Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier: RJGw8ZeJnoyuTWMRAtWl/qnVHcmYdP96RiLDNj9GM6s=
Subject key identifier: B6:A1:D6:A9:F1:EF:D2:87:79:6C:4B:C7:2B:F6:6E:DD:35:DF:60:F8
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial: 01993123C25BE3F06D497D8441A1EFBEDF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number: 0EA7
Signing time: Wed 10 Sep 2025 01:00:50 +0000
Manifest this update: Wed 10 Sep 2025 01:00:50 +0000
Manifest next update: Thu 11 Sep 2025 01:00:50 +0000
Files and hashes: 1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: G8TjZcEgcDkAm3gvn3TpjDpALcQ9TXthnqCe/YR7MMg=)
2: gRqe05O7FJ-3whaf6RiaMKovVHw.roa (hash: Amo4rFyICByEK7RCP/ax/RVJMXu+W6BkFpTvi0xsm7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:23:c2:5b:e3:f0:6d:49:7d:84:41:a1:ef:be:df:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Validity
Not Before: Sep 10 01:00:50 2025 GMT
Not After : Sep 11 01:00:50 2025 GMT
Subject: CN=b6a1d6a9f1efd287796c4bc72bf66edd35df60f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:9d:b1:69:48:9a:71:be:b6:a5:ff:fa:41:
6a:ed:6c:2d:0e:20:d5:ce:6c:da:26:f5:45:a9:20:
37:59:56:79:9a:da:e0:a1:2d:2e:77:ff:62:d9:17:
46:c7:f3:01:04:b9:95:e7:30:84:fe:70:11:cc:2a:
28:9f:3b:11:24:d6:ec:8c:ad:4f:14:3e:3d:3a:9e:
1c:7b:47:33:e6:8d:f6:38:c8:19:21:a7:6b:f2:ae:
a1:db:02:16:9d:0d:53:e5:42:14:58:7b:d4:fc:31:
9a:01:12:83:eb:25:ae:67:01:e8:45:4a:36:7d:3d:
ff:9f:8e:77:7b:1e:ed:f6:90:7d:0c:c6:86:6b:af:
f8:e6:78:4b:db:98:b5:00:d5:cc:e2:dc:9c:5d:63:
f9:67:c9:51:43:72:0d:43:95:1e:7e:65:70:2a:a9:
29:bd:d0:b3:b9:ea:85:a6:7d:68:69:f1:ff:83:95:
17:3b:ec:77:9f:3a:aa:34:be:5c:4a:90:bb:9e:6f:
74:f0:e2:ac:19:2c:7b:a8:54:b0:2e:21:8d:6c:95:
a0:d3:66:53:f5:68:82:1d:14:c3:d3:b0:9f:bd:f3:
64:ce:a3:f6:f8:5d:20:0d:f1:7c:8c:44:6b:34:ef:
79:1d:f5:70:ab:54:92:37:8e:f5:cf:2b:3b:12:27:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A1:D6:A9:F1:EF:D2:87:79:6C:4B:C7:2B:F6:6E:DD:35:DF:60:F8
X509v3 Authority Key Identifier:
keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:65:29:2c:2a:ec:3f:ff:07:d2:cd:a1:5b:55:ce:28:46:f0:
ea:b0:35:ad:99:b9:2b:d7:19:1e:0c:18:8a:91:ab:a0:85:ff:
7a:4c:88:7c:7d:91:55:44:5d:e4:f6:79:b7:5c:27:da:25:f7:
cb:b1:16:48:a2:49:73:69:bd:fe:a7:5d:03:8a:ba:61:ca:ff:
d7:62:d6:b3:96:fd:5b:a4:16:19:10:a4:35:ff:0e:31:1c:be:
d8:72:48:65:c0:50:4c:06:80:f6:98:00:ec:40:aa:ca:60:57:
a9:09:df:6a:92:cc:35:ed:d2:be:fe:dd:d7:b4:32:b8:c0:a0:
6b:91:42:68:de:9d:5c:6c:43:87:8c:5f:59:14:c2:67:59:8a:
f4:c5:83:9f:43:d4:93:c1:06:c6:10:ef:e6:52:ba:6b:28:41:
4d:f8:b5:e4:90:d8:ed:09:24:d8:c3:0e:0a:d3:e9:81:a8:f8:
5e:3f:4d:47:3c:3e:3b:e0:e8:04:22:f1:f1:f9:66:83:1b:fc:
c1:bb:d6:e6:3a:b2:fb:52:b7:bf:b8:45:d4:d6:bf:9c:aa:54:
e4:ad:c5:e8:79:d4:e6:24:64:f3:8c:f5:0f:b7:67:78:0e:ee:
3f:fd:a7:af:39:0a:2f:70:57:17:42:61:14:16:42:89:34:26:
7d:1f:d9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:21:29 2025 by rpki-client