Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
File: W5BVHjwX4KAtKNbconnbPkFH-ZE.mft (raw, json)
Hash identifier: 9CXHh5AnB1MdE1Iwt+Qx54tHeek3XIc0mcNocvMbtls=
Subject key identifier: 1F:B9:59:CB:FB:E6:FB:4A:DE:06:75:40:E0:26:33:21:66:76:A0:75
Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
Certificate issuer: /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Certificate serial: 019A71EE8A59461F9C137F254C21C2DCEA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
Manifest number: 139E
Signing time: Tue 11 Nov 2025 08:00:49 +0000
Manifest this update: Tue 11 Nov 2025 08:00:49 +0000
Manifest next update: Wed 12 Nov 2025 08:00:49 +0000
Files and hashes: 1: W5BVHjwX4KAtKNbconnbPkFH-ZE.crl (hash: oPKRYUlhU6+uEa4bS8qmhV3gMNECKfLLr1QpBrwgqus=)
2: k0f9OoQq6B1aLa4kFQEIGk8_qxc.roa (hash: Zg6lE/FaFkljjUzS9qnwhWnpjXkAlp/DGZm1wnoBwyI=)
3: mfyRKyki9KIilboLxZkR4V98u1A.roa (hash: zMj3oFzyTUkut1k37DX3Mbj6z32e3XRjiKGOQwnR7iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8a:59:46:1f:9c:13:7f:25:4c:21:c2:dc:ea:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Validity
Not Before: Nov 11 08:00:49 2025 GMT
Not After : Nov 12 08:00:49 2025 GMT
Subject: CN=1fb959cbfbe6fb4ade067540e02633216676a075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1e:d3:9a:33:64:e2:b0:63:18:82:f5:9d:77:
58:97:98:52:18:6d:8d:dd:98:d7:ab:a5:50:76:82:
fc:75:c9:ab:67:14:d1:32:99:09:20:7c:8a:8d:c9:
fc:52:65:bf:fe:67:ea:07:4e:26:e8:bf:ee:0a:c7:
65:f4:ed:e6:61:1b:fc:be:15:13:c1:9a:89:35:8d:
9f:ed:7d:14:4d:a3:28:b2:33:72:a3:88:ca:d9:47:
19:ba:4e:b0:74:da:e5:57:e8:24:47:b2:b1:c4:e5:
5f:e4:6d:5a:4f:ea:90:df:b6:00:53:de:5c:80:10:
12:0d:fd:68:25:46:04:63:19:63:c6:75:0e:b9:42:
f1:60:a7:9b:91:a7:81:60:68:86:0a:7d:6c:a7:9f:
1c:2a:c9:a8:c0:df:55:78:74:ba:87:59:6a:cd:84:
7a:55:8d:bf:33:8c:9e:12:96:8a:53:74:e8:6f:f1:
75:64:c2:ed:c7:7a:af:c8:47:4d:df:e5:23:94:a3:
4c:d4:f3:51:59:1b:80:ee:56:ba:94:4d:42:f5:dd:
8e:af:ec:0a:bf:e1:76:69:79:aa:bb:4d:46:2f:e4:
06:96:74:2f:9f:32:c4:25:07:f6:c9:dc:ec:62:e1:
b6:11:95:9d:97:f6:e3:ca:cb:93:fa:7f:b8:0a:14:
6a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B9:59:CB:FB:E6:FB:4A:DE:06:75:40:E0:26:33:21:66:76:A0:75
X509v3 Authority Key Identifier:
keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9e:cb:02:41:5f:2e:0b:4b:3d:04:fa:f4:b8:2f:fe:e8:49:
af:8b:bc:67:a8:ee:19:6d:b4:c5:15:58:e5:66:3a:de:61:da:
