Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
File: W5YiHahfbIqAcDV2aDrSw5PyO8w.mft (raw, json)
Hash identifier: M5hfGjt5IFF3P5GQp2q0f8K0kAadNs1PTHMXZMAuHtA=
Subject key identifier: FF:A2:4B:7E:B5:9C:D8:37:D1:08:CA:81:89:64:14:51:2F:B9:E2:DD
Authority key identifier: 5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC
Certificate issuer: /CN=5b96221da85f6c8a80703576683ad2c393f23bcc
Certificate serial: 019A3E6ED270873D004137153A2F0B99E3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
Manifest number: 06AF
Signing time: Sat 01 Nov 2025 08:00:41 +0000
Manifest this update: Sat 01 Nov 2025 08:00:41 +0000
Manifest next update: Sun 02 Nov 2025 08:00:41 +0000
Files and hashes: 1: W5YiHahfbIqAcDV2aDrSw5PyO8w.crl (hash: L4PKePMWc7mAFp+Aei6MbtSFXFRSp3cs5pDYTZuYDjk=)
2: aC3k6Pc-VbYaZAExCYMf-r0FJik.roa (hash: sjHut+jtNlmiU2BIEntfi+uVsFkRaMGa8qqarc0jF00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:6e:d2:70:87:3d:00:41:37:15:3a:2f:0b:99:e3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b96221da85f6c8a80703576683ad2c393f23bcc
Validity
Not Before: Nov 1 08:00:41 2025 GMT
Not After : Nov 2 08:00:41 2025 GMT
Subject: CN=ffa24b7eb59cd837d108ca81896414512fb9e2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:a2:8b:66:d1:1d:eb:79:ee:30:e6:ef:82:
26:23:7f:cb:da:56:39:26:5a:f2:61:bd:8d:ac:d5:
d5:8b:3a:1b:a9:88:61:df:bb:ee:f3:a6:0f:4e:df:
5e:e9:38:78:3c:3a:84:01:b5:ce:46:56:c5:55:a3:
bb:6e:67:9d:33:10:73:78:d0:15:52:bc:db:a0:09:
7f:47:cf:ed:5f:21:7c:46:99:b7:12:ea:51:cb:c4:
b4:ed:51:0a:62:2d:69:1d:e0:20:ea:8c:bb:98:59:
25:92:59:7b:03:01:54:0b:07:3e:2e:8d:2a:ec:79:
48:b9:15:77:d8:5f:9d:cd:8c:af:f5:ea:de:0e:f3:
f5:1e:7f:fa:ac:e5:cb:6f:ff:77:00:6d:dc:6d:17:
a2:16:ad:d6:f3:98:14:fd:d7:0b:52:0f:67:ca:d4:
e6:0d:2d:34:4f:33:a3:4e:19:ce:95:f2:8e:80:4a:
02:a8:ad:9e:cc:6d:9c:0c:99:7f:1a:36:e6:17:54:
1b:34:b8:e9:33:2d:04:9a:33:fa:32:9e:72:92:6d:
dd:42:ab:d7:33:66:4d:ee:2b:c3:78:ac:a3:33:4a:
65:d4:9a:1f:6f:b4:16:2f:ee:eb:c1:8b:f6:5b:ae:
1c:3b:e7:8c:0d:d3:d4:00:e1:f8:7e:7d:5c:82:32:
0c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A2:4B:7E:B5:9C:D8:37:D1:08:CA:81:89:64:14:51:2F:B9:E2:DD
X509v3 Authority Key Identifier:
keyid:5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d0:8d:42:b1:0b:9f:27:8c:58:58:a9:bb:09:d9:fe:b8:61:
03:67:74:54:96:35:db:15:44:4f:65:ef:e6:20:b9:0e:a7:16:
05:70:a6:a1:92:be:be:14:0e:74:7f:1b:09:59:fa:47:cf:66:
f1:8a:2f:5d:f5:da:e0:c8:ca:c6:cf:50:de:b0:4f:96:53:b4:
65:4b:4b:f1:c0:48:8e:39:2f:e8:3e:66:6e:fa:9f:9d:cb:fe:
57:87:6f:c2:9f:33:31:19:ac:78:22:6c:f2:39:e4:b4:70:c7:
cf:e1:76:9f:d5:c4:d0:37:00:be:29:3c:c5:34:53:22:9a:00:
bd:c8:1f:d7:84:56:eb:12:77:27:f4:8c:6e:8e:93:a3:7e:45:
5f:e2:34:24:69:b8:12:68:4d:af:58:f8:b7:85:7e:f5:9f:34:
e3:67:2f:13:08:10:4e:5f:80:3a:9d:23:e8:df:f1:55:7d:37:
90:a5:35:8b:bf:66:58:6b:2a:27:0b:76:75:e2:cb:7d:5a:07:
34:df:1c:94:52:a1:aa:47:dc:d6:33:f2:c7:dc:e8:a9:46:0e:
47:e4:46:a5:ed:b5:6d:59:10:28:21:8f:d4:72:73:1c:30:e1:
87:24:4d:93:ee:04:22:27:61:42:3e:7f:68:12:f6:ea:ac:7b:
36:e8:e0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:17:39 2025 by rpki-client