
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
File: W5YiHahfbIqAcDV2aDrSw5PyO8w.mft (raw, json)
Hash identifier: Cn8rknDLbJhFwlOEQ3eeeste+I6sdHrW6Zhwan0ISI8=
Subject key identifier: 39:DB:A0:C6:91:A6:21:EA:F6:00:FE:69:F4:78:17:6A:AC:C7:45:FD
Authority key identifier: 5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC
Certificate issuer: /CN=5b96221da85f6c8a80703576683ad2c393f23bcc
Certificate serial: 019933EE521F7EAE80965A15A34A78FA6192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
Manifest number: 0625
Signing time: Wed 10 Sep 2025 14:01:20 +0000
Manifest this update: Wed 10 Sep 2025 14:01:20 +0000
Manifest next update: Thu 11 Sep 2025 14:01:20 +0000
Files and hashes: 1: W5YiHahfbIqAcDV2aDrSw5PyO8w.crl (hash: 7EQ6zYe4ujenkLCihAAbpP4r+0Xw5XI+1SOh4BiWwm8=)
2: aC3k6Pc-VbYaZAExCYMf-r0FJik.roa (hash: sjHut+jtNlmiU2BIEntfi+uVsFkRaMGa8qqarc0jF00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ee:52:1f:7e:ae:80:96:5a:15:a3:4a:78:fa:61:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b96221da85f6c8a80703576683ad2c393f23bcc
Validity
Not Before: Sep 10 14:01:20 2025 GMT
Not After : Sep 11 14:01:20 2025 GMT
Subject: CN=39dba0c691a621eaf600fe69f478176aacc745fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:03:31:6e:81:20:db:3e:c5:e9:d0:4c:88:
88:99:3a:0d:79:fe:a5:3d:39:38:e0:b3:5c:d7:2c:
43:81:fc:a2:9d:10:0a:1c:57:33:73:ce:eb:3c:68:
aa:48:ff:15:73:c0:34:41:aa:ad:b2:37:0d:b0:00:
25:c2:10:71:ba:51:c2:2c:20:5f:b9:ac:1d:19:06:
96:c8:03:d2:2a:96:9d:6d:fd:a1:69:b4:4a:3f:49:
8b:22:d0:cb:de:c2:b4:06:3e:c6:1f:f2:85:05:81:
80:d3:0e:76:bb:f9:68:ec:c1:b0:76:54:34:32:a8:
b2:cd:75:50:e6:32:bc:ff:06:b6:3d:24:d7:4c:d9:
86:e2:45:3a:74:1e:dc:65:de:2b:23:d7:29:ce:41:
fd:c3:b9:ab:3d:4c:d0:68:e6:ab:58:5d:3b:93:9e:
48:a0:cb:e8:ad:23:86:1c:b8:fd:2e:88:51:b0:4c:
3d:81:d4:72:7c:21:6d:26:cd:cf:8e:ff:11:a1:19:
0a:7d:01:db:73:05:51:65:c8:2a:04:ce:e1:27:01:
d2:05:37:5d:78:f2:b5:71:b3:e8:cd:15:e6:3e:b8:
84:96:b9:f7:69:c8:12:44:bd:fc:3a:22:24:b6:e2:
64:41:20:46:61:8b:48:a0:a0:3c:74:03:cb:8f:6c:
f9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DB:A0:C6:91:A6:21:EA:F6:00:FE:69:F4:78:17:6A:AC:C7:45:FD
X509v3 Authority Key Identifier:
keyid:5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:da:fd:cd:e0:7e:56:6c:6a:3b:a8:42:50:19:cc:d9:60:b5:
b0:9c:c2:2c:04:97:d2:21:68:a1:d1:43:d2:48:6f:be:11:9d:
af:eb:5e:17:80:cb:41:74:c9:b8:e0:82:9e:70:a7:14:12:f2:
d4:19:a2:3c:00:e6:37:67:54:4b:56:1d:5d:4b:8e:c0:23:38:
90:66:1d:55:e5:90:8e:39:a3:7f:34:ea:ee:ad:4c:99:ba:86:
f8:1b:bb:a2:2b:c5:16:f5:b0:81:26:fd:20:98:6e:85:c3:4f:
02:06:44:06:61:e0:ff:4b:49:76:7d:1e:f0:88:58:91:c6:9a:
0f:f5:98:89:d2:57:78:25:85:88:96:ab:1a:bd:b1:95:47:7d:
45:10:63:2e:26:de:62:44:70:ef:0e:3f:9b:fd:1c:f9:59:fd:
a6:5e:e7:d0:bd:3f:c3:a1:83:a3:0e:8c:fa:14:29:24:11:fb:
b6:87:67:64:1f:af:b7:bf:fc:13:bc:9c:89:d3:b8:ab:99:84:
bd:81:d8:22:1d:7b:9a:be:30:64:8e:6a:7e:31:af:78:dc:5f:
e4:80:4d:eb:56:28:12:b8:c0:76:19:d6:4b:75:66:7f:92:44:
71:83:39:46:99:d7:81:80:3f:5f:46:2a:e3:2d:6f:d5:ba:44:
a3:9c:e3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 16:07:06 2025 by rpki-client