Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
File: W6vKoQozYHLrwIIKbfC_pNxc_ao.mft (raw, json)
Hash identifier: rbyqZWR6eEhuPj0TaUJWqWw6FooZqpQ3wR2gwSDRewQ=
Subject key identifier: 71:46:DC:7A:E9:37:1F:F9:80:88:F6:02:D0:07:D8:D8:A9:37:FB:58
Authority key identifier: 5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA
Certificate issuer: /CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
Certificate serial: 019A0D4BCD0DCC716A3F40BAC0759E496D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
Manifest number: 0AC3
Signing time: Wed 22 Oct 2025 19:01:02 +0000
Manifest this update: Wed 22 Oct 2025 19:01:02 +0000
Manifest next update: Thu 23 Oct 2025 19:01:02 +0000
Files and hashes: 1: B2n18W6FZZHyRPgmArtbq0-BQHI.roa (hash: sGRiT/dWrEM0f4SVXVnUW/pThWPm0EW+IVYQygpGhOY=)
2: W6vKoQozYHLrwIIKbfC_pNxc_ao.crl (hash: S/qywHPM7kCqhN21X+0R2mP1tTae1xVk7ibD1cnTnPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:4b:cd:0d:cc:71:6a:3f:40:ba:c0:75:9e:49:6d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
Validity
Not Before: Oct 22 19:01:02 2025 GMT
Not After : Oct 23 19:01:02 2025 GMT
Subject: CN=7146dc7ae9371ff98088f602d007d8d8a937fb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:07:57:8d:91:e4:03:e8:43:ab:89:9f:ad:78:
05:41:3b:2f:e5:9b:b8:ed:11:00:dc:5e:d7:a0:23:
85:df:a7:a5:57:b3:0a:c7:8e:57:d8:ce:02:da:42:
59:19:9d:b0:92:13:c5:af:a2:8e:3c:c8:18:1f:01:
cb:3c:fc:a6:80:cd:19:62:e1:f6:a3:25:a7:b7:9d:
63:70:e6:a9:c8:df:96:cb:4a:ab:01:19:c4:1d:e6:
5b:79:d7:5b:6e:d0:00:0b:fb:5d:fa:6e:dd:eb:82:
12:1c:41:3a:64:ad:58:92:cc:79:dc:89:e8:46:61:
f4:b3:d9:48:e9:d5:a6:42:dc:f4:e8:cf:4c:ab:71:
72:1e:cc:77:b5:b8:84:71:92:ca:98:04:86:8d:75:
64:af:3a:83:00:f4:60:b6:ba:88:80:5a:02:3a:df:
ce:69:b2:21:1c:f0:30:34:3c:b4:f5:56:bb:70:14:
ef:79:fc:8c:b8:87:f5:37:54:4a:79:41:42:8f:42:
5b:00:9a:93:37:9e:98:5f:94:5f:21:e0:32:17:f6:
8a:eb:09:fe:7c:b3:98:22:a6:e0:c4:26:21:d2:1e:
32:2f:50:6b:4e:2e:b2:e9:43:5d:95:dd:8a:27:de:
e0:79:39:b7:30:7c:c4:5e:01:c6:bb:c7:fc:da:c8:
7c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:46:DC:7A:E9:37:1F:F9:80:88:F6:02:D0:07:D8:D8:A9:37:FB:58
X509v3 Authority Key Identifier:
keyid:5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:fb:51:fc:a6:d5:c8:3c:92:6f:ce:83:ab:71:5e:fc:a6:fa:
16:a5:0e:87:65:2b:46:ca:2e:e0:96:a6:41:63:9b:38:58:28:
bd:e2:4b:e8:85:36:6e:f4:f0:78:b8:c2:04:3b:52:cb:be:bd:
55:8e:80:f8:f4:d3:d1:2c:a6:a7:cd:86:c5:ca:d4:11:78:5c:
8e:c5:b7:89:3f:b3:1b:c8:14:ca:4d:ca:b2:a3:a4:4c:c6:37:
54:02:57:6a:fe:cb:5d:38:b6:9c:b0:c4:52:53:2e:ee:24:77:
82:4a:f3:c8:4f:7a:52:c3:2c:ef:a7:1f:9b:6f:26:05:5a:8f:
f9:0a:e7:9c:6e:a9:1d:c8:14:8c:dc:a4:2f:d8:23:2c:00:1c:
4d:32:77:41:99:d0:47:9d:74:bd:38:5a:c8:05:1b:6a:5b:dc:
13:a0:79:b0:80:5b:4a:bb:ee:ac:f5:45:f1:af:86:2b:72:1a:
bb:86:27:a3:d0:7a:86:24:82:9e:cf:d4:ed:48:81:68:67:84:
f7:ca:03:68:43:18:0c:dc:67:8c:93:c1:b0:df:be:4f:34:15:
29:ad:05:9f:69:d4:02:2e:4a:81:2e:a5:ce:09:10:79:ae:23:
b9:bb:4d:f9:be:49:32:5c:35:ad:56:03:3d:31:4e:d7:35:4b:
1a:71:8b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 05:28:17 2025 by rpki-client