Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
File: W7HFcFXCnWafKJqfaPOSgjlCEyo.mft (raw, json)
Hash identifier: i6R3Tbqz0p9mYJU4LrJaOTyMmreBMnsoHYVq2G5NSV4=
Subject key identifier: 62:F7:10:CE:F8:AF:9F:E1:45:A2:07:AA:EE:F8:AD:A7:B4:96:B5:E4
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial: 019A2F692FBEE8141E4D555C630A50C4A107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
Manifest number: 130A
Signing time: Wed 29 Oct 2025 10:00:13 +0000
Manifest this update: Wed 29 Oct 2025 10:00:13 +0000
Manifest next update: Thu 30 Oct 2025 10:00:13 +0000
Files and hashes: 1: 4DaFRyhphaevZU2yeo88GTb2ZWE.roa (hash: OEDhk/DEbdvUjBCo9g+h/wGJyG5A2KruYkh8mbV9XYs=)
2: W7HFcFXCnWafKJqfaPOSgjlCEyo.crl (hash: 8FRcp3dhwN5DGNB80FaCpQaBDlzmOv6GAqV2fVtL0kc=)
3: oLD0eFUFYxck4v3i6OymPCRtKqc.roa (hash: d9IQhkXi9el+adqbpk+yqo7QWqWaJxfrg/LT1tEGEMY=)
4: uB1fsTN5xt9prk3FmqA_vfOk3V8.roa (hash: Xbk+Y99PsH3Ea8NbCtaJ5KS35ZMdZP+5pz4Y3JKvU0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:69:2f:be:e8:14:1e:4d:55:5c:63:0a:50:c4:a1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
Validity
Not Before: Oct 29 10:00:13 2025 GMT
Not After : Oct 30 10:00:13 2025 GMT
Subject: CN=62f710cef8af9fe145a207aaeef8ada7b496b5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:fc:35:e2:95:32:cf:62:4c:47:33:03:94:
48:34:76:ce:82:62:40:bb:8f:c9:5f:3d:1f:d4:4b:
5c:65:2e:bc:0b:a6:68:da:16:d3:ff:eb:14:11:81:
34:46:d3:8a:ff:7b:13:63:2c:2e:cf:e2:cb:f0:63:
e6:b0:b8:9e:ad:ff:4d:7e:55:5c:7b:17:e5:d2:32:
62:91:ad:11:70:7b:a8:e5:f6:00:a7:73:41:5b:dc:
d4:3c:eb:9f:dd:ef:ee:38:cb:91:de:fe:f2:fa:44:
2f:b9:d4:5d:99:cc:59:c6:fb:d4:f0:f0:6f:c4:02:
e5:b1:2f:21:be:1e:93:d8:3c:8d:4d:e4:de:54:b3:
51:5d:d4:2a:98:36:f3:15:d5:b9:c3:32:d0:7b:69:
02:31:dd:2f:28:a8:6f:2d:36:2f:96:c8:e3:ad:b8:
47:87:78:ff:e9:04:fd:b3:69:77:bd:b5:35:5d:be:
10:48:c5:07:49:d7:8a:0a:42:1c:f5:ba:62:39:f2:
15:01:ea:ed:f6:16:3b:47:f7:9e:25:be:b4:90:8c:
af:06:18:74:61:fa:b3:cc:07:e9:8d:52:1d:50:87:
d1:c0:36:e4:ec:92:4d:86:bc:81:fe:14:16:c1:87:
16:ac:a9:f2:37:52:fa:e2:b5:b7:c4:76:f6:b6:f8:
15:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F7:10:CE:F8:AF:9F:E1:45:A2:07:AA:EE:F8:AD:A7:B4:96:B5:E4
X509v3 Authority Key Identifier:
keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:57:e2:5b:1b:d4:8b:cc:f2:13:99:0b:d4:0f:a0:9c:a3:9c:
b4:5d:38:ee:da:5f:55:43:54:99:6d:0e:04:31:1d:ed:49:35:
98:ca:ab:98:bf:64:8e:0f:0f:ec:77:a5:e6:7c:c8:83:43:df:
4d:b7:9c:26:7b:c7:2c:60:32:c9:32:9e:5b:ad:8b:02:df:3a:
96:99:9a:65:6e:6c:ae:ee:12:60:56:8a:d1:14:b0:21:ae:fa:
10:36:de:10:44:58:51:8a:3a:b3:a3:2d:47:3a:40:4c:87:5b:
bb:06:a5:ee:ea:91:b1:ae:e0:2c:be:19:5b:3a:5d:d7:25:a8:
61:26:70:40:27:55:4a:7e:7e:72:5e:ce:c7:3f:71:7d:8b:95:
83:8a:96:e8:98:63:47:0f:f4:ee:3b:7a:53:fa:06:cb:d4:68:
c7:8b:a1:0e:1c:d1:2f:c0:3c:d7:46:15:07:6a:90:7c:a7:11:
13:8d:05:74:b0:ba:1c:7b:34:f1:6c:9b:56:89:28:5f:25:6e:
87:f2:69:55:be:d4:33:b2:b6:17:09:6a:d5:75:18:94:c6:d8:
e5:68:4a:85:3d:6f:06:4e:82:fb:9e:20:1f:35:92:f0:3b:6f:
86:25:01:d6:63:47:68:28:b7:11:be:da:68:09:38:0b:26:27:
7b:1a:06:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 13:44:15 2025 by rpki-client