Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
File: W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json)
Hash identifier: E7/Vmav2CQwhOoucdZjhKzdksSZuCHlnhx1FSzrnYJw=
Subject key identifier: E9:C7:7C:53:81:4E:7D:8F:48:CF:76:8D:16:3B:48:4E:89:36:01:BC
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Certificate issuer: /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial: 019922FAB447C545FB1F3C6FECFCD71474A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 07:01:19 +0000
Manifest this update: Sun 07 Sep 2025 07:01:19 +0000
Manifest next update: Mon 08 Sep 2025 07:01:19 +0000
Files and hashes: 1: 1-FQBZTT5afKyG6FIAOC0DP_Gyes.roa (hash: QUXwHR9U/j2PM2tc+oqu+jlOONy/4+OVBz6LYmOZ3uc=)
2: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: lrghOEhKenIOZHRNd6mz/0hUclDLyM9j6FYDHL9lLbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:b4:47:c5:45:fb:1f:3c:6f:ec:fc:d7:14:74:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
Validity
Not Before: Sep 7 07:01:19 2025 GMT
Not After : Sep 8 07:01:19 2025 GMT
Subject: CN=e9c77c53814e7d8f48cf768d163b484e893601bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:a2:63:a7:b3:e3:45:30:25:07:62:80:2c:
12:59:53:61:a9:d0:25:ac:db:dc:ac:29:c2:52:c8:
60:13:cd:fc:f2:5c:0f:9b:c4:74:a9:c6:7c:c8:47:
04:e4:b2:4c:a3:2d:5d:b0:bb:82:67:4c:01:38:7f:
e1:ea:23:4c:15:1d:0c:c4:0d:98:cd:55:ef:72:f3:
29:d9:9f:c6:f7:a0:9a:26:4c:16:e3:7b:83:b8:1b:
4c:09:c0:9a:d6:5a:a1:ed:e0:fa:04:64:d3:5e:18:
b6:68:c6:63:27:95:cd:78:d2:47:5b:1c:14:ab:40:
0f:08:b5:49:64:1a:05:4d:82:0b:7d:67:bf:75:78:
23:da:74:f5:c6:47:26:c2:f0:ef:ce:b3:21:28:fa:
a0:81:d8:69:bf:6b:49:38:f3:8f:dc:6b:82:55:19:
50:ac:c2:7c:ee:85:5e:06:7f:59:f7:77:71:93:e0:
a2:e7:35:91:11:97:9a:56:d9:f3:40:bc:fc:b4:c8:
61:51:3b:8a:37:68:b5:26:f1:14:c9:92:4a:06:98:
3d:ea:35:23:6d:7f:85:72:4f:6e:c3:57:1c:c1:b3:
b1:2f:dc:15:94:68:cd:35:17:3f:b8:b3:fd:13:00:
5d:80:68:16:15:ac:fe:8e:93:fd:a4:a6:86:23:be:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C7:7C:53:81:4E:7D:8F:48:CF:76:8D:16:3B:48:4E:89:36:01:BC
X509v3 Authority Key Identifier:
keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8b:f3:ee:d9:37:d1:f6:4c:8a:b5:b1:8b:ab:b0:e1:4b:e2:
13:0f:3a:a8:bf:aa:ab:8e:5c:9d:37:93:2d:82:75:f0:b2:5c:
fd:ff:8e:9d:58:fc:c4:00:0e:cf:52:a6:c9:1f:4a:eb:00:db:
79:1c:bf:00:a0:37:44:49:c6:d6:b6:73:35:d1:05:66:5b:29:
93:82:3c:30:45:0c:39:c6:c5:6f:c5:8d:fa:4e:14:a6:2b:92:
bd:47:7e:60:0c:81:8a:e9:2c:48:60:ff:d1:74:a5:aa:11:53:
e2:1e:8d:c4:26:36:94:7b:f1:17:87:48:7f:06:78:de:50:a1:
a5:68:94:8b:1e:aa:0a:ab:41:f4:3a:c7:86:c7:6f:0c:b1:60:
1a:ed:06:54:2b:ac:f2:e6:d0:ec:05:58:e0:77:44:fd:b6:d1:
e2:1d:f7:7a:dd:d7:0b:b3:3c:e6:74:55:48:d0:f8:a4:61:1b:
f9:92:10:3b:13:fe:7d:18:f8:27:95:06:1f:de:b7:71:cb:c3:
71:c6:6e:0e:a7:e6:9b:eb:ce:ed:73:a5:cd:72:1e:31:d9:6d:
c9:1e:43:5c:26:8f:4a:bd:07:fb:19:d6:53:be:55:ae:07:0e:
48:1f:a2:34:f8:f4:62:a8:ae:1f:a6:5b:77:63:63:dc:ae:cd:
ab:90:fb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:49 2025 by rpki-client