Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
File: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft (raw, json)
Hash identifier: J1pE/aEBvUX/vfCJUbPUUhnf1zs7xhRXaLDJDSQeumc=
Subject key identifier: 2C:06:CC:E2:89:92:98:D7:70:4B:43:05:7F:8A:DD:EE:CE:A7:91:A8
Authority key identifier: 5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
Certificate issuer: /CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Certificate serial: 019A70A4E704A7FA31BBDC679085FBA57A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
Manifest number: 028B
Signing time: Tue 11 Nov 2025 02:00:46 +0000
Manifest this update: Tue 11 Nov 2025 02:00:46 +0000
Manifest next update: Wed 12 Nov 2025 02:00:46 +0000
Files and hashes: 1: 1-DmKYgnKcK0PXEAQVbF_OKc3-qY.roa (hash: A2ZK2n/AK9OAPtM9+Qchv9vt+I10xrYcK4O013Ux+Cs=)
2: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl (hash: sQOweZMicbyq2uc4EYQODuZuegQscy6FlNCaG07XBWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:e7:04:a7:fa:31:bb:dc:67:90:85:fb:a5:7a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Validity
Not Before: Nov 11 02:00:46 2025 GMT
Not After : Nov 12 02:00:46 2025 GMT
Subject: CN=2c06cce2899298d7704b43057f8addeecea791a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:51:41:f9:e7:69:76:de:6c:71:8d:d8:78:52:
33:8e:47:ea:a2:83:94:42:2f:ce:4c:1c:8a:b8:d3:
1b:42:ad:d6:43:a5:f4:84:a5:e3:39:88:8d:1c:c3:
af:0d:eb:4c:da:85:7d:9e:4b:88:39:8d:e3:92:0b:
ab:f5:76:8d:e2:51:f4:d0:ff:9f:21:2a:1f:95:5b:
39:e8:b8:69:eb:06:d7:2d:0b:da:a5:c0:15:d0:6f:
6b:f6:fa:78:28:4a:35:29:6a:44:f7:d3:dd:20:09:
c4:88:06:31:a5:a0:42:b7:63:ee:b8:08:77:44:17:
ff:4b:e4:27:b2:af:f2:74:13:61:30:0e:ff:53:b9:
fd:9b:b5:56:e6:d4:31:aa:03:b6:d5:07:57:23:bc:
a4:ba:ab:f2:75:83:aa:4c:50:ec:11:8c:74:7c:1f:
ae:fb:55:af:d9:2f:0e:79:64:c9:a2:5f:bd:d0:db:
23:83:9c:70:30:60:10:b0:85:34:b1:c1:02:25:e2:
c6:03:ac:19:3b:c3:10:6c:d5:54:52:01:ae:8c:18:
0f:d9:3c:8b:1b:16:a1:42:a7:6a:9b:f0:17:f0:3e:
65:75:d5:46:a1:6e:48:22:8c:de:ca:11:3b:e7:b1:
4d:ef:b1:7b:dc:dd:df:ab:a9:e3:2a:63:88:99:c6:
53:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:06:CC:E2:89:92:98:D7:70:4B:43:05:7F:8A:DD:EE:CE:A7:91:A8
X509v3 Authority Key Identifier:
keyid:5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:6e:ca:67:9a:f0:4f:0c:54:27:91:26:1c:0b:0b:a0:62:f6:
ef:80:88:ef:82:9f:6e:3e:e9:12:87:b2:b7:2c:14:68:3b:3b:
13:69:4c:82:cc:25:2f:6e:7a:d1:31:dd:7a:35:51:ce:93:80:
92:1a:e6:d5:ce:c9:77:a7:02:ef:23:7a:22:89:0b:01:ac:a2:
f7:c1:c8:53:09:2c:d7:ab:e5:79:15:c9:80:ae:73:a2:b5:37:
08:2b:1e:12:cd:90:16:dd:f5:25:13:99:e1:6c:56:a0:d7:96:
5b:93:c6:19:a8:7c:25:c8:65:07:d7:bf:40:c2:c8:9f:f4:1d:
53:d5:37:0a:87:56:bc:69:ee:e0:a2:d9:6b:66:14:13:4c:0e:
fc:5f:7c:89:ab:33:d2:e1:e1:a2:65:84:f9:be:3f:ce:40:24:
b8:e1:35:cd:fb:1d:d3:c4:f4:80:9c:b3:4f:82:26:dc:86:ca:
08:67:c4:d8:60:c0:8e:86:65:b4:3d:56:13:28:52:f3:2f:30:
99:16:70:cf:94:9c:7e:03:1d:5e:58:44:69:d6:53:2e:1c:d3:
bf:8e:dd:a2:43:17:08:59:0b:4c:e7:41:f0:6d:24:20:8b:62:
a9:08:30:9c:3d:40:9d:b4:b5:66:02:2d:b7:48:4f:f6:c1:3d:
50:94:01:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:10 2025 by rpki-client