Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
File: WsPivbYyltXw86_pW9FUURelsUk.mft (raw, json)
Hash identifier: +PJQnhipgSLI3thv8f4SrxrQ0VPuSLA5pFV+Pe3ng1c=
Subject key identifier: 86:1A:A6:B4:58:9D:3A:FF:2D:0D:2E:92:9E:AA:F8:55:4D:FC:87:68
Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
Certificate issuer: /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Certificate serial: 0198CA25B9815DF4948827384243DA67FD73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
Manifest number: 107B
Signing time: Thu 21 Aug 2025 01:02:06 +0000
Manifest this update: Thu 21 Aug 2025 01:02:06 +0000
Manifest next update: Fri 22 Aug 2025 01:02:06 +0000
Files and hashes: 1: WsPivbYyltXw86_pW9FUURelsUk.crl (hash: sCXzQ1bZ0nBgkI7s42hriajHyKs7kFA7tKpmWWyzXGg=)
2: Y1iDW0v_VjcE4OMZE6xW26RRBS8.roa (hash: +eewpgaXa+H5fZW2StNgdbfGXtL6pcCIZkhxs3pPHow=)
3: _3l5IDn3xoKCx9gk6CDmJc9PemQ.roa (hash: tAGS+HxIOTgQB55lROqPB0hTI4bw3qpbmFTzCC9BoS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 01:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:25:b9:81:5d:f4:94:88:27:38:42:43:da:67:fd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Validity
Not Before: Aug 21 01:02:06 2025 GMT
Not After : Aug 22 01:02:06 2025 GMT
Subject: CN=861aa6b4589d3aff2d0d2e929eaaf8554dfc8768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:9b:56:83:8d:68:15:e4:f5:79:d3:02:25:
b3:d5:05:06:3c:a9:38:d0:18:dd:da:c7:d5:4c:27:
f2:f9:33:39:88:47:d2:13:0e:d0:17:d0:9e:68:6c:
be:4c:e4:94:49:ba:ec:33:c4:79:67:02:b7:22:67:
32:3e:dc:17:7e:23:6b:c9:4a:76:1f:9a:93:3d:f1:
ff:95:02:f4:b7:e6:1c:4e:01:2a:4d:99:6a:c7:e8:
24:a3:14:d2:4f:a7:a8:43:14:06:c5:d1:12:39:1f:
6f:7f:93:3b:11:d2:22:78:06:bf:c5:20:28:95:e5:
07:e1:eb:9b:03:d1:1b:ad:7e:84:70:96:0b:41:20:
23:3a:ac:80:a6:f0:ed:50:e7:9c:3b:05:2c:30:47:
c3:23:8d:55:e5:40:ab:81:7f:09:b3:52:d5:69:e1:
0d:d7:47:3e:b9:18:b2:b1:b4:f8:b2:11:fa:26:51:
bb:53:e7:11:be:97:fc:fc:3e:fa:6e:94:ba:0a:fb:
72:8d:49:ec:ed:3c:48:6d:9a:db:bd:2f:2a:e7:96:
4a:2c:1a:2f:1a:6a:71:70:28:c7:29:b9:4b:36:ef:
ae:9a:06:69:54:26:33:c3:4c:5f:13:c7:be:f3:05:
c5:58:cf:a0:97:03:08:b9:04:c6:07:04:6e:69:e7:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1A:A6:B4:58:9D:3A:FF:2D:0D:2E:92:9E:AA:F8:55:4D:FC:87:68
X509v3 Authority Key Identifier:
keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:38:fb:88:40:cc:cc:b3:b6:f0:5f:16:bf:38:ed:09:f1:de:
e1:1e:ad:c8:7d:da:81:66:6d:fd:ab:48:9d:c7:84:59:2e:80:
ef:62:f7:f5:41:d5:62:a9:36:05:44:66:1e:6c:1c:70:25:16:
f7:56:b0:c1:6c:04:26:94:6e:53:a2:e6:40:75:4a:44:fc:02:
6e:c7:88:db:8e:43:18:35:c2:a2:26:ef:41:b0:92:92:54:ce:
e9:8f:27:0b:e4:4b:4f:26:47:0e:95:0e:aa:e4:c1:65:af:22:
ee:bc:83:8d:12:25:09:cb:62:0d:c4:87:0a:55:7d:85:c0:ab:
48:73:5a:47:b3:a1:11:4b:08:98:ab:57:82:6a:b0:69:17:b2:
14:cc:1b:f9:e7:ea:2e:44:29:51:7e:51:ca:d9:a3:2f:74:8e:
6e:ed:f9:1f:32:cf:10:3a:ae:ef:73:6c:25:16:84:72:21:70:
dc:a7:97:28:7d:bc:0f:d7:82:8f:db:fc:6f:c1:b4:58:c1:a5:
dc:34:32:51:70:30:e9:8a:c2:44:82:09:59:e2:7a:06:f7:ce:
18:57:7d:48:ac:6f:96:2f:52:57:4b:0d:f1:a7:84:7b:17:33:
a6:06:a2:d8:c0:fa:c4:5a:46:56:91:f2:7c:52:ce:0d:59:d1:
f9:65:99:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 11:09:57 2025 by rpki-client