Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
File: W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft (raw, json)
Hash identifier: 1MGpJlhkZdE+gXtPhcQDrRPEhc/vBLqVQhMWNNKjnDw=
Subject key identifier: 68:A2:26:13:2E:3D:54:F2:F3:6E:27:7F:F1:37:EC:98:85:40:DA:65
Authority key identifier: 5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
Certificate issuer: /CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Certificate serial: 019A4D05F015B5A2E5854D4AC2BFB4649867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
Manifest number: 0CAE
Signing time: Tue 04 Nov 2025 04:00:25 +0000
Manifest this update: Tue 04 Nov 2025 04:00:25 +0000
Manifest next update: Wed 05 Nov 2025 04:00:25 +0000
Files and hashes: 1: 6Ij32bY1nBHX7vkCzgQ3qR10RDM.roa (hash: S+nJqkN01ff0FHv6Vz2ODAn9dbe51mqTXffZ1Idn4oU=)
2: W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl (hash: aoe3N90eTAqwTXw7cgQmjYTPmd/HQ4eNtTdO0GkNoiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:f0:15:b5:a2:e5:85:4d:4a:c2:bf:b4:64:98:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Validity
Not Before: Nov 4 04:00:25 2025 GMT
Not After : Nov 5 04:00:25 2025 GMT
Subject: CN=68a226132e3d54f2f36e277ff137ec988540da65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:6a:e5:12:b8:13:6f:ef:44:84:d2:c8:ce:
ba:bf:77:02:e3:23:e0:12:e2:16:37:84:25:3b:59:
73:4e:bf:7c:97:24:37:86:c1:d9:c7:8b:d1:e5:49:
bb:ca:0e:d1:1c:70:6d:09:4e:7a:57:8a:df:6b:9d:
e2:cc:1b:20:4e:a9:e7:7e:cf:3d:a3:1e:bc:c4:31:
44:6f:d4:74:23:16:f9:64:e8:f9:7e:7e:85:ac:ee:
bc:29:5e:8d:fd:eb:94:7d:d8:7a:8a:cd:75:45:19:
09:4b:ed:bc:5b:2e:b8:f0:6b:54:65:16:6e:17:25:
c0:3f:ec:37:82:80:79:79:32:e8:68:62:38:40:12:
ad:ad:ac:28:99:7c:7e:15:d0:eb:ae:7a:21:12:a0:
e9:6c:51:b4:0d:86:92:08:fc:5e:65:d0:39:c6:24:
62:45:2a:a5:a5:06:b6:72:6a:a3:42:31:b4:24:1a:
9f:00:a8:a7:bb:12:5c:01:ec:35:ae:2a:ce:f9:46:
bc:71:66:82:3f:e0:32:aa:c7:7f:0e:c9:be:f7:8d:
5a:dd:08:02:52:99:3a:77:52:f2:cc:27:60:44:3c:
a5:8a:d5:eb:38:61:c1:5e:b7:37:6b:04:39:a3:bf:
69:58:c1:11:a0:a9:f1:57:2c:a6:27:5a:88:26:5d:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A2:26:13:2E:3D:54:F2:F3:6E:27:7F:F1:37:EC:98:85:40:DA:65
X509v3 Authority Key Identifier:
keyid:5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:52:59:fa:68:86:50:c3:76:9c:a1:81:fd:48:25:26:ff:5c:
b3:3e:97:79:8e:45:39:7e:5c:f5:36:1a:4f:e8:fe:a9:9c:f0:
5d:93:03:32:71:53:1f:f8:a4:27:b8:49:c3:05:e2:5f:5a:ed:
08:80:b8:db:c6:43:39:92:8b:7f:93:96:fa:52:03:c1:08:a1:
c6:30:70:91:b5:d3:be:b9:85:e8:e8:e3:a5:31:47:a8:c8:3c:
46:ca:cd:c4:fa:f9:41:b0:67:95:58:9b:5e:22:3d:38:a4:55:
5b:30:fc:4d:f5:66:44:3a:e2:98:d0:e2:2f:71:95:4e:78:3d:
55:d3:0c:d3:5d:bb:6b:8b:35:89:d1:b3:52:f2:d3:c5:43:45:
1c:78:b1:a5:14:60:f3:7e:af:79:57:60:8d:d8:c5:5c:8d:6e:
6f:61:89:4a:8d:46:93:3c:90:4a:07:1d:44:4d:af:f2:60:db:
ba:49:2d:9c:c0:11:1f:24:9d:aa:1c:f1:bc:02:87:d6:37:c6:
13:2e:41:02:5d:18:3d:cf:c0:9c:14:b7:52:30:b4:34:3c:d0:
8f:dc:1f:3c:3f:dd:a1:b8:ca:0f:47:7a:d7:ce:cd:4b:c0:4f:
f7:8b:b9:0e:c6:85:0f:fa:d1:b0:5d:c3:68:6f:fe:d7:c0:e8:
8f:eb:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:55 2025 by rpki-client