Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
File: W67rTDpphRQSVf1fauGIQGc0j0E.mft (raw, json)
Hash identifier: aWkROSGCfF6FLazesdfj277tkZFnVSYyYOthaDVq3YY=
Subject key identifier: 09:EB:7E:8A:1E:23:17:6E:52:57:2C:D4:85:0A:E7:F7:E0:89:6D:99
Authority key identifier: 5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
Certificate issuer: /CN=5baeeb4c3a6985141255fd5f6ae1884067348f41
Certificate serial: 0197CACC16A7F72D00445CB27BEF4D08044C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
Manifest number: 0163
Signing time: Wed 02 Jul 2025 11:01:02 +0000
Manifest this update: Wed 02 Jul 2025 11:01:02 +0000
Manifest next update: Thu 03 Jul 2025 11:01:02 +0000
Files and hashes: 1: VBK9Vo2YdqBjqvFuMXisn5IXVIY.roa (hash: aig0hp/RD1UBlJGtHJ41oI6hOq7T5aYkxdTwEdJoNE4=)
2: W67rTDpphRQSVf1fauGIQGc0j0E.crl (hash: lqsqNcY72kLdETOzC4WUC9z6D28yUZrfVAX/FWZD2Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:16:a7:f7:2d:00:44:5c:b2:7b:ef:4d:08:04:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baeeb4c3a6985141255fd5f6ae1884067348f41
Validity
Not Before: Jul 2 11:01:02 2025 GMT
Not After : Jul 3 11:01:02 2025 GMT
Subject: CN=09eb7e8a1e23176e52572cd4850ae7f7e0896d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:55:2f:b1:5b:3b:df:c3:e9:ac:76:07:10:95:
04:b5:4d:9f:10:2b:48:25:74:3b:46:bb:24:4a:dc:
d5:eb:03:56:41:79:7f:06:75:0b:93:31:fa:13:ce:
60:09:4d:7a:93:e8:a9:1c:86:61:03:8b:e0:61:a3:
c7:7e:26:a1:e9:bc:8d:5a:9c:85:d6:2a:ca:bd:06:
04:7b:34:c8:76:dd:e5:0b:2d:55:2a:cb:34:f3:c9:
48:d1:3d:e5:1a:46:d2:f5:bc:1d:a6:a6:ff:7b:b7:
17:06:7f:ce:b6:ae:99:37:3f:4e:ba:41:2a:7e:d6:
76:2e:42:30:3c:6d:46:ba:b0:6d:1a:77:0d:0d:82:
59:09:45:b5:11:94:44:fd:02:b1:bd:bf:f8:f3:3d:
82:4e:8a:87:28:95:62:71:3a:5a:7d:8d:ed:e7:d8:
06:15:21:cd:25:40:f2:53:9b:0b:f7:76:17:8b:6e:
60:7c:32:15:41:4b:b8:00:c1:f0:f1:65:2c:1d:a7:
5d:41:ce:e9:d5:12:53:a3:2d:bf:05:a2:85:2e:a9:
91:3e:0b:b7:b2:ea:77:9b:80:69:d0:96:aa:46:e7:
80:26:1b:f2:76:6e:4b:6e:67:a8:e0:c9:14:a8:d1:
fa:4b:90:1f:d1:bf:74:80:14:c5:91:9d:f8:52:7b:
3c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EB:7E:8A:1E:23:17:6E:52:57:2C:D4:85:0A:E7:F7:E0:89:6D:99
X509v3 Authority Key Identifier:
keyid:5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c0:db:15:e2:97:88:f0:29:c6:a3:b9:01:c6:9c:2d:82:44:
46:4d:77:fb:4f:90:7a:41:75:bd:b0:92:40:23:f4:af:c7:46:
7e:6c:f1:c2:80:b9:2a:e1:c6:c1:27:d9:26:72:3c:dd:dd:07:
47:ee:be:36:3a:60:2f:ba:20:57:ce:8d:e8:9e:c3:c7:0b:92:
1f:c8:51:45:79:ff:4e:41:08:3d:96:b9:3b:55:53:58:01:9f:
01:4e:30:27:26:b9:c9:7e:5c:4b:37:cf:0c:77:b9:d5:85:e2:
de:6b:86:24:3e:bd:e7:f8:08:4d:b2:19:e0:37:8c:4a:90:fa:
ce:94:a3:aa:dc:6c:52:59:9b:9b:c5:61:39:b5:0f:78:0e:a8:
87:74:40:66:4a:54:1b:30:bf:f9:12:21:89:7f:be:8f:af:b9:
85:ab:34:9f:23:10:1c:1b:20:38:92:c4:1b:a3:21:b5:f7:77:
f5:11:81:37:fb:20:b3:ba:25:ac:f3:c4:0d:75:07:ed:0e:51:
3d:6c:1f:c2:c5:14:d4:f8:7b:45:71:14:08:ab:46:9a:8d:ca:
e2:47:82:64:a4:c9:bc:27:9c:8b:c3:ff:08:04:5d:c5:4e:22:
da:9d:5b:05:30:e6:65:f9:ed:61:22:14:6a:41:c3:c1:55:5d:
62:02:c9:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKzBan9y0ARFyye+9NCARMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYWVlYjRjM2E2OTg1MTQxMjU1ZmQ1ZjZhZTE4ODQwNjcz
NDhmNDEwHhcNMjUwNzAyMTEwMTAyWhcNMjUwNzAzMTEwMTAyWjAzMTEwLwYDVQQD
EygwOWViN2U4YTFlMjMxNzZlNTI1NzJjZDQ4NTBhZTdmN2UwODk2ZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lUvsVs738PprHYHEJUEtU2fECtI
JXQ7RrskStzV6wNWQXl/BnULkzH6E85gCU16k+ipHIZhA4vgYaPHfiah6byNWpyF
1irKvQYEezTIdt3lCy1VKss088lI0T3lGkbS9bwdpqb/e7cXBn/Otq6ZNz9OukEq
ftZ2LkIwPG1GurBtGncNDYJZCUW1EZRE/QKxvb/48z2CToqHKJVicTpafY3t59gG
FSHNJUDyU5sL93YXi25gfDIVQUu4AMHw8WUsHaddQc7p1RJToy2/BaKFLqmRPgu3
sup3m4Bp0JaqRueAJhvydm5Lbmeo4MkUqNH6S5Af0b90gBTFkZ34Uns8gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnrfooeIxduUlcs1IUK5/fgiW2ZMB8GA1UdIwQY
MBaAFFuu60w6aYUUElX9X2rhiEBnNI9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzY3clREcHBoUlFTVmYxZmF1R0lRR2MwajBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9iNGIwMWEtMDc0Ni00NWZmLWFmNDEt
MTVlMjg4YjRhNTdkLzEvVzY3clREcHBoUlFTVmYxZmF1R0lRR2MwajBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9iNGIwMWEtMDc0Ni00NWZmLWFmNDEtMTVlMjg4YjRhNTdk
LzEvVzY3clREcHBoUlFTVmYxZmF1R0lRR2MwajBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmsDbFeKX
iPApxqO5AcacLYJERk13+0+QekF1vbCSQCP0r8dGfmzxwoC5KuHGwSfZJnI83d0H
R+6+NjpgL7ogV86N6J7DxwuSH8hRRXn/TkEIPZa5O1VTWAGfAU4wJya5yX5cSzfP
DHe51YXi3muGJD695/gITbIZ4DeMSpD6zpSjqtxsUlmbm8VhObUPeA6oh3RAZkpU
GzC/+RIhiX++j6+5has0nyMQHBsgOJLEG6Mhtfd39RGBN/sgs7olrPPEDXUH7Q5R
PWwfwsUU1Ph7RXEUCKtGmo3K4keCZKTJvCeci8P/CARdxU4i2p1bBTDmZfntYSIU
akHDwVVdYgLJpA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 13:08:23 2025 by rpki-client