Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
File: W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft (raw, json)
Hash identifier: P+A1yXZM2zluCMKq1+dArx+loCOxdWw+E87p/uHIUL4=
Subject key identifier: 2B:A4:E8:3E:B8:B2:07:F7:9E:EA:07:6C:6E:40:9D:A7:5F:55:0E:45
Authority key identifier: 5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
Certificate issuer: /CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Certificate serial: 0198CCBA9DFC57B884BF214E9D28945CC0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
Manifest number: 0BE7
Signing time: Thu 21 Aug 2025 13:03:58 +0000
Manifest this update: Thu 21 Aug 2025 13:03:58 +0000
Manifest next update: Fri 22 Aug 2025 13:03:58 +0000
Files and hashes: 1: 6Ij32bY1nBHX7vkCzgQ3qR10RDM.roa (hash: S+nJqkN01ff0FHv6Vz2ODAn9dbe51mqTXffZ1Idn4oU=)
2: W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl (hash: zjPkQSU511sEgmAG4yR1llZguySttn1z1G4G2LbR1PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:ba:9d:fc:57:b8:84:bf:21:4e:9d:28:94:5c:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Validity
Not Before: Aug 21 13:03:58 2025 GMT
Not After : Aug 22 13:03:58 2025 GMT
Subject: CN=2ba4e83eb8b207f79eea076c6e409da75f550e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:ef:ef:09:f2:ec:21:de:a6:95:01:ff:66:
55:13:3d:d6:ac:3d:00:62:00:af:2a:7f:8f:db:14:
d1:dc:e1:43:bf:aa:0f:6f:32:bd:98:20:8e:d7:87:
40:73:45:27:b1:ab:77:cc:b1:84:cb:31:0f:8a:c5:
d4:58:72:c9:70:58:8b:12:d5:7b:8c:af:76:d5:55:
29:5b:17:66:c9:a0:b1:4c:4a:4f:bb:9a:2d:06:45:
6e:b6:90:44:54:55:bd:18:01:ab:ab:6f:2a:7d:a0:
d5:09:30:8f:f0:19:fd:59:c4:9c:38:7a:dd:cb:f0:
c6:90:82:ba:6c:3c:76:a6:1a:7e:47:9c:86:e4:1a:
e5:4a:cf:bf:23:52:fc:cb:00:0a:44:ea:28:d5:ef:
b7:1c:76:1f:91:4c:19:22:63:ec:dd:1a:96:70:d4:
1e:6c:8a:35:89:2c:db:7d:49:99:62:d1:3e:5e:8a:
b6:5c:ea:a4:78:47:4d:8c:c2:35:cf:82:e9:cd:67:
68:b8:fc:be:cd:77:b3:da:44:fb:fa:36:79:83:27:
54:40:94:8f:4c:92:c8:ac:cf:4e:d2:87:fa:c3:fa:
81:49:1e:b1:a8:6d:15:10:97:82:a2:61:37:12:e1:
d4:60:fa:f8:bc:03:2a:ca:6b:19:b7:7d:3e:49:8a:
f4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A4:E8:3E:B8:B2:07:F7:9E:EA:07:6C:6E:40:9D:A7:5F:55:0E:45
X509v3 Authority Key Identifier:
keyid:5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5e:7a:7f:0d:4c:25:23:07:b9:ce:1b:96:a8:96:f7:50:89:
7b:b4:57:86:48:40:f8:8a:fc:cc:10:a3:31:e8:e8:fa:dc:4a:
8f:a3:44:d7:19:26:27:8b:42:16:56:5e:3f:b6:d6:18:89:30:
e5:b4:12:77:e3:72:fa:5d:4e:13:2d:95:12:b4:b0:8c:be:b4:
00:46:1c:5b:2c:be:de:ce:a5:30:31:b8:f8:26:06:ea:7e:ca:
a4:78:03:10:31:02:da:a5:78:cd:07:31:c8:e1:57:91:29:0a:
8b:d5:af:05:96:69:a3:98:e1:9c:40:bd:8a:33:59:cb:4a:d7:
27:7a:b9:75:88:0c:0a:91:da:27:14:8e:34:ac:fb:af:fc:82:
8b:a9:28:54:0f:97:08:87:c0:3e:70:f2:f9:f4:82:9d:da:c3:
2f:4a:3b:49:e9:ef:ea:80:63:01:4c:a5:51:e5:c4:0e:9f:9e:
30:75:54:fb:08:47:a7:3c:0a:79:70:3d:b1:1b:6c:e8:99:82:
15:ce:27:f5:33:79:4f:23:96:ac:71:34:af:fe:8e:2f:e3:aa:
58:07:39:bb:71:24:48:0c:b6:a2:26:59:c8:38:e8:c7:41:80:
c9:c7:d9:b6:91:3f:eb:7c:42:89:87:0d:26:75:ee:e1:1e:3e:
0e:62:40:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 15:13:40 2025 by rpki-client