Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File: 9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier: xxWnTCKEvoc2Dss7ICTUzypQS5tDV32bugCdEqmkbpc=
Subject key identifier: 28:1B:BE:74:B0:2E:FA:F1:E8:55:1D:D6:FB:50:73:C2:71:D2:80:75
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer: /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial: 0198C610BA9BD943826785457B1155099DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number: 05DB
Signing time: Wed 20 Aug 2025 06:00:41 +0000
Manifest this update: Wed 20 Aug 2025 06:00:41 +0000
Manifest next update: Thu 21 Aug 2025 06:00:41 +0000
Files and hashes: 1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: VPu3UiwPfPBrhvlzV6etMuK3IB1SnhR7hsLyvfOvAFE=)
2: FK1-eXhRSe8ffp_S_lHbaTgBt8o.roa (hash: isewhw2bUh3V4X01VwpIosa0D4eXIb8LPC/N4oNejio=)
3: d9_S0MdBcLLQhVMY4GIXLkmlz3w.roa (hash: JIdW7E8RpIHlAxf+ndeNBtGoppjXWf7rJVf8yChsf7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:10:ba:9b:d9:43:82:67:85:45:7b:11:55:09:9d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f566016d878230128b58e279d661c195e6399588
Validity
Not Before: Aug 20 06:00:41 2025 GMT
Not After : Aug 21 06:00:41 2025 GMT
Subject: CN=281bbe74b02efaf1e8551dd6fb5073c271d28075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6b:9a:f9:cf:30:b6:df:ee:10:ec:0e:b7:2f:
c4:e5:4c:7c:33:cc:67:b9:76:97:06:90:d3:63:34:
db:a2:a9:a7:ad:5b:08:a0:1c:33:de:18:cd:c6:c0:
12:f7:58:34:2d:d7:e4:b1:1e:f7:c6:b5:b5:5d:2f:
18:2b:07:ad:6c:92:36:1b:cf:bd:a0:18:41:98:2b:
fa:08:a0:b9:c7:14:5d:6a:db:bc:5f:79:92:52:a1:
bc:93:9e:9d:f2:3a:04:ce:56:cb:aa:5a:d2:7e:8a:
58:54:7f:57:0a:46:6d:86:f2:10:45:b9:b2:15:96:
84:80:dd:dc:2e:91:75:3c:7c:cd:86:7a:9c:fd:af:
8d:a6:bd:fb:e5:17:6f:31:13:1d:f6:34:46:a2:1b:
6f:ab:0c:78:3d:e3:b4:2f:8c:84:c4:2c:7f:31:31:
ea:6b:83:1f:68:7e:76:72:e6:21:59:d1:28:56:bc:
8c:23:78:76:9b:41:6a:6a:7b:d1:3b:71:7f:de:c3:
db:76:ca:2d:6a:72:03:56:01:2b:e2:9b:18:ab:d1:
a4:d1:d0:a1:31:9b:a1:43:6c:15:ca:17:a0:ba:6b:
60:ef:25:9f:ef:a9:d0:e5:00:96:41:8c:5f:83:77:
46:02:f8:9f:65:e4:5c:87:ed:aa:94:f1:28:ac:db:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1B:BE:74:B0:2E:FA:F1:E8:55:1D:D6:FB:50:73:C2:71:D2:80:75
X509v3 Authority Key Identifier:
keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:33:24:6f:29:58:4d:52:37:b0:b3:1d:3b:84:78:85:fa:95:
75:3a:2e:e5:b4:f0:89:b6:50:8a:43:70:63:77:4a:3a:7d:c2:
06:25:c6:13:21:2c:82:a2:31:5a:4b:31:bd:cb:d6:eb:3f:94:
a5:ac:c0:5b:17:4a:3c:40:84:20:2f:b3:d6:19:87:98:23:94:
4c:9f:72:c3:61:6d:f5:fc:2d:ed:4f:e4:d5:97:34:6a:f9:fd:
2f:2a:5c:bd:69:4b:37:28:b7:4b:23:74:79:0b:dd:92:60:76:
b3:68:a1:72:c7:42:7b:f4:b5:64:18:45:55:9f:37:58:64:a7:
ce:a7:87:34:34:f6:85:d7:42:cd:d3:c9:17:e8:80:e3:90:aa:
de:6f:2b:65:1d:38:ab:1d:3f:7e:fb:2b:d5:cb:28:b1:84:d7:
8a:61:f4:f2:e1:3b:22:e8:7e:69:ef:b0:6c:d0:8f:ea:d9:f5:
b4:0e:38:c0:2d:fe:33:6b:d1:00:5b:ef:07:e0:e0:56:4a:d7:
48:95:a6:1c:d8:c9:8b:e4:0a:ee:1a:c3:67:19:a0:60:ee:6a:
f9:2f:62:a9:ae:87:ba:e3:9a:c4:72:b9:fb:f2:21:91:29:18:
94:52:94:55:c9:b7:5d:73:57:7e:d4:4b:a3:64:c0:97:40:4b:
fe:d3:8d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:18:39 2025 by rpki-client