Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
File: W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft (raw, json)
Hash identifier: xiIdJ5IaW0YsRpBKuigZ2SAIGwzbAqvipXg6yZmGncU=
Subject key identifier: AD:44:40:20:DB:13:DE:68:6E:2F:35:BE:1F:4D:1B:0F:19:25:84:D9
Authority key identifier: 5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
Certificate issuer: /CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Certificate serial: 01990038362CE9CC88102179EDD5DCCC22D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
Manifest number: 040A
Signing time: Sun 31 Aug 2025 13:01:47 +0000
Manifest this update: Sun 31 Aug 2025 13:01:47 +0000
Manifest next update: Mon 01 Sep 2025 13:01:47 +0000
Files and hashes: 1: D11OUUhDT5UjGqOO2sYVKlSZfd0.roa (hash: 1HSM7rlxpcn34ZRTxOgco4d9oki6ca3htijNuPzC2SI=)
2: W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl (hash: Of3bwNRMYtRhaLAlFm5WG0If0Ft0Si8Mz0odn5KPGb0=)
3: sscr1AKks234H4_aH9W5QOyjBo0.roa (hash: QpgjlQcIAUxRiyA26HjeU1kRMWG1ZaRrrHu8xWpWD0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Sep 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:00:38:36:2c:e9:cc:88:10:21:79:ed:d5:dc:cc:22:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Validity
Not Before: Aug 31 13:01:47 2025 GMT
Not After : Sep 1 13:01:47 2025 GMT
Subject: CN=ad444020db13de686e2f35be1f4d1b0f192584d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3e:b4:4c:4c:7c:db:1c:1c:33:1c:16:9b:f1:
51:26:c9:59:90:8b:88:c2:3d:8a:ec:01:e4:a5:74:
8a:11:1b:d1:77:29:1c:6a:09:19:26:d6:4f:7a:9c:
d3:5b:7e:82:8d:c1:61:7b:75:f5:4c:45:74:74:80:
c2:60:d9:65:9f:56:dc:76:ba:f8:dc:b1:d6:5c:8f:
82:cc:9f:c3:93:25:5a:5f:6e:b1:4b:bd:f9:53:d0:
35:0f:95:be:85:18:97:48:1e:71:f9:17:f9:cc:9e:
26:41:53:7f:6f:92:e9:c8:5b:fd:55:fd:9d:2f:5a:
04:0f:ce:e0:eb:82:f2:f0:a8:d8:65:28:cc:21:3c:
e2:1c:c3:2f:ec:79:a4:58:3e:17:36:19:7a:7d:0e:
9a:06:c9:51:9a:64:6e:bd:d3:18:12:48:95:ce:bd:
4d:8c:a2:74:31:54:d7:c1:89:cd:18:9f:cb:24:e1:
68:7c:e9:82:b8:6c:38:e3:b7:91:c4:59:7a:1e:11:
12:30:5b:eb:2e:a0:95:08:67:b0:39:1b:eb:8e:3d:
b6:dc:eb:64:8f:a5:96:1f:71:2b:91:9b:92:dc:df:
20:d2:c3:cb:36:b4:d2:a2:89:2f:31:40:51:0d:75:
a1:d1:4f:ac:67:78:f8:62:b0:a9:ac:6f:e8:d8:be:
fe:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:44:40:20:DB:13:DE:68:6E:2F:35:BE:1F:4D:1B:0F:19:25:84:D9
X509v3 Authority Key Identifier:
keyid:5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:99:f0:fd:56:de:23:65:79:57:f3:32:2b:b7:f3:e3:fe:7d:
bf:d6:86:61:f9:aa:6b:78:cc:23:45:57:06:90:02:e1:b3:97:
4c:92:57:7b:6b:ab:db:2d:5b:84:0f:0a:c5:1c:5e:33:03:cc:
5e:fd:d1:7c:8a:7c:e3:90:8c:f5:02:27:e1:cd:10:ac:24:cc:
21:1a:cb:90:6a:08:a0:7e:a2:32:ba:da:ae:71:6c:9b:dc:9f:
d7:58:04:5d:c5:fd:f9:89:92:22:98:80:14:cc:6d:a2:7d:42:
ff:e3:02:c3:56:fd:c7:80:2f:0b:85:7d:59:ee:b7:76:a3:f0:
7c:06:af:f3:e1:e7:89:c7:36:63:44:9a:1c:43:f7:55:7b:fb:
60:49:99:f6:39:68:14:78:56:8c:b5:2f:c7:cf:cc:8c:dc:6c:
b4:52:e0:af:8e:eb:54:10:ca:10:81:ce:ba:60:a7:0c:12:a2:
b5:ac:6c:d2:47:73:d7:45:f3:3e:f8:e0:b1:f8:34:e8:3c:f1:
13:87:64:87:af:f3:d4:24:51:8b:07:1a:db:d5:77:cd:9d:60:
93:58:fb:40:e2:9b:c7:e0:c2:28:6d:a0:73:fe:29:6e:42:d3:
32:eb:8e:d6:47:ff:1a:5e:58:b3:95:99:cd:e0:f7:f3:d9:53:
5c:fd:76:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 17:55:36 2025 by rpki-client