Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
File: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft (raw, json)
Hash identifier: QePmTQpVodg/CYzyW+/26XLo5GhBKIstgoe0qpm47aI=
Subject key identifier: F2:96:70:3F:DC:11:6E:AF:7A:C8:42:78:60:FC:1D:57:26:70:6C:CF
Authority key identifier: 5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
Certificate issuer: /CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Certificate serial: 019A28C2256DD14AE07D8D1AAC51A93FF2F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
Manifest number: 1700
Signing time: Tue 28 Oct 2025 03:00:03 +0000
Manifest this update: Tue 28 Oct 2025 03:00:03 +0000
Manifest next update: Wed 29 Oct 2025 03:00:03 +0000
Files and hashes: 1: D7wvDXUsXUNReHXB-ElMhZdvj4w.roa (hash: YElp4tNhBybnsgMrPzJJrWGgoM31szDQK/CjgNi5G0I=)
2: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl (hash: QFFisC9tCmHTYB0etpnIOLoCxBYEo5dKWqifW5qcFY8=)
3: fV4CO55wgQW9hfh18y1_D2jQQS0.roa (hash: zkhm9MY22kTd2LgUoPIq1ls+LADDlKBeCuVAbz9l9VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:25:6d:d1:4a:e0:7d:8d:1a:ac:51:a9:3f:f2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Validity
Not Before: Oct 28 03:00:03 2025 GMT
Not After : Oct 29 03:00:03 2025 GMT
Subject: CN=f296703fdc116eaf7ac8427860fc1d5726706ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:a4:40:95:76:83:81:70:f9:81:4c:9d:fe:
56:b9:53:ee:c8:19:1f:b2:19:7a:23:b7:16:8f:39:
84:49:b6:3e:0f:7f:7a:73:57:72:a3:42:ce:65:5f:
6d:d7:66:80:ae:d5:24:69:9f:90:3c:7b:de:f7:ea:
cc:17:a1:84:04:da:4c:d8:00:64:a8:f9:ad:75:85:
b3:80:fd:7d:6b:4c:5c:44:7f:ef:72:89:48:86:87:
68:5d:a8:16:7d:20:57:67:e3:48:88:50:f1:f9:95:
a7:d9:2f:b7:cf:cd:59:6d:a7:b0:c2:b9:cd:a7:a8:
fa:87:85:7b:5f:7f:ac:e3:e8:40:2f:48:e4:3e:de:
58:54:c6:9f:af:fe:b8:6d:fa:7b:44:63:f5:b6:4e:
c5:09:9f:0c:71:14:77:ed:88:a7:4a:45:8e:ce:e3:
03:81:09:d5:34:32:cf:13:be:a8:dd:88:24:d2:d9:
c9:cd:a3:db:a7:63:3f:57:23:06:c9:ab:91:f3:0d:
be:4c:90:b2:31:6f:c1:f1:b4:ae:79:f4:fb:61:a7:
8d:3b:c2:31:b3:63:9f:6b:9b:8f:88:82:62:f5:95:
bd:a6:a3:f1:11:b1:05:91:5f:56:5a:5b:1d:aa:be:
46:42:07:42:60:ee:7a:18:47:f4:01:dc:11:b4:93:
35:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:96:70:3F:DC:11:6E:AF:7A:C8:42:78:60:FC:1D:57:26:70:6C:CF
X509v3 Authority Key Identifier:
keyid:5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:6b:97:4b:78:de:d7:fc:28:7e:e7:57:05:3b:de:eb:b1:94:
8c:55:ce:ff:84:65:2e:79:6b:0f:44:8c:4d:8a:dc:e3:c2:a8:
88:a8:b7:2b:ea:54:07:4a:f3:9e:6f:91:f6:cd:ef:cd:34:f5:
f7:32:c1:22:ff:34:50:e7:91:03:34:3d:e7:93:a4:2a:df:03:
91:fa:6c:ac:ac:62:8c:7d:62:f3:d7:e6:e4:51:45:94:d8:3f:
58:1e:86:58:f0:d4:78:e8:23:15:75:12:b7:47:cb:80:07:c8:
80:19:33:b3:80:7f:dc:93:78:73:e5:2d:5d:74:7f:a3:64:df:
5b:88:9f:92:be:bf:84:5f:78:e3:91:b0:d5:53:65:de:f2:00:
ec:c4:a9:ad:b8:61:7c:49:89:94:dd:36:b5:3c:d1:ef:f9:e7:
43:4f:76:33:ae:be:5a:1b:99:14:64:c8:93:05:90:b1:31:c5:
d8:d3:f3:a4:d9:97:ac:47:13:e3:f7:5a:0e:04:3e:57:a3:50:
92:59:8e:23:78:1c:1c:12:66:89:b5:8c:0e:b9:ae:fd:ca:ba:
9c:2e:88:ab:5b:75:6c:99:5d:36:7a:a1:04:7a:b1:72:1c:24:
39:8c:3b:8a:5f:95:d2:23:47:fa:78:3a:cd:28:ca:ca:eb:6d:
de:74:ba:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:07:18 2025 by rpki-client