Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
File: W67rTDpphRQSVf1fauGIQGc0j0E.mft (raw, json)
Hash identifier: 9YWoAETjon1CMYWK5JPFjIGSIgL5jjgvImp+TkfXP7w=
Subject key identifier: E0:90:DE:7F:A3:B9:3F:27:77:AA:4F:D1:1E:19:61:E2:98:1D:B9:1D
Authority key identifier: 5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
Certificate issuer: /CN=5baeeb4c3a6985141255fd5f6ae1884067348f41
Certificate serial: 019923316F6FABA03834B0DCDB30043DC176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
Manifest number: 0217
Signing time: Sun 07 Sep 2025 08:01:06 +0000
Manifest this update: Sun 07 Sep 2025 08:01:06 +0000
Manifest next update: Mon 08 Sep 2025 08:01:06 +0000
Files and hashes: 1: W67rTDpphRQSVf1fauGIQGc0j0E.crl (hash: yqix+hatTQbYY81qLGXeOUa4pXV6AtTSC+MjxC97zQc=)
2: fImxldtEe3i_XS4-KxZuO-LAgYs.roa (hash: y0/Y4Oas1pqWDy9av0sFDF2hXjn1ElLUDcx131DTb88=)
3: w518JUndnoJzF7ArkNi72UzL1I0.roa (hash: 8BFeioFwQr4QIG7R1EZ3G0EZLDkxKgvDohVxrnoFSAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:6f:6f:ab:a0:38:34:b0:dc:db:30:04:3d:c1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baeeb4c3a6985141255fd5f6ae1884067348f41
Validity
Not Before: Sep 7 08:01:06 2025 GMT
Not After : Sep 8 08:01:06 2025 GMT
Subject: CN=e090de7fa3b93f2777aa4fd11e1961e2981db91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:ba:a4:34:81:cc:ac:ca:31:3e:88:d0:f2:
dd:48:d5:18:73:11:38:e6:a2:18:ef:b6:68:06:35:
d6:3c:04:0c:bc:b8:bf:2c:81:ca:9d:c2:c5:09:48:
85:2e:17:bb:37:83:17:c5:4d:0f:b1:b8:ac:39:f9:
d5:4a:96:c5:48:32:45:bb:bd:04:e1:2d:9a:d0:f1:
33:8f:8f:7b:51:3c:92:bf:f9:16:2f:69:6a:35:6c:
76:08:23:65:68:ca:01:30:d4:1b:26:80:64:8a:db:
5e:e8:be:21:dd:a1:28:80:0d:35:bb:6d:18:b1:dc:
fb:66:a7:9b:0b:1b:ee:ae:32:e0:b6:44:5f:a2:05:
30:35:69:55:0c:ca:c1:07:bb:da:b5:2a:18:d3:be:
ba:17:87:b7:4b:23:dc:4c:a1:56:be:82:c5:f9:29:
5e:d5:9e:ec:55:52:1c:25:a7:42:7d:14:0d:8d:de:
d2:c2:7e:bd:82:35:77:2d:dc:a4:06:bd:db:c2:37:
06:3b:8c:20:56:90:08:f2:c5:a5:65:f7:a7:b6:7b:
7b:62:9c:b7:37:72:03:56:22:2f:63:63:0d:13:29:
ab:d1:38:9f:58:81:ad:0f:a5:bd:91:94:6c:ff:18:
7e:f1:e5:f7:04:c6:91:f4:ff:78:92:06:5f:e6:66:
30:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:90:DE:7F:A3:B9:3F:27:77:AA:4F:D1:1E:19:61:E2:98:1D:B9:1D
X509v3 Authority Key Identifier:
keyid:5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:95:58:78:85:e9:46:ec:f9:2c:c6:43:0b:6a:8c:af:43:55:
43:48:92:02:d9:2b:61:1f:41:8e:65:c4:9a:6b:97:d3:65:28:
8a:e3:0b:97:f4:cc:4d:13:6a:0e:e7:fa:e2:18:6d:e7:8b:96:
90:43:5b:19:b4:fc:05:d4:fb:d6:3b:04:92:11:cb:83:c1:11:
9b:04:cf:4c:d8:12:c9:ee:86:0b:b0:17:e0:c6:11:b1:4d:ac:
7b:5c:30:9e:a0:10:f2:9a:29:a9:88:a2:31:5d:a5:03:7d:5c:
b2:37:18:af:e7:85:ad:c7:36:60:c2:b6:f3:d8:92:f9:50:5a:
50:c4:c6:a2:95:18:b1:2b:42:85:04:0e:74:dd:6f:ec:28:eb:
2d:5a:f6:74:d7:e2:72:5a:cd:8a:4d:2d:a5:ca:0b:9b:c9:6f:
d6:c2:fa:38:cb:34:73:e5:9d:c3:d5:45:a7:23:bf:58:11:2d:
af:84:74:0a:9b:4c:c6:16:6b:36:72:e0:85:af:18:64:74:d9:
5c:bd:4a:6f:ce:2a:1d:ee:8c:c9:27:a3:2c:c9:82:7b:4a:22:
29:30:49:ad:c0:84:14:32:cb:ec:96:8a:b3:6f:8b:a3:e4:04:
bb:8e:19:9e:8f:e3:b6:d1:51:a1:d7:77:42:80:63:55:e8:85:
e3:d9:54:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:30 2025 by rpki-client