Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
File: W-j-iCe9xgk1VQngyegOqyH5zcM.mft (raw, json)
Hash identifier: NQXPJhES0/nTRLIRQcFggQx7Yw36N37pSh/w6Vp73ZY=
Subject key identifier: A2:3A:A0:91:91:3B:8B:A6:D4:18:9C:38:7C:02:95:EC:57:38:E3:37
Authority key identifier: 5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3
Certificate issuer: /CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
Certificate serial: 019887D69840985C4057116AC116FE867043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
Manifest number: 0A5B
Signing time: Fri 08 Aug 2025 04:00:44 +0000
Manifest this update: Fri 08 Aug 2025 04:00:44 +0000
Manifest next update: Sat 09 Aug 2025 04:00:44 +0000
Files and hashes: 1: W-j-iCe9xgk1VQngyegOqyH5zcM.crl (hash: igyEa4Yw7e4B/Nxfge7HIKb0ZR+V42vBMRQQU3upqnk=)
2: y8OPBhGIRdnRfns2wStFC7bDr4o.roa (hash: J10wvmClCuf9chJ2RyDKTPdaCtqaxXBdRLqjfTXblX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d6:98:40:98:5c:40:57:11:6a:c1:16:fe:86:70:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
Validity
Not Before: Aug 8 04:00:44 2025 GMT
Not After : Aug 9 04:00:44 2025 GMT
Subject: CN=a23aa091913b8ba6d4189c387c0295ec5738e337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:2f:43:05:86:ba:63:c4:2d:8f:de:60:5d:
7f:ac:8e:84:c8:ee:73:ad:e3:63:6b:17:09:f1:1b:
9b:20:1a:41:7a:98:d4:00:02:68:b4:ef:11:69:d4:
01:9d:3e:64:80:43:fc:ba:81:68:ef:4d:38:3a:02:
45:b8:6d:6e:a0:6e:d7:33:6c:ee:49:61:33:30:27:
3e:12:f8:b2:f0:8d:90:9b:6d:3b:57:47:33:0e:a7:
22:c5:f7:7c:a9:7f:f3:6d:7a:4d:3e:35:93:ee:26:
6c:74:da:a2:32:b4:6b:48:ae:0d:8e:9e:e8:54:3e:
f7:10:9d:5c:52:70:ad:fc:3d:17:be:1f:fa:22:0c:
fa:17:4b:5f:21:47:fe:a4:a8:fa:a1:ee:48:10:58:
ba:17:69:c5:50:76:8f:91:e5:e8:56:1b:67:73:d1:
0d:0f:30:16:91:83:0b:8b:a6:ae:6a:df:b9:71:c8:
64:3d:0e:2b:82:21:d6:64:50:5c:b7:d1:5e:6c:44:
53:18:97:65:93:51:3a:c3:df:b5:f9:1f:9a:60:a5:
b9:ef:0f:5e:a1:70:40:94:69:7c:60:db:07:98:4f:
64:4f:9b:fa:5a:16:54:d9:f6:b1:a2:f8:de:2b:9e:
1f:cb:27:6b:82:be:a4:71:87:02:7f:0b:b1:a2:50:
01:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3A:A0:91:91:3B:8B:A6:D4:18:9C:38:7C:02:95:EC:57:38:E3:37
X509v3 Authority Key Identifier:
keyid:5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bc:c3:1e:99:1a:b2:5f:7a:33:37:32:9d:5f:cf:41:0e:62:
76:b2:89:62:6e:cc:8c:a1:0d:5e:42:d5:35:d9:1f:20:7e:bc:
57:1c:44:9d:39:63:c5:42:1f:0b:6e:be:f2:b5:5b:a3:7d:75:
ca:bc:3e:ab:7b:93:31:2c:70:f3:24:b7:ef:96:19:e2:da:16:
80:90:66:01:95:3d:19:e4:78:9e:81:82:bf:79:7c:3b:57:ae:
c4:17:27:b0:28:85:48:0f:dd:a5:54:64:e3:18:e3:64:9c:28:
80:58:bf:91:1f:f2:75:0f:00:8f:43:7c:e9:fb:ff:ba:9e:98:
08:35:86:91:d1:b7:9b:6c:f6:87:ac:5a:c6:e3:34:94:66:24:
b6:43:71:04:4c:fe:71:5e:7f:59:5d:0c:32:1f:82:32:a0:c3:
52:3f:57:9b:d7:51:32:b0:4d:33:b8:7d:04:08:38:ed:e6:57:
2e:f5:be:0f:21:20:61:16:0d:51:bd:c9:61:e6:f2:7f:0a:ba:
7f:d4:1a:39:b6:c4:4f:72:86:c8:f8:7a:dd:a1:73:76:7f:83:
d5:8f:41:a5:44:e2:16:99:db:ae:d4:a8:be:44:76:ff:01:79:
fe:24:59:cf:6a:c3:6c:b5:fb:ee:de:2d:c3:bc:56:77:e8:b2:
df:d0:ef:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:51:50 2025 by rpki-client