Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
File: W7HFcFXCnWafKJqfaPOSgjlCEyo.mft (raw, json)
Hash identifier: HVON1N+qwEJKLz6hixyYcV50jJQutKExWHB0zqbPT5E=
Subject key identifier: DE:33:BD:C6:51:E3:ED:53:3D:5E:74:15:CB:A4:C5:9A:72:3D:A7:F4
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial: 01993839CBE0218FB757ED087BC2E80BDC97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
Manifest number: 128A
Signing time: Thu 11 Sep 2025 10:02:15 +0000
Manifest this update: Thu 11 Sep 2025 10:02:15 +0000
Manifest next update: Fri 12 Sep 2025 10:02:15 +0000
Files and hashes: 1: 4DaFRyhphaevZU2yeo88GTb2ZWE.roa (hash: OEDhk/DEbdvUjBCo9g+h/wGJyG5A2KruYkh8mbV9XYs=)
2: W7HFcFXCnWafKJqfaPOSgjlCEyo.crl (hash: hYrJHUJ7R3T6p74/bKjGkXbK2qVRurXTDUzxB679S5I=)
3: oLD0eFUFYxck4v3i6OymPCRtKqc.roa (hash: d9IQhkXi9el+adqbpk+yqo7QWqWaJxfrg/LT1tEGEMY=)
4: uB1fsTN5xt9prk3FmqA_vfOk3V8.roa (hash: Xbk+Y99PsH3Ea8NbCtaJ5KS35ZMdZP+5pz4Y3JKvU0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 10:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:39:cb:e0:21:8f:b7:57:ed:08:7b:c2:e8:0b:dc:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
Validity
Not Before: Sep 11 10:02:15 2025 GMT
Not After : Sep 12 10:02:15 2025 GMT
Subject: CN=de33bdc651e3ed533d5e7415cba4c59a723da7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:4e:cc:c1:ad:fd:69:d3:f1:93:76:69:2a:
0c:07:e7:49:79:9e:52:97:7d:57:a0:5d:f6:b4:9f:
b7:99:a8:3b:33:15:ad:ed:9f:7d:e7:cb:57:1f:b9:
ab:c7:b7:37:05:cd:ff:4e:b6:34:9d:c4:2e:28:e2:
79:f9:17:28:0a:7e:d4:75:4c:51:6f:33:00:8b:19:
e1:f3:87:b9:e3:fa:94:3b:64:79:be:c4:c9:c9:57:
dc:f0:03:18:cb:9e:ea:da:32:47:4a:45:98:65:0f:
d5:d1:89:23:49:16:e9:37:94:0c:de:d9:a7:f9:f3:
6d:ad:44:d5:e8:17:1b:47:93:4c:c5:fc:4e:4e:d7:
1b:1c:5d:34:0c:5b:9b:d5:3c:d9:56:3e:92:ed:15:
7a:48:8a:e1:28:53:27:d3:17:6e:81:d8:83:99:76:
a5:c9:d2:01:9f:18:95:0f:44:46:fb:18:30:56:e0:
5f:5f:54:67:45:5c:dc:f0:07:c9:23:42:54:6a:42:
6a:79:24:4c:7b:28:50:2b:0a:e7:cd:bf:53:12:ef:
05:d2:2c:7d:1b:0f:d4:92:c5:26:5e:1e:fb:21:7c:
e6:b5:4d:fe:45:2c:e6:45:6e:05:01:3a:8f:93:11:
d3:ab:8f:99:17:31:b9:81:5d:33:63:e5:16:1c:2d:
6d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:33:BD:C6:51:E3:ED:53:3D:5E:74:15:CB:A4:C5:9A:72:3D:A7:F4
X509v3 Authority Key Identifier:
keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ef:fb:35:c2:90:e2:1a:a4:db:37:2d:91:89:4e:97:b0:dc:
