Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
File: W4smxTL7xStd5nKrNXYdHH2X6yY.mft (raw, json)
Hash identifier: pxQ0Jv6ugnOCjqN7u/lT6c18bFIquGu295rk5nAoZl8=
Subject key identifier: 94:4C:81:C1:B6:13:92:4B:34:98:70:8F:AC:5C:65:ED:2D:56:D4:C4
Authority key identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26
Certificate issuer: /CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
Certificate serial: 01987487581978E19EDC97AE96FBCD35FFAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
Manifest number: CA
Signing time: Mon 04 Aug 2025 10:01:23 +0000
Manifest this update: Mon 04 Aug 2025 10:01:23 +0000
Manifest next update: Tue 05 Aug 2025 10:01:23 +0000
Files and hashes: 1: 7XMrXBUl5guh00C3od83p0sdL2E.roa (hash: s4K7G9zJkdgY7spJ3jJ5e9+1XNKqCaxgKeKuHtLUBSY=)
2: W4smxTL7xStd5nKrNXYdHH2X6yY.crl (hash: UTy6lmREjtnlvbQHNpRbO4ShAwU1Yzr1B1Fk0UgI2jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:58:19:78:e1:9e:dc:97:ae:96:fb:cd:35:ff:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
Validity
Not Before: Aug 4 10:01:23 2025 GMT
Not After : Aug 5 10:01:23 2025 GMT
Subject: CN=944c81c1b613924b3498708fac5c65ed2d56d4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:4b:dd:81:f3:80:61:01:0a:55:60:74:80:
0b:f6:92:2e:52:d4:20:ee:6a:47:5d:4e:03:f4:4d:
e0:4e:e1:e2:4a:7a:5d:c7:ad:78:b7:2f:3b:0b:20:
bf:5b:c1:cb:0b:00:0c:45:1b:dc:4c:8f:43:46:fa:
5f:c5:e4:03:28:81:11:b6:8d:a1:2c:fb:a0:d8:e9:
7a:d8:63:9c:6b:d2:bb:44:18:56:fe:17:05:35:3b:
c1:29:fa:d2:47:5a:d3:06:06:cc:fc:3c:82:18:33:
10:55:71:fc:32:76:06:18:17:cf:ba:51:e7:63:2a:
8a:57:75:d6:51:37:45:dc:d6:da:ab:d0:b9:f6:57:
99:e3:d6:23:a8:19:c6:bd:cd:40:70:7b:5b:93:01:
ee:4e:81:a6:a9:c1:df:cf:e1:93:5d:0a:fe:3d:da:
bf:58:e9:92:59:82:ad:92:0a:25:95:31:1f:9b:3d:
6d:c7:71:4a:fe:87:3c:41:27:2e:b3:f9:95:f9:ac:
fb:40:73:07:35:f5:f1:87:ce:a6:41:50:2c:9f:56:
bc:16:ca:82:d9:f6:59:a6:23:fd:ed:3b:6c:6d:4d:
9f:23:90:21:1f:b4:b7:06:29:fd:2f:0a:1b:8f:57:
27:56:02:59:ef:c8:21:bb:16:56:47:10:79:a6:42:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4C:81:C1:B6:13:92:4B:34:98:70:8F:AC:5C:65:ED:2D:56:D4:C4
X509v3 Authority Key Identifier:
keyid:5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:42:d9:c4:b4:05:d3:ea:b7:68:06:49:2b:35:cc:da:61:d1:
2f:90:ba:66:1e:52:63:a2:2a:81:a7:02:74:3c:d5:d0:f5:ff:
1b:b9:44:1b:4f:d8:ed:1c:9b:ee:08:79:2e:f8:2e:37:f5:22:
4f:62:64:c3:35:fd:ef:4d:50:6a:f6:96:b1:cb:cb:d5:f8:4e:
fa:ee:87:94:37:b3:50:e0:bf:86:18:e9:32:e0:6a:b0:fd:de:
d6:f0:bf:21:36:5f:dc:7b:55:b7:e7:99:60:78:5c:7d:a7:ae:
83:9f:26:41:d0:e8:20:88:e0:5f:33:7b:ec:44:be:21:86:41:
10:76:aa:a7:74:51:34:5b:89:4b:3a:b5:4c:df:a3:9d:26:97:
de:db:c7:47:8f:0f:92:2e:cf:d4:26:97:e9:aa:0c:d2:ef:ea:
e8:c5:78:31:0a:af:91:bd:5a:17:de:47:23:23:0a:44:1f:10:
8c:c1:38:1f:83:0b:cb:2e:28:cd:34:30:7c:b8:5f:97:c3:4f:
a0:bb:b5:52:4d:de:ce:98:4d:6e:0c:8e:3b:29:be:87:78:ed:
db:8b:d8:14:dd:08:35:0e:d5:55:ea:c4:85:80:c9:8a:8f:ff:
07:39:10:91:76:81:3e:c4:b7:fb:ab:4a:aa:3f:11:2f:d0:65:
80:e9:65:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:06:48 2025 by rpki-client