Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
File: W8mmyFynpWV7noroCGXRLvgWagM.mft (raw, json)
Hash identifier: nvcA6eZj7gyCnkK39icTOe4TxgB6HEGV9qTTWAs1kn8=
Subject key identifier: D3:8D:84:D8:9E:9D:48:94:BC:70:1A:5F:C1:36:CF:A2:44:28:DD:E1
Authority key identifier: 5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
Certificate issuer: /CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Certificate serial: 0199225577595293A16C87FAFD072D03C18F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
Manifest number: 0CB8
Signing time: Sun 07 Sep 2025 04:00:50 +0000
Manifest this update: Sun 07 Sep 2025 04:00:50 +0000
Manifest next update: Mon 08 Sep 2025 04:00:50 +0000
Files and hashes: 1: DkAig3sreL5BEr4m7B4017Dqunc.roa (hash: os6hbiNRGL8Q/b1fbO8kbiQWOa/7AJzjZXaqV/37DEw=)
2: W8mmyFynpWV7noroCGXRLvgWagM.crl (hash: y0ESOdLiSSPUq4XFCm82OcsRsbuFK+4CKsQv35XneZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:77:59:52:93:a1:6c:87:fa:fd:07:2d:03:c1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Validity
Not Before: Sep 7 04:00:50 2025 GMT
Not After : Sep 8 04:00:50 2025 GMT
Subject: CN=d38d84d89e9d4894bc701a5fc136cfa24428dde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:6a:3d:c3:a6:11:20:71:52:06:e5:d7:86:
3d:4a:69:30:4c:17:39:f9:dd:9d:28:13:2d:ba:ef:
a4:4b:c4:b0:6e:a2:0c:20:35:5c:ff:0d:42:2e:37:
ef:08:2f:1d:f8:36:b2:91:57:b4:a3:f5:b2:88:4b:
f7:7c:77:99:52:e8:3d:b1:5c:7e:5f:b3:c9:ca:fe:
ab:dc:1f:d2:11:21:d2:b0:c5:61:b6:74:bf:06:e9:
3b:c8:28:a5:c4:83:68:f9:f7:75:bf:13:4c:72:e2:
34:fe:ed:80:03:3d:c1:bf:ad:8d:6b:d4:7c:08:3e:
b2:55:3b:ad:1a:d6:df:5b:a3:7e:4c:a9:c9:a2:44:
dc:04:8c:41:c0:c6:42:69:97:89:1e:bc:37:e9:bf:
d1:e5:94:29:f3:32:37:c9:c2:54:4e:ed:b7:10:c4:
3f:c6:44:40:cd:d7:23:dc:a4:65:16:9d:ce:e6:0a:
3c:57:e4:a5:95:56:e4:e1:83:74:d9:4b:48:8d:7a:
a8:c2:33:49:d1:8e:06:48:8e:77:67:c2:e3:79:66:
cc:90:01:dd:28:74:70:be:b4:71:72:c3:76:e1:eb:
51:55:9f:f5:c5:cb:33:f7:c0:46:08:66:69:bf:aa:
77:b2:c0:58:0f:57:09:52:e1:a1:fb:57:39:14:ae:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8D:84:D8:9E:9D:48:94:BC:70:1A:5F:C1:36:CF:A2:44:28:DD:E1
X509v3 Authority Key Identifier:
keyid:5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fe:9f:ac:45:06:5d:2a:38:31:7e:2a:3f:bb:39:7b:67:40:
a2:77:ac:d0:9d:29:00:14:92:3f:3c:de:fa:27:f0:7a:40:0c:
4d:b6:68:2c:1e:57:12:b7:a6:2c:4c:6d:19:a4:be:25:c8:9f:
ae:de:d8:6d:f6:7f:cd:a5:69:0a:86:3d:6a:d4:3a:9d:fc:23:
63:96:fb:f1:8a:1a:eb:d6:73:cc:97:7f:f5:4b:31:9c:7e:05:
c8:a9:2d:ba:80:f6:6f:59:ba:fc:f2:da:d8:5c:41:b0:3a:a6:
b9:3c:35:49:c4:a7:74:72:f0:0d:fe:e4:19:0c:17:b9:35:b1:
76:60:28:15:eb:9a:f2:ee:cd:ed:44:9b:5c:69:a1:c1:91:81:
9e:27:30:a5:3c:54:ce:b9:9b:0a:fb:31:d3:d8:2b:cf:dd:4d:
2c:cb:15:07:da:f6:19:f3:ad:56:89:de:e2:b7:36:c1:0d:bc:
d2:7a:c7:59:0d:ab:ad:4a:8d:0f:d0:92:51:a2:4f:78:88:de:
60:da:2c:83:06:7e:de:a9:32:3e:af:31:fb:2e:2f:53:2b:b0:
21:c1:1d:e1:14:a7:25:e1:8e:cb:2e:b6:53:ed:56:1e:68:22:
07:07:47:48:9c:22:7d:cd:68:55:4a:c0:57:c7:5b:c1:d0:f7:
bd:8d:20:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:29 2025 by rpki-client