99:a5:e9:39:c7:26:f7:a3:d8:d1:a3:c7:49:fe:53:cf:41:f4:
8d:92:c4:24:80:01:eb:b7:1d:48:9e:0b:77:fa:0a:d2:61:5c:
2d:b1:87:43:71:1f:67:28:fc:8e:d0:a8:f5:5d:8e:0d:47:a1:
db:6a:2e:6e:34:a8:da:ad:a4:0a:27:59:43:ba:2d:74:42:e7:
30:80:6c:b4:f8:10:29:47:57:14:d7:d1:65:c3:f6:61:ff:a7:
cf:8a:05:56:69:fa:03:67:3b:06:ce:87:8d:51:50:b2:5d:54:
d5:5b:ef:21:54:cb:af:ab:bc:31:a4:21:31:c7:ad:77:44:11:
1b:b3:80:83:63:5b:75:ed:1e:50:8c:97:b6:03:2c:6f:12:e6:
c9:be:10:49:49:b2:bb:ab:f9:a3:a5:1a:ac:8e:3e:59:8e:d3:
f8:a4:eb:71:6d:fd:e7:fb:8c:f1:12:e3:40:12:4f:d9:fc:94:
b1:d8:d7:f1:f8:49:47:7b:96:2e:ad:53:f8:dc:52:9f:98:33:
cf:ac:ad:ab:4b:b5:f1:c8:9e:8b:0a:2b:63:9c:d7:81:3e:b2:
38:3b:df:40:6d:05:30:e6:0c:df:df:3f:f3:76:0f:01:a6:42:
90:f6:19:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk4OcvgIY+3V+0Ie8LoC9yXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYjFjNTcwNTVjMjlkNjY5ZjI4OWE5ZjY4ZjM5MjgyMzk0
MjEzMmEwHhcNMjUwOTExMTAwMjE1WhcNMjUwOTEyMTAwMjE1WjAzMTEwLwYDVQQD
EyhkZTMzYmRjNjUxZTNlZDUzM2Q1ZTc0MTVjYmE0YzU5YTcyM2RhN2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl1OzMGt/WnT8ZN2aSoMB+dJeZ5S
l31XoF32tJ+3mag7MxWt7Z9958tXH7mrx7c3Bc3/TrY0ncQuKOJ5+RcoCn7UdUxR
bzMAixnh84e54/qUO2R5vsTJyVfc8AMYy57q2jJHSkWYZQ/V0YkjSRbpN5QM3tmn
+fNtrUTV6BcbR5NMxfxOTtcbHF00DFub1TzZVj6S7RV6SIrhKFMn0xdugdiDmXal
ydIBnxiVD0RG+xgwVuBfX1RnRVzc8AfJI0JUakJqeSRMeyhQKwrnzb9TEu8F0ix9
Gw/UksUmXh77IXzmtU3+RSzmRW4FATqPkxHTq4+ZFzG5gV0zY+UWHC1tTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4zvcZR4+1TPV50FcukxZpyPaf0MB8GA1UdIwQY
MBaAFFuxxXBVwp1mnyian2jzkoI5QhMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzdIRmNGWENuV2FmS0pxZmFQT1NnamxDRXlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84MjIzNzYtODA4YS00NjVjLWE4N2Yt
NWNlYWUxOWY5NGY5LzEvVzdIRmNGWENuV2FmS0pxZmFQT1NnamxDRXlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84MjIzNzYtODA4YS00NjVjLWE4N2YtNWNlYWUxOWY5NGY5
LzEvVzdIRmNGWENuV2FmS0pxZmFQT1NnamxDRXlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQe/7NcKQ
4hqk2zctkYlOl7DcmaXpOccm96PY0aPHSf5Tz0H0jZLEJIAB67cdSJ4Ld/oK0mFc
LbGHQ3EfZyj8jtCo9V2ODUeh22oubjSo2q2kCidZQ7otdELnMIBstPgQKUdXFNfR
ZcP2Yf+nz4oFVmn6A2c7Bs6HjVFQsl1U1VvvIVTLr6u8MaQhMcetd0QRG7OAg2Nb
de0eUIyXtgMsbxLmyb4QSUmyu6v5o6UarI4+WY7T+KTrcW395/uM8RLjQBJP2fyU
sdjX8fhJR3uWLq1T+NxSn5gzz6ytq0u18cieiworY5zXgT6yODvfQG0FMOYM398/
83YPAaZCkPYZUQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 16:28:06 2025 by rpki-client