c3:b6:8d:55:4b:0b:29:a9:fc:8d:96:3d:b0:88:7f:06:8c:d7:
b7:fe:1e:49:03:4b:43:34:64:9d:86:42:60:f8:83:bb:2a:e2:
eb:02:9a:ed:69:fc:e3:98:e3:fc:ed:b4:3b:b8:a4:72:b1:3b:
42:38:91:b3:29:f5:b2:c8:ad:dd:e7:cc:25:19:a9:56:64:69:
d3:fd:27:46:a9:7a:90:36:35:34:86:d9:63:33:f7:2f:5c:a9:
dd:b5:e6:69:b7:b1:f4:60:4f:f3:b5:1d:54:87:1e:cb:da:d4:
74:f4:c6:2c:4a:a4:83:dd:f0:50:1c:c5:20:23:9c:e7:37:6d:
8e:ff:0b:41:e7:c9:1e:90:1c:46:d2:14:0e:7f:d0:45:31:d4:
26:43:17:e9:40:02:f7:a6:90:40:e1:c1:c1:af:7b:aa:49:6d:
aa:c2:ac:01:0a:c4:66:75:7d:5b:bc:1d:e0:8b:28:76:68:62:
2e:04:d6:05:f9:b9:a6:24:77:aa:07:73:dd:27:d9:e3:fd:11:
6f:77:1d:73:67:29:f8:61:7d:83:01:9c:16:1a:9f:1d:21:81:
3e:7d:61:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7opZRh+cE38lTCHC3OouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViOTA1NTFlM2MxN2UwYTAyZDI4ZDZkY2EyNzlkYjNlNDE0
N2Y5OTEwHhcNMjUxMTExMDgwMDQ5WhcNMjUxMTEyMDgwMDQ5WjAzMTEwLwYDVQQD
EygxZmI5NTljYmZiZTZmYjRhZGUwNjc1NDBlMDI2MzMyMTY2NzZhMDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx7TmjNk4rBjGIL1nXdYl5hSGG2N
3ZjXq6VQdoL8dcmrZxTRMpkJIHyKjcn8UmW//mfqB04m6L/uCsdl9O3mYRv8vhUT
wZqJNY2f7X0UTaMosjNyo4jK2UcZuk6wdNrlV+gkR7KxxOVf5G1aT+qQ37YAU95c
gBASDf1oJUYEYxljxnUOuULxYKebkaeBYGiGCn1sp58cKsmowN9VeHS6h1lqzYR6
VY2/M4yeEpaKU3Tob/F1ZMLtx3qvyEdN3+UjlKNM1PNRWRuA7la6lE1C9d2Or+wK
v+F2aXmqu01GL+QGlnQvnzLEJQf2ydzsYuG2EZWdl/bjysuT+n+4ChRqgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+5Wcv75vtK3gZ1QOAmMyFmdqB1MB8GA1UdIwQY
MBaAFFuQVR48F+CgLSjW3KJ52z5BR/mRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzVCVkhqd1g0S0F0S05iY29ubmJQa0ZILVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMTkyYTQtNzZiMi00NjVkLTg4MTgt
YTMwZTMzYTcwYjFlLzEvVzVCVkhqd1g0S0F0S05iY29ubmJQa0ZILVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jMTkyYTQtNzZiMi00NjVkLTg4MTgtYTMwZTMzYTcwYjFl
LzEvVzVCVkhqd1g0S0F0S05iY29ubmJQa0ZILVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApp7LAkFf
LgtLPQT69Lgv/uhJr4u8Z6juGW20xRVY5WY63mHaw7aNVUsLKan8jZY9sIh/BozX
t/4eSQNLQzRknYZCYPiDuyri6wKa7Wn845jj/O20O7ikcrE7QjiRsyn1ssit3efM
JRmpVmRp0/0nRql6kDY1NIbZYzP3L1yp3bXmabex9GBP87UdVIcey9rUdPTGLEqk
g93wUBzFICOc5zdtjv8LQefJHpAcRtIUDn/QRTHUJkMX6UAC96aQQOHBwa97qklt
qsKsAQrEZnV9W7wd4IsodmhiLgTWBfm5piR3qgdz3SfZ4/0Rb3cdc2cp+GF9gwGc
FhqfHSGBPn1hSQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:56 2025 by rpki-client