Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
File: W20XjxOFEwa1Y03xWXFjGfTYJHg.mft (raw, json)
Hash identifier: JEGapcm1z8nc1RGJWm14rOoIc83JUFqImT3Bs3VcxNA=
Subject key identifier: 24:5B:5A:44:89:50:81:FD:43:97:79:6B:13:4E:B9:4E:08:47:0B:A2
Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78
Certificate issuer: /CN=5b6d178f13851306b5634df159716319f4d82478
Certificate serial: 019A13BAFAB02A3627E458BD866B5FEBEC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
Manifest number: 0D8A
Signing time: Fri 24 Oct 2025 01:00:12 +0000
Manifest this update: Fri 24 Oct 2025 01:00:12 +0000
Manifest next update: Sat 25 Oct 2025 01:00:12 +0000
Files and hashes: 1: 4Y2Nbo1_a6IBq8Cl0IDfGwKCP_M.roa (hash: 0bsJSEvzwH1XPIlPA10NL/s8qRTvdmZt752O+GQRDjw=)
2: W20XjxOFEwa1Y03xWXFjGfTYJHg.crl (hash: 65BZE1VqLrk0rZwP9r9x6dHFWoxSb73N0BrmP/lUp/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:ba:fa:b0:2a:36:27:e4:58:bd:86:6b:5f:eb:ec:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6d178f13851306b5634df159716319f4d82478
Validity
Not Before: Oct 24 01:00:12 2025 GMT
Not After : Oct 25 01:00:12 2025 GMT
Subject: CN=245b5a44895081fd4397796b134eb94e08470ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:bf:fa:01:54:1e:31:f1:1c:e7:e7:33:d1:
d8:2e:96:03:b8:ba:ad:64:48:e2:e2:68:68:c6:a1:
ca:30:6b:1f:98:5f:48:e6:df:51:ca:ed:41:2f:30:
49:3b:39:54:0c:34:33:49:87:19:08:de:ed:5a:33:
97:16:2e:e6:67:24:73:0d:a3:a2:24:19:34:7f:f9:
0b:e7:e1:24:b5:91:00:d8:83:c1:5b:cf:5f:6f:54:
e1:29:f6:31:d6:b2:2a:3f:48:4f:96:ff:2c:c6:4c:
d3:6c:70:06:17:ef:df:2f:bc:b9:b2:12:41:dc:fe:
91:08:76:10:a0:50:7d:78:0d:23:dd:2c:fa:80:0a:
b3:dc:e4:ae:48:c3:15:4e:e7:a3:fd:73:dc:51:d2:
2a:5f:ad:a8:23:8b:c8:a9:7e:04:9b:da:b0:d4:87:
c6:c0:5f:2e:0a:9e:09:5d:0b:db:af:b2:05:7f:f0:
87:52:94:63:b4:39:f9:fe:2e:c6:c3:74:04:da:43:
5d:b8:0a:74:b0:55:97:da:a0:22:ba:b5:cc:b3:7c:
26:02:04:53:19:57:0c:66:d2:64:a2:7a:5f:c2:eb:
c9:b4:e9:78:51:14:58:78:cf:ad:5c:5f:88:d4:e1:
c4:d2:12:00:86:cb:73:ca:55:cd:d3:c7:c2:bd:ff:
f2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5B:5A:44:89:50:81:FD:43:97:79:6B:13:4E:B9:4E:08:47:0B:A2
X509v3 Authority Key Identifier:
keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:97:bf:a4:a1:79:09:d8:1a:da:26:72:65:81:54:cb:99:b1:
5b:df:cb:79:fb:e9:2e:9b:6e:af:3a:b2:f8:47:3e:be:bb:41:
5c:57:32:c2:03:5d:1e:73:28:03:6b:c8:2f:e7:7f:97:aa:b6:
d0:b9:6f:22:51:9c:bb:79:5e:4f:2a:82:4c:b2:c0:42:3c:8b:
21:97:21:6b:00:a1:01:c2:69:1d:06:45:e9:05:eb:1d:16:88:
2d:56:1e:40:57:56:e5:e6:7e:fd:45:38:5b:81:17:bf:aa:b2:
ac:93:ac:4f:f2:92:12:41:54:a5:f4:43:26:95:34:69:26:03:
c5:b2:3e:4a:7c:77:87:9d:9b:1a:8a:8c:45:66:96:9f:28:17:
71:e1:73:aa:57:9f:25:c1:de:7f:bf:3a:01:76:27:f4:8f:23:
3e:13:c6:da:58:9e:3f:0e:12:11:f5:16:03:5d:5c:82:cd:1d:
32:8d:bc:74:3a:ba:61:f4:14:d4:32:11:b5:4d:75:cf:60:6f:
cd:40:94:29:c2:f2:85:ba:e9:23:4e:d3:97:fe:de:3f:69:df:
f1:50:5a:e1:a1:61:f9:2e:67:42:bb:2e:3c:35:fe:66:c8:d7:
7f:28:60:c9:4f:35:85:9c:5b:61:20:61:4a:ef:b0:05:54:f7:
9e:2d:ed:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:34:34 2025 by rpki-client