Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
File: W-cZ-YXfOUpCrBHly8j4K0t67F0.mft (raw, json)
Hash identifier: CRQ5a54YTVMecQEeqaFWs56O6UwN7I9qQfrJbD4198k=
Subject key identifier: A1:FA:64:D1:9F:7E:09:30:3C:68:E7:A9:6A:E6:6E:7F:97:EC:A9:A3
Authority key identifier: 5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
Certificate issuer: /CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Certificate serial: 019921B1CDC9820C26EC52DF8773568C394D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 01:02:04 +0000
Manifest this update: Sun 07 Sep 2025 01:02:04 +0000
Manifest next update: Mon 08 Sep 2025 01:02:04 +0000
Files and hashes: 1: W-cZ-YXfOUpCrBHly8j4K0t67F0.crl (hash: njudZouo95Ik+NNOhzRo0JZOZ1QvuSCOihk8bYjV/GM=)
2: qfFhbPzEEV7-3fOF8iI3mosl_gc.roa (hash: eNrgqVa+1D+OMy3T6aNIQjkftemLm7/l9HKfq0aM6Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:cd:c9:82:0c:26:ec:52:df:87:73:56:8c:39:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Validity
Not Before: Sep 7 01:02:04 2025 GMT
Not After : Sep 8 01:02:04 2025 GMT
Subject: CN=a1fa64d19f7e09303c68e7a96ae66e7f97eca9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5e:e6:ea:59:9c:91:d2:ae:e4:1a:90:80:06:
d9:0b:c6:76:53:d2:56:70:62:7f:72:35:aa:92:c4:
f3:44:2d:cf:cb:3a:30:a8:62:17:de:c0:b0:2a:02:
60:50:2f:a6:5e:97:39:fd:bf:44:04:1b:76:39:d0:
b3:5f:25:95:19:1e:94:ba:47:9f:55:99:a9:c4:5e:
44:58:ec:8c:2f:22:3d:7a:11:47:e7:d4:9e:7b:3e:
96:d8:e8:cd:44:ea:c9:d5:ce:69:0e:a1:92:ee:6c:
4e:3a:3a:74:6f:2f:e6:fe:a0:60:55:e5:9d:f8:50:
31:1b:c2:56:b3:3f:cb:f2:11:ec:39:06:59:8e:2e:
67:ff:31:94:e4:6e:b9:3b:59:84:41:67:e0:6a:f8:
8f:78:9f:94:4a:41:14:00:da:fc:6a:69:14:0a:4c:
ac:6a:02:23:85:68:45:2d:45:a3:b7:65:ab:fd:66:
73:c6:b8:0d:b0:ca:85:ca:e5:94:27:41:99:f6:b9:
eb:1d:f7:c6:38:65:51:be:a4:e5:67:fe:e8:70:58:
8c:6b:49:33:38:80:04:27:7f:65:9e:6b:42:d9:a9:
bb:79:99:67:fa:8a:e6:96:70:d3:16:0e:72:4e:71:
50:fb:0e:43:13:2b:e4:53:53:8a:07:96:fc:a8:f1:
5e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FA:64:D1:9F:7E:09:30:3C:68:E7:A9:6A:E6:6E:7F:97:EC:A9:A3
X509v3 Authority Key Identifier:
keyid:5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ee:9c:c1:07:23:a7:1e:11:ad:2f:a6:f8:d7:61:99:63:e3:
53:ed:b2:86:50:b3:d6:d1:70:98:d8:a9:cb:db:86:5c:2f:c2:
7b:d4:d5:dc:97:4d:6d:9c:59:f0:0f:67:99:c9:f4:1c:12:92:
cb:6b:a4:b6:3a:bd:77:d5:02:71:b0:f0:b4:fd:14:b1:43:47:
7e:f1:aa:2d:4b:d5:81:09:a1:6e:bb:cf:af:6f:7b:46:cd:cd:
52:b4:66:13:43:93:a7:92:56:92:54:1b:02:e7:e1:01:d4:aa:
77:b0:3c:54:fc:62:23:a1:e2:fe:3b:32:d8:12:af:a9:ec:1a:
69:c0:d1:a1:f8:19:b6:f0:af:1e:13:98:75:d0:da:ea:ad:e7:
af:a6:d2:f0:d9:fe:19:e6:44:c5:0e:b5:95:1b:51:30:9d:33:
88:d2:a2:36:b4:90:14:b8:da:6f:11:28:90:e3:22:84:89:ce:
53:ac:40:c5:b8:7b:bc:ee:4f:fc:8f:b4:ad:74:42:d3:12:79:
14:2c:9a:ca:36:6e:83:47:11:a7:9e:61:51:38:2c:33:9f:01:
35:e6:4c:07:c7:25:35:70:a2:f4:91:49:a6:46:f1:e7:24:f5:
45:e6:62:e2:d6:c3:e6:6f:20:de:b7:a0:f7:35:cf:25:32:db:
ee:ce:9a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:18 2025 by rpki-client