Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
File: W20XjxOFEwa1Y03xWXFjGfTYJHg.mft (raw, json)
Hash identifier: +PbwtiDA6kO6rKpQ3J381/b4qS6xqUYLmq+I4chxqF8=
Subject key identifier: 4C:D3:B2:F7:B6:B8:B1:6C:65:1B:7D:8D:5E:48:3A:9F:40:3F:EE:66
Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78
Certificate issuer: /CN=5b6d178f13851306b5634df159716319f4d82478
Certificate serial: 01991E78881E6E94BFF4DBFD967F21D737D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
Manifest number: 0D0B
Signing time: Sat 06 Sep 2025 10:00:39 +0000
Manifest this update: Sat 06 Sep 2025 10:00:39 +0000
Manifest next update: Sun 07 Sep 2025 10:00:39 +0000
Files and hashes: 1: 4Y2Nbo1_a6IBq8Cl0IDfGwKCP_M.roa (hash: 0bsJSEvzwH1XPIlPA10NL/s8qRTvdmZt752O+GQRDjw=)
2: W20XjxOFEwa1Y03xWXFjGfTYJHg.crl (hash: K6eVgaHLP3AysCQirJ7ib7Lv5lVr+2srtwJ0OV0Z5DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:78:88:1e:6e:94:bf:f4:db:fd:96:7f:21:d7:37:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6d178f13851306b5634df159716319f4d82478
Validity
Not Before: Sep 6 10:00:39 2025 GMT
Not After : Sep 7 10:00:39 2025 GMT
Subject: CN=4cd3b2f7b6b8b16c651b7d8d5e483a9f403fee66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:85:e5:f2:81:82:24:7d:71:3d:ab:80:4e:
32:e3:3e:34:99:f1:36:19:c4:b5:31:2f:a3:02:96:
2d:52:e8:c5:23:b0:9b:fa:84:91:c6:ed:e5:70:8a:
9b:0a:84:c3:d5:30:1f:82:ef:84:7e:a3:41:f7:d0:
cd:ae:1f:9d:f0:2d:86:af:7c:be:fb:69:88:71:6c:
da:ca:51:1e:f5:4f:f1:5e:e6:91:a1:63:9b:4a:f4:
59:e2:a6:18:3a:c7:1e:60:6b:50:82:47:0b:71:28:
7c:39:9c:89:5d:2c:80:36:92:0d:e8:67:b1:c4:bf:
59:36:84:ac:95:ce:b9:32:38:15:b8:47:a4:e3:89:
d0:b7:12:0f:b9:8b:fe:84:9b:65:5b:16:b5:be:42:
e7:c5:75:75:65:33:29:4f:30:c7:1c:8e:ca:16:88:
db:19:e0:82:b2:c6:6b:9b:30:78:25:97:db:a4:26:
f7:06:df:fb:e1:e0:b5:fd:69:3a:9d:98:fd:db:43:
91:0a:07:4d:81:f0:94:e1:b1:f8:4b:27:93:e4:aa:
d3:0f:85:75:30:11:16:11:e9:ff:31:a7:d1:07:a1:
52:87:2d:d1:0d:15:0e:2b:e6:c5:b5:8a:ad:ab:b0:
cd:7c:52:b0:39:ed:bf:02:e2:e6:ea:ad:4d:11:d7:
8d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D3:B2:F7:B6:B8:B1:6C:65:1B:7D:8D:5E:48:3A:9F:40:3F:EE:66
X509v3 Authority Key Identifier:
keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:9d:d1:c6:a0:d6:65:b0:4a:d1:1a:6e:6a:61:f7:b6:a7:b8:
a1:ab:71:8a:95:81:53:57:98:40:c2:3e:9c:18:4a:7a:e8:bb:
49:cf:0b:f2:a5:97:3e:cf:f1:5a:49:37:95:81:41:f1:32:a6:
58:a3:14:3f:aa:41:1d:2e:52:2d:d5:b2:c6:10:03:34:51:ce:
7d:49:83:a6:b4:89:03:09:e6:65:dd:f3:84:a8:e3:df:1a:4e:
f2:3c:dd:50:97:19:ac:20:ee:16:e7:99:8a:b2:18:40:75:04:
39:da:1a:9e:78:b2:37:0e:99:e0:34:15:27:b3:4e:f5:2c:cf:
16:27:3a:7e:dc:35:7b:db:66:fc:f2:5b:37:ad:38:9a:b4:30:
1a:3d:ed:90:8a:93:21:be:92:6a:43:75:ff:4a:50:08:fc:94:
b2:6b:88:ed:88:61:fd:1c:4d:77:c5:e5:18:d3:e4:26:b5:01:
29:f2:ba:86:74:b4:e8:d2:50:bf:40:c8:3d:00:68:fe:d0:2e:
a7:9c:4f:3f:fe:e2:17:31:72:d0:04:04:04:f6:ed:64:2c:77:
df:2e:83:38:2b:50:e2:65:7a:e4:1d:1c:5c:74:85:40:e7:0a:
b3:ad:c0:5c:d1:c7:45:5d:b0:0e:94:f6:48:e6:a8:14:7d:fc:
55:d9:8f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:50:18 2025 by rpki-client