Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
File: WyxHDbJENILhlSOVOnjB7woWlHk.mft (raw, json)
Hash identifier: bexYn/n2lVJeKvgfUXknmf0CUsFD7eMSXwee8oEzNqQ=
Subject key identifier: A6:A7:31:5E:98:DD:AD:C0:80:96:FE:42:88:EB:A2:FF:0D:0A:E3:3F
Authority key identifier: 5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
Certificate issuer: /CN=5b2c470db2443482e19523953a78c1ef0a169479
Certificate serial: 01987F79234B9C3F7B6F2CEBA26A3A1FB00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
Manifest number: 0DBC
Signing time: Wed 06 Aug 2025 13:01:41 +0000
Manifest this update: Wed 06 Aug 2025 13:01:41 +0000
Manifest next update: Thu 07 Aug 2025 13:01:41 +0000
Files and hashes: 1: 0AdevnLlsxFU0_MXijL2HLDuliU.roa (hash: Oq6mu5Hbl5chx/r3WVWbX/YQvEZQoJ2rWVh4OUcVSO0=)
2: WyxHDbJENILhlSOVOnjB7woWlHk.crl (hash: ySm8L0vLA+AjgdYm+Uawc5aR6jjjEl9u3Ag8BDaeG/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:23:4b:9c:3f:7b:6f:2c:eb:a2:6a:3a:1f:b0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2c470db2443482e19523953a78c1ef0a169479
Validity
Not Before: Aug 6 13:01:41 2025 GMT
Not After : Aug 7 13:01:41 2025 GMT
Subject: CN=a6a7315e98ddadc08096fe4288eba2ff0d0ae33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:2d:05:d7:41:66:e1:e1:4c:e4:bb:61:5c:
0c:cd:91:97:e7:05:dd:53:27:ea:b2:13:bc:bc:a3:
cd:9f:a1:d4:fb:d3:cd:03:fb:3a:6c:80:80:fe:c9:
17:a4:dd:d5:71:f6:3b:4a:48:41:1d:10:ad:4b:1d:
66:3a:b9:92:35:6b:af:63:e6:a5:e6:ff:06:e6:ab:
8b:d7:ce:1f:3e:af:d7:2a:d1:da:58:74:42:65:07:
e3:8a:d3:29:59:9e:db:5d:0f:23:2e:e2:c3:ab:55:
c9:0e:70:e5:bc:47:3d:8e:f2:c3:9f:93:64:d3:65:
bc:b3:c0:94:4a:41:fb:fc:ce:d6:96:c1:e5:89:a2:
ae:90:37:11:6f:aa:61:a9:d7:96:34:b3:27:ed:c9:
50:36:ba:95:14:7a:ec:f5:84:5d:12:03:c7:43:10:
a5:a6:be:4d:e8:1b:bf:e3:9c:2a:39:7e:79:41:c9:
5b:1e:b8:63:9a:81:22:3c:2c:48:f0:c0:c2:7a:c4:
b9:71:6c:2e:84:45:b1:52:81:d7:cf:fa:a8:29:df:
a4:52:3c:16:96:38:ba:f0:21:9e:ee:72:49:c6:76:
48:16:84:d2:29:e8:4b:c1:88:83:ad:69:ab:d2:fe:
31:29:3a:22:66:70:e8:ad:0e:6f:f0:6a:a7:34:51:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A7:31:5E:98:DD:AD:C0:80:96:FE:42:88:EB:A2:FF:0D:0A:E3:3F
X509v3 Authority Key Identifier:
keyid:5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7e:4b:20:0e:1a:96:89:e2:b7:10:f4:f2:45:0a:db:da:ca:
1a:eb:b5:6c:0f:31:8d:4c:e4:2b:eb:80:8b:ff:53:59:8d:ce:
81:68:97:75:62:87:b2:b1:d4:2f:eb:99:ce:2f:e3:c9:ab:8e:
74:cc:95:d6:f9:36:18:fb:e7:33:a3:ee:4c:7d:fa:22:3f:68:
1c:11:c6:21:85:11:f6:17:fd:61:dc:fa:b0:d5:64:3f:29:4e:
31:a4:e8:10:a9:8d:a6:09:4d:c4:56:9b:bd:1f:69:6d:9a:5e:
25:72:f6:58:36:ad:c8:d8:14:8f:c5:85:40:eb:81:8d:5f:87:
08:59:89:c7:3a:26:a4:4b:a8:c4:f3:1f:23:9f:c4:b8:64:36:
6f:e7:fa:1e:62:d8:3d:7e:e7:ec:56:c0:b7:ed:81:06:50:f6:
c0:99:da:60:23:4d:60:7f:c1:59:d5:95:46:22:17:94:c9:3d:
5f:db:7c:81:87:f6:a1:5e:aa:68:2f:83:4b:7a:36:67:d7:df:
d5:0a:56:f9:e4:59:d9:ea:ec:69:31:39:39:6e:8c:11:0d:5b:
da:f6:7b:b1:35:4e:1e:a8:f7:72:2f:e0:1f:f8:5d:b5:ba:c3:
67:fd:ed:ec:63:bb:50:24:8b:10:90:1d:8a:aa:2a:c3:88:34:
8e:e0:21:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:41 2025 by rpki-client