53:e4:2e:f6:32:d3:b1:d0:
19:c6:4f:68:46:26:84:62:7f:e0:6e:8f:30:ea:7c:
ae:4e:65:62:67:e4:25:a4:50:78:f0:fd:58:bc:2a:
d4:f4:3c:ee:51:f2:10:3f:cd:1f:4b:00:c3:65:e6:
0e:89:cb:ab:1b:cb:1b:b9:c2:72:45:a6:8d:14:75:
7e:8b:de:7f:9a:fc:75:a2:71:68:84:3a:0d:f0:ce:
12:52:7d:fb:20:9e:78:ab:d6:0b:e9:8e:19:c2:3b:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F0:DF:C6:19:B8:76:0D:DC:B9:75:2F:DB:A8:28:15:78:2E:C1:CF
X509v3 Authority Key Identifier:
keyid:5B:F7:D0:E4:71:22:AE:FE:FB:62:CE:A2:16:74:A8:10:25:55:9B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_fQ5HEirv77Ys6iFnSoECVVmxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:56:e4:e2:b7:55:2c:b7:30:17:aa:26:c9:9a:9c:5a:97:0b:
5f:66:a5:c1:1b:07:4c:f5:c9:a1:af:ec:b3:b6:19:5a:df:c2:
95:b5:64:ea:44:e7:ba:36:8a:f5:a3:90:27:bb:c6:d4:12:b2:
4f:ad:84:7c:b3:f0:b1:aa:26:16:37:5d:82:8e:13:6f:ec:30:
28:df:96:4c:fc:48:64:3b:e2:f2:b5:e9:13:1f:f3:de:3d:e8:
df:45:b1:b4:9a:69:51:ae:d5:42:a2:30:91:00:a2:9a:64:11:
56:85:9e:1e:8e:9d:3a:e4:63:e1:f7:86:ff:5f:3f:6c:54:38:
54:d6:ec:14:dd:ec:87:d3:a6:8c:9b:65:c1:e0:91:d1:0f:85:
29:48:d3:95:49:7e:53:4a:3a:e8:76:76:bb:d7:1d:eb:e6:8b:
a9:63:bf:82:ba:3b:77:86:63:c7:b0:00:be:12:78:67:4a:19:
0c:d1:11:5b:0c:4d:b3:a2:ef:03:f8:bb:26:4f:e1:e5:90:8e:
20:fb:07:ae:b7:4a:8b:f5:92:24:f1:1b:6b:a2:45:1f:d4:6f:
96:18:6e:fd:d9:ef:3e:69:43:f9:a0:78:e1:53:0f:9d:7e:9c:
c2:32:e2:5e:11:39:95:f9:98:08:52:29:55:b0:35:b6:d0:78:
bc:d8:68:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:29:29 2025 by rpki-client