Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
File: w5VnlKe5iREVrTr5RXPnlhsWS6w.mft (raw, json)
Hash identifier: C53hVYS/lQ1IMpOHU/4lC8UAuFNFuEWvQH0UlscRgeI=
Subject key identifier: 09:21:D7:BB:BD:E9:97:6D:5E:16:4F:31:3A:B5:F5:17:FE:9B:18:84
Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
Certificate issuer: /CN=c3956794a7b9891115ad3af94573e7961b164bac
Certificate serial: 01984776884A3AA621AB91EEF177FB718966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
Manifest number: 09F1
Signing time: Sat 26 Jul 2025 16:00:07 +0000
Manifest this update: Sat 26 Jul 2025 16:00:07 +0000
Manifest next update: Sun 27 Jul 2025 16:00:07 +0000
Files and hashes: 1: Peoo9gs9EBNgjwn3QmaIgoVdA2I.roa (hash: o5UcaRmySAHefVpyYqfIuBk+qGysWoCNDWxnf1QQroQ=)
2: w5VnlKe5iREVrTr5RXPnlhsWS6w.crl (hash: HKzO+pxQdcpeA06aakzJxFACsOypxHlxKPqXGRwYwQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:88:4a:3a:a6:21:ab:91:ee:f1:77:fb:71:89:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac
Validity
Not Before: Jul 26 16:00:07 2025 GMT
Not After : Jul 27 16:00:07 2025 GMT
Subject: CN=0921d7bbbde9976d5e164f313ab5f517fe9b1884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b9:71:e8:b7:8a:0a:24:1a:c4:99:37:74:c6:
d6:46:8c:6b:ac:83:86:7e:d6:4c:99:e3:4d:57:cb:
94:f0:d2:83:1e:c2:f6:c5:5f:95:a3:0c:0a:21:19:
6a:df:fb:35:58:8f:18:ad:22:6f:5d:4b:2b:73:b4:
8c:37:48:02:56:17:cd:a8:ed:23:6f:2d:d6:86:ff:
45:84:1b:b6:8a:81:06:52:5b:88:21:c4:df:3b:11:
c7:2c:11:25:ab:d0:8a:60:1d:65:74:e1:13:3c:74:
7f:15:cd:8a:eb:92:01:81:a7:dd:88:7a:90:77:be:
89:07:96:56:3c:04:67:5f:00:d3:dc:90:1c:de:59:
20:ed:f5:80:41:db:88:03:be:e5:b4:80:3b:fa:2c:
82:47:27:78:b7:34:c2:d7:ba:4d:6c:a2:23:90:48:
08:81:e8:a9:92:86:3a:e9:f4:b2:05:fe:61:42:d4:
2a:ce:3f:0d:9e:82:9a:1b:46:84:2a:24:49:7b:a6:
cf:1f:36:6f:2b:04:07:95:5f:a0:36:13:49:8a:8a:
ac:42:59:ac:e2:08:bd:ae:c7:2e:7e:96:61:3c:13:
51:a8:b7:d8:30:f9:00:8a:9a:a8:35:3a:b9:42:48:
3d:14:34:91:bb:a0:9b:05:38:40:88:83:b3:92:7c:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:21:D7:BB:BD:E9:97:6D:5E:16:4F:31:3A:B5:F5:17:FE:9B:18:84
X509v3 Authority Key Identifier:
keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a4:32:a7:27:03:e3:c0:28:ef:f0:93:4b:d5:4a:3a:09:f3:
13:d8:4f:64:6b:09:15:74:fd:bf:30:8d:19:db:09:56:07:ff:
e1:32:6e:f3:cb:76:40:94:45:73:a7:b3:4d:63:1f:a3:16:b4:
f8:00:95:b8:30:f8:2e:0b:be:44:2f:05:66:5c:d0:f2:b2:fe:
b7:f0:49:15:7f:79:62:a7:c9:4d:9d:87:b3:72:55:c0:c4:ba:
fa:df:c5:c8:21:1c:8c:87:25:d8:d3:97:16:99:00:2b:45:d2:
4b:e7:0d:2a:06:0b:c7:bd:d3:9b:7c:9f:c5:7a:d8:45:47:17:
95:6e:87:2a:58:f9:d4:7e:dc:04:b3:a3:2c:9f:81:f1:fa:59:
35:30:dd:bc:48:c4:c0:d7:6a:e7:37:dc:24:5f:51:19:b6:88:
ff:bb:85:8d:82:5a:c2:6a:ce:3e:d5:e8:b7:d8:6e:83:ad:23:
50:d9:ca:4f:7b:9e:10:59:d9:b5:34:63:b5:06:2b:b9:1c:99:
d3:63:bf:5b:f2:67:0d:bf:c9:10:75:f0:b3:aa:47:16:9d:0d:
36:71:cc:fc:25:82:78:36:54:ef:8f:ed:67:bc:dd:ee:3a:dc:
7e:d8:79:c7:c5:97:6a:55:aa:46:d5:99:8d:03:71:08:ab:87:
b7:5b:70:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:02:06 2025 by rpki-client