Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
File: W8FQNhC_gthoe3rvuHmmV4cE8yo.mft (raw, json)
Hash identifier: AuE+XH4Idwar9azStRvyL66uUH/t7U5CySWDdADJmww=
Subject key identifier: 6C:83:D5:D8:B8:A2:74:AE:FF:D9:3C:1F:A7:F2:3C:22:6E:5F:78:B8
Authority key identifier: 5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
Certificate issuer: /CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Certificate serial: 0199364A3FDB22C8F764AA2632151BCACD9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
Manifest number: 0D1F
Signing time: Thu 11 Sep 2025 01:00:59 +0000
Manifest this update: Thu 11 Sep 2025 01:00:59 +0000
Manifest next update: Fri 12 Sep 2025 01:00:59 +0000
Files and hashes: 1: W8FQNhC_gthoe3rvuHmmV4cE8yo.crl (hash: RN4kLCnhvNOVkjcA7ZYviAwBH3pNhvW+fN9ANhbmB30=)
2: rzLK9K7U47FPPeK7ERJASBVVtlU.roa (hash: X91g9n8reIlS29Iuv4BYArQQP2cYDZgj7Nwx0mw9YJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:4a:3f:db:22:c8:f7:64:aa:26:32:15:1b:ca:cd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Validity
Not Before: Sep 11 01:00:59 2025 GMT
Not After : Sep 12 01:00:59 2025 GMT
Subject: CN=6c83d5d8b8a274aeffd93c1fa7f23c226e5f78b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:85:d6:a8:77:4d:bb:c8:a7:8f:b8:e0:d0:
a8:73:dd:e7:bb:7d:8d:89:c4:14:e0:90:c3:ce:c9:
d4:4a:22:c8:ce:af:ce:6a:04:26:75:63:15:83:6e:
79:e6:3d:8b:ff:e6:e2:d3:13:22:28:e9:04:61:6b:
74:aa:04:98:17:25:99:a1:56:5f:dc:33:35:4d:e6:
a8:65:18:c3:12:4a:a7:90:d3:57:eb:1e:44:7a:72:
46:53:c9:09:fb:76:66:5a:d3:a6:9c:a2:f5:30:cd:
26:ff:41:fc:6e:09:ba:6d:73:0e:36:b9:5d:9f:95:
e4:fc:57:b2:7a:56:a6:94:8b:87:80:aa:76:68:e7:
95:62:aa:91:3c:8b:55:f1:4d:33:2a:3b:9f:79:2f:
5e:06:31:07:b6:63:c7:60:55:56:6b:8b:8c:c9:f3:
7b:90:85:46:dc:a7:66:ca:65:05:3a:e0:95:62:5e:
f0:2a:fb:b2:76:05:cf:be:6d:ac:ac:5a:f6:f5:9a:
72:ba:aa:79:2c:f6:1f:8c:b2:16:fe:ae:0b:35:90:
6f:fe:2b:a0:ac:db:4c:6e:b9:5c:bb:88:5f:6f:ce:
5d:b1:a7:6d:94:9f:c1:3e:f7:cc:11:e6:ec:1c:45:
4d:08:46:65:24:d4:66:3f:41:d4:c9:9b:2f:ad:e9:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:83:D5:D8:B8:A2:74:AE:FF:D9:3C:1F:A7:F2:3C:22:6E:5F:78:B8
X509v3 Authority Key Identifier:
keyid:5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:38:52:64:f9:81:00:bb:6f:33:09:84:9e:85:71:ee:29:69:
0d:c8:cc:f4:df:87:14:02:e3:39:29:b4:53:c2:90:96:1d:ff:
22:52:d8:ab:63:a5:89:a8:2d:8c:f0:fa:9a:e5:16:f4:a4:5f:
c3:3a:0b:49:96:9f:73:2b:6e:6b:d8:35:e9:ec:22:83:bf:6e:
34:c8:26:d8:11:79:08:0e:c7:87:14:b7:7b:1b:bd:5e:4a:ca:
fd:5d:a4:a2:e1:e4:24:89:41:04:19:30:06:ca:4e:b7:d2:ad:
28:c7:90:7a:96:71:d0:1e:55:e8:7c:ba:2c:d7:0f:a2:f3:84:
5e:ea:02:60:81:ca:bb:19:55:7f:fd:ee:51:73:f5:78:96:b3:
f5:2d:88:e2:5c:11:53:df:32:2a:a5:8a:c0:7a:74:14:de:31:
de:f3:0a:38:86:f3:c5:8a:21:92:8b:ff:3d:62:ff:d5:ec:05:
cc:72:fd:59:f2:7e:77:47:fd:04:72:53:f9:7c:8f:87:65:90:
31:16:23:eb:a7:1f:c3:e8:45:12:e2:30:91:ff:3a:98:58:c6:
2e:f6:42:f3:6b:90:c7:3f:9f:c6:6d:4b:2e:d9:5f:e4:65:62:
8a:7a:ce:fa:76:c4:e4:b1:f6:53:04:eb:8e:06:da:72:b7:4c:
ab:ba:7a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 09:46:35 2025 by rpki-client