Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
File: _-W67rcNfV5-7SxR09WEe7NhtFU.mft (raw, json)
Hash identifier: 8zGeqKHPRdNiA4LFg83lnQTtpe29AG2TE/8oRW19BFo=
Subject key identifier: DC:26:71:21:44:A7:DF:A0:DA:F4:E0:B4:72:22:F8:28:E1:96:41:8B
Authority key identifier: FF:E5:BA:EE:B7:0D:7D:5E:7E:ED:2C:51:D3:D5:84:7B:B3:61:B4:55
Certificate issuer: /CN=ffe5baeeb70d7d5e7eed2c51d3d5847bb361b455
Certificate serial: 019A70A4F958D9B072B90C84176E9BCAC54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
Manifest number: 029D
Signing time: Tue 11 Nov 2025 02:00:51 +0000
Manifest this update: Tue 11 Nov 2025 02:00:51 +0000
Manifest next update: Wed 12 Nov 2025 02:00:51 +0000
Files and hashes: 1: _-W67rcNfV5-7SxR09WEe7NhtFU.crl (hash: kq4a0rHLld4xk9AhFMwR+Q7RGwRLxM5Q5AF0japRP0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:f9:58:d9:b0:72:b9:0c:84:17:6e:9b:ca:c5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe5baeeb70d7d5e7eed2c51d3d5847bb361b455
Validity
Not Before: Nov 11 02:00:51 2025 GMT
Not After : Nov 12 02:00:51 2025 GMT
Subject: CN=dc26712144a7dfa0daf4e0b47222f828e196418b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:c5:6d:7e:cb:e2:6a:df:ad:2d:29:d2:1b:
f6:fc:3c:a2:f9:75:a6:97:b0:d1:18:3e:c6:fd:a9:
1b:ce:90:7e:df:ac:42:8b:c2:a7:01:a7:47:e1:c6:
6c:d7:46:d7:cf:76:94:61:99:4e:17:a0:f3:6e:cb:
3e:78:92:6a:c2:5d:1b:db:7b:61:01:ed:03:ef:53:
20:97:6f:84:48:9c:8e:e8:10:c0:32:5f:4f:60:4a:
bc:e4:cf:cd:d4:57:54:cb:8a:ab:10:cf:c0:3a:1d:
b4:1f:4e:ad:99:6f:91:1f:e6:66:b4:8a:78:ba:fc:
43:fb:8c:02:a2:37:23:d6:f4:7f:98:8c:cd:f4:27:
c2:3f:8a:f6:38:21:56:08:75:a9:7a:1b:ae:53:3b:
7c:98:d3:b3:59:ee:60:87:44:08:e5:44:c9:50:79:
78:fe:a2:60:46:92:ef:bf:a6:80:d9:d6:44:72:83:
bb:47:4b:8d:38:85:bf:fd:db:b7:ef:5b:8b:ff:34:
8f:1c:03:78:d9:58:a7:5e:9f:29:13:7e:b7:ec:75:
9a:60:df:f1:b6:12:7d:b0:5c:27:49:61:ed:b6:cb:
2b:c9:12:ad:ee:76:dc:ee:6e:91:61:11:c8:18:e2:
bc:88:83:9e:52:3a:fb:4a:2b:e9:72:04:ca:0f:f7:
72:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:26:71:21:44:A7:DF:A0:DA:F4:E0:B4:72:22:F8:28:E1:96:41:8B
X509v3 Authority Key Identifier:
keyid:FF:E5:BA:EE:B7:0D:7D:5E:7E:ED:2C:51:D3:D5:84:7B:B3:61:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:20:17:27:b8:12:8b:2a:80:d5:15:95:33:83:2b:2a:88:c9:
a6:51:ad:98:7c:d4:cd:e1:a8:48:37:38:bd:be:00:a7:7c:a6:
a8:70:4b:d7:bf:4d:27:48:fe:b5:f1:fd:fb:86:5e:cb:a0:0f:
e0:b8:66:69:cc:75:fe:7b:42:4a:5e:cd:3e:56:f1:60:cd:5a:
b7:1e:49:c5:3a:f6:e4:c9:18:e9:e0:a4:ba:7b:76:a9:59:08:
da:df:c9:f5:4d:46:3e:e6:bd:f2:50:71:20:2a:ea:59:2d:99:
cc:25:2b:93:d0:df:ee:fe:dd:75:cb:91:00:5c:18:d4:e9:90:
37:c9:8c:de:21:1b:b3:4b:6d:7b:94:a0:8d:cf:c4:45:d8:74:
02:cb:d8:ff:b6:54:02:56:47:b9:36:b9:15:1d:87:d6:05:3b:
23:21:7e:4a:f0:28:97:5a:b3:86:ea:22:e8:ab:e6:a2:51:cf:
55:34:01:1f:cb:c7:e4:7e:76:68:eb:3a:f4:7d:be:89:70:d9:
49:c3:0b:a5:af:45:86:1c:6a:62:51:b7:15:a5:56:98:d9:d5:
9a:ce:b6:5d:74:a9:10:f8:09:d7:8f:49:3b:9c:b8:4e:dc:2e:
9f:3a:54:b7:af:fb:1c:01:87:32:6c:4e:b9:ee:39:b8:1b:b7:
6d:b8:00:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:09 2025 by rpki-client