Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
File: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft (raw, json)
Hash identifier: 3Nw9/3yhmiiCO0uR29fsuVQoFCYax3x49JnicHgHo3o=
Subject key identifier: DA:04:B0:FF:7C:A9:43:0E:69:C4:43:F9:AF:DF:AD:AC:27:B8:B4:1A
Authority key identifier: 5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
Certificate issuer: /CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Certificate serial: 019873E2666D19FD7E15C423F4CDB25E219A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
Manifest number: 15A8
Signing time: Mon 04 Aug 2025 07:01:13 +0000
Manifest this update: Mon 04 Aug 2025 07:01:13 +0000
Manifest next update: Tue 05 Aug 2025 07:01:13 +0000
Files and hashes: 1: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl (hash: Fr7HMbqZv6rJ2vXQzI6rJqtTMBzO/HOdOrguWDukMnM=)
2: cwNcFibEiknBhjZUsu5CDMCAHjU.roa (hash: uRGOj4tJKaLxVK1NmQ/cajMQwRP5s1agqok1B0mO3Is=)
3: ocfaSphrJL3xu-4-94X1BAg_eco.roa (hash: CMK1dG+CtJembHP9+sAk12iQiNKdSn83yhz9BkvkSQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:66:6d:19:fd:7e:15:c4:23:f4:cd:b2:5e:21:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Validity
Not Before: Aug 4 07:01:13 2025 GMT
Not After : Aug 5 07:01:13 2025 GMT
Subject: CN=da04b0ff7ca9430e69c443f9afdfadac27b8b41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:82:6c:58:ec:f5:28:28:33:cc:a5:62:3c:78:
a2:cf:a4:4d:f3:14:d2:b2:e2:b8:16:dd:1d:1f:ae:
34:a4:4d:5b:89:bb:bd:35:32:bb:64:8c:31:4e:3a:
10:2b:d1:0e:d0:26:ec:6c:f2:08:ee:4e:69:b6:11:
9d:df:32:0e:22:52:07:a7:fe:21:52:94:af:77:d7:
8b:7d:4b:5c:ab:81:ef:c3:50:a8:48:bb:11:9e:32:
c4:f6:de:2d:7a:25:8e:4e:d5:3e:d0:ba:ed:7d:1d:
fc:55:82:88:ed:d8:66:1f:9d:96:1b:3a:07:fa:5f:
87:be:52:19:2f:11:32:a7:c3:71:32:14:18:26:0c:
1f:eb:03:a8:45:39:bc:66:be:ba:d5:78:97:0c:a8:
5e:de:22:35:ea:44:f9:3e:7a:66:6d:3c:2b:56:46:
d1:f2:3f:6a:05:e3:96:0d:35:cc:f4:55:49:10:14:
c1:3c:4c:7b:3f:7b:a3:d2:aa:84:22:f7:2d:bd:02:
1f:ac:60:8a:ae:c2:a7:05:62:cd:f5:3e:92:9c:be:
1e:55:10:bc:50:db:5e:99:93:a6:71:1a:5b:56:67:
9f:6e:f2:03:35:d2:73:0d:70:73:04:e8:3d:4d:a1:
71:07:ff:9e:7e:e6:32:33:74:ed:61:90:c7:44:4f:
45:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:04:B0:FF:7C:A9:43:0E:69:C4:43:F9:AF:DF:AD:AC:27:B8:B4:1A
X509v3 Authority Key Identifier:
keyid:5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:83:07:c5:65:63:be:47:a5:83:81:a7:63:a9:da:3a:a6:d8:
43:16:5b:9a:89:04:e8:d9:f6:34:56:07:b0:a9:96:28:ca:d8:
3f:01:f8:b1:fb:12:70:20:b4:c0:a2:03:51:13:92:63:e3:c4:
0f:8b:5b:06:7e:8d:9b:ba:73:53:10:95:c7:65:3c:dc:2c:14:
df:aa:71:3b:7c:e2:4e:50:db:51:8a:55:eb:e1:c1:da:bf:28:
29:d5:dc:8b:14:31:e8:51:b4:85:ea:d7:0a:02:09:79:19:49:
33:89:c4:95:f0:45:2e:dc:19:fa:06:18:b2:d1:97:89:ea:0d:
0c:cd:8f:ca:43:78:72:f6:ac:7d:f0:4b:5f:3b:df:db:9a:a3:
7d:0f:d2:55:27:b5:7e:ff:82:e2:5f:7c:4d:52:76:17:02:ec:
ad:13:78:dd:78:78:02:33:2b:dd:b1:cf:7d:af:8b:fa:a0:8e:
23:df:96:9a:ad:77:98:89:a1:25:01:ea:34:e9:59:11:70:17:
27:98:67:da:fc:78:25:7f:cb:96:1d:80:e6:8c:92:6f:83:38:
f9:72:6b:7f:e0:99:7c:9e:54:10:ee:a6:54:61:14:49:1e:09:
c5:84:de:1d:75:4a:03:04:86:6a:5e:a6:4a:c3:71:90:d4:ea:
29:ac:df:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:44 2025 by rpki